Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/c3576258-b614-3b21-8d5b-359116d3ac3b.roa
File:                     c3576258-b614-3b21-8d5b-359116d3ac3b.roa (raw, json)
Hash identifier:          6vWi5bkCO86oGhw91piLPdAuNRHlZVTKfUZ/AzWKgeM=
Subject key identifier:   64:26:88:36:2A:19:1A:AD:40:27:EF:3F:A9:8C:06:20:81:37:3A:57
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584D55BA41CD393F18CA389C4A00
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/c3576258-b614-3b21-8d5b-359116d3ac3b.roa
Signing time:             Mon 30 Mar 2026 01:00:23 +0000
ROA not before:           Mon 30 Mar 2026 01:00:23 +0000
ROA not after:            Sun 28 Jun 2026 01:00:23 +0000
asID:                     30036
IP address blocks:        97.64.136.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:55:ba:41:cd:39:3f:18:ca:38:9c:4a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Mar 30 01:00:23 2026 GMT
            Not After : Jun 28 01:00:23 2026 GMT
        Subject: CN=82e62c5f-63f9-4cb0-a10f-a4690f29120f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:f5:d2:d3:2a:d0:a2:0a:5c:69:ac:5c:58:f0:
                    ea:00:f2:62:a9:f9:de:41:9d:45:61:63:23:41:3c:
                    d3:b2:97:94:9e:d4:a3:2c:b9:63:51:46:5a:dd:d6:
                    c2:b7:8c:a7:39:b5:2d:b5:7c:34:99:d1:aa:5a:74:
                    22:d8:47:20:2d:22:ae:bc:a3:5e:02:19:7e:36:1b:
                    e9:c6:c8:83:e4:4f:b9:d6:2f:e9:c7:ee:94:95:86:
                    ac:f5:2f:95:24:6a:c4:14:39:b0:75:23:4f:0f:a4:
                    0a:05:b9:7d:6d:28:29:f7:ab:ce:e0:b3:6f:92:4d:
                    59:02:19:82:64:a1:7a:b5:a4:04:57:39:ac:fe:b2:
                    6a:dd:e1:08:d5:a2:5c:42:0d:cc:24:d5:46:b6:6f:
                    af:71:2f:47:df:bc:07:09:0d:f4:f0:e6:a4:3d:92:
                    bc:44:79:6c:2a:a7:88:9a:42:26:ce:45:7b:be:fe:
                    e4:33:2c:fb:97:ba:1b:9b:72:7b:80:40:a6:d4:d6:
                    18:c0:23:bb:30:b0:62:91:b2:ad:38:09:2a:75:05:
                    d5:8e:52:2d:c0:86:cf:9a:c1:f1:48:9d:b4:f8:a9:
                    e2:87:e5:a4:08:6a:a1:67:89:ca:78:4a:e7:a3:4f:
                    a7:9b:57:ad:ed:68:f2:19:ae:3a:83:21:cc:03:17:
                    0d:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:26:88:36:2A:19:1A:AD:40:27:EF:3F:A9:8C:06:20:81:37:3A:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/c3576258-b614-3b21-8d5b-359116d3ac3b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.64.136.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:6a:44:ba:4b:36:9f:51:86:9c:bd:e7:30:7d:8b:a8:f8:bd:
         c3:78:73:f2:a7:ef:a7:dd:9e:f7:34:8b:16:d1:3b:79:d1:b0:
         72:3a:7f:9f:18:5c:cc:f3:5e:a2:3a:b0:98:57:7d:36:11:a5:
         c6:55:a5:47:12:ff:e0:57:ba:ac:06:97:42:4d:c6:88:a2:ce:
         a0:58:dc:26:eb:9b:20:c5:45:41:e8:e4:fb:5d:0c:95:3c:30:
         ca:62:ce:fc:f4:5a:74:4f:1f:72:fe:f0:42:a7:8a:29:20:40:
         78:d9:9c:20:b1:b6:ae:90:87:d2:8a:78:22:40:ea:1e:32:52:
         8e:cf:78:0d:f3:da:58:3f:bc:69:f3:a9:da:42:03:bf:d4:d8:
         56:d4:94:5e:31:a2:13:15:6d:42:17:ae:c5:af:39:cc:5a:f2:
         b7:f7:15:d7:ec:95:b0:10:73:62:5f:87:12:58:85:0c:e5:19:
         74:2b:67:2e:2d:9c:9f:d2:a3:24:b4:05:a4:26:bd:b1:85:53:
         1b:4c:66:26:d8:45:50:bc:10:ef:7c:b1:2a:b1:9e:02:74:80:
         e1:7f:24:54:7d:38:73:45:a0:fa:55:3f:2e:d2:76:8a:1c:cf:
         09:a2:fb:0f:d0:d5:c4:1d:ec:0f:29:d9:f2:5f:d1:9b:02:78:
         63:ba:b2:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:26:06 2026 by rpki-client