Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/c7998427-90b8-38bf-84fb-66b85fa456d6.roa
File:                     c7998427-90b8-38bf-84fb-66b85fa456d6.roa (raw, json)
Hash identifier:          zaifLsR9eTI23L1IPnv8xC22GgASsd6tZ6ve3hjJN7I=
Subject key identifier:   40:BB:F0:FE:08:00:37:18:72:AB:30:5C:2E:E1:5A:63:6B:4D:C8:EA
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584D5243411A6AA7F214B2572720
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/c7998427-90b8-38bf-84fb-66b85fa456d6.roa
Signing time:             Sat 28 Mar 2026 19:13:19 +0000
ROA not before:           Sat 28 Mar 2026 19:13:19 +0000
ROA not after:            Fri 26 Jun 2026 19:13:19 +0000
asID:                     30036
IP address blocks:        97.64.239.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:52:43:41:1a:6a:a7:f2:14:b2:57:27:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Mar 28 19:13:19 2026 GMT
            Not After : Jun 26 19:13:19 2026 GMT
        Subject: CN=38d1dbbe-32a5-42ab-8f03-46c5f7e7ab09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:3f:bd:fb:d5:06:0f:49:11:53:04:b2:99:33:
                    32:91:36:0f:f3:27:62:2f:e9:1f:b2:b4:f5:8c:24:
                    9e:d3:0c:a0:7a:7a:45:2e:5d:c8:4e:18:3a:96:97:
                    6b:63:a0:13:fe:34:3f:5b:81:6d:8e:6c:0e:8b:71:
                    39:2a:2a:3f:3e:2b:bc:c2:53:0b:d4:5a:1a:76:e2:
                    3a:a2:82:29:5b:9e:3f:7a:55:ab:23:7c:86:d6:df:
                    c0:10:19:21:d2:3d:85:d2:dc:72:af:d6:e5:92:66:
                    49:30:46:70:73:4e:b3:58:f3:31:56:b7:be:d6:d3:
                    b8:d5:89:ac:3f:2e:63:4d:f3:bc:71:3b:dd:3c:ec:
                    85:b4:2e:1c:36:cb:91:14:a1:4d:39:61:ab:c8:d7:
                    20:a3:c4:1c:c2:d4:7e:2e:c7:c2:82:16:1c:09:f2:
                    55:93:ed:fd:dc:12:00:df:3a:24:ba:18:ef:f1:15:
                    9c:d0:46:9c:af:f8:be:e5:e6:45:b6:6f:a1:48:4e:
                    8d:c7:37:d3:2b:d7:06:cc:1e:2d:f7:79:30:ae:37:
                    f2:8a:b2:26:45:ab:3b:b5:af:b4:73:cc:d9:e2:91:
                    7c:b2:52:a2:b9:e4:0a:82:3c:bc:2c:ef:a7:ca:81:
                    48:28:cc:72:8d:55:0a:cd:13:64:68:30:33:f6:a7:
                    c7:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:BB:F0:FE:08:00:37:18:72:AB:30:5C:2E:E1:5A:63:6B:4D:C8:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/c7998427-90b8-38bf-84fb-66b85fa456d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.64.239.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:94:16:62:ba:0c:c7:54:7c:48:46:8f:8e:1e:a5:a0:71:6a:
         32:dd:26:c1:a7:17:82:2f:4e:0b:11:24:a2:b2:f2:08:55:2b:
         89:ca:a8:d2:26:51:b4:46:f7:2b:56:a8:9e:24:73:28:16:e0:
         6c:5f:9b:0d:f1:70:d2:78:16:68:b2:8b:8e:bb:2a:d9:0c:32:
         78:f4:4a:04:c2:8c:36:1e:c6:2e:bc:4d:32:ba:3a:bf:a0:32:
         f6:5f:37:2a:6d:14:ab:ff:6f:b8:03:3c:f2:89:c3:09:f4:18:
         89:41:55:00:9f:bd:4d:58:eb:9d:f2:37:4a:da:63:66:c2:64:
         c8:2c:b6:f0:c5:ff:55:93:12:92:1c:a7:65:1b:12:69:6a:6e:
         91:6a:3b:7a:5a:0b:5d:3b:88:14:ee:14:c3:91:1f:5c:7b:d9:
         db:fa:09:fc:88:90:42:f4:c8:b5:e0:c2:56:53:23:00:23:90:
         69:34:98:8b:f6:74:1b:ea:c5:ce:10:77:83:30:09:cf:21:7a:
         d9:b0:45:b3:6c:48:f6:23:f8:86:c3:eb:b2:a6:e4:e5:a2:ab:
         c4:d0:8b:f2:fc:80:3c:84:9e:a8:e8:78:42:d5:fb:3e:6c:44:
         87:23:41:f7:9c:d6:ce:48:e0:44:1c:fa:74:cf:86:23:53:85:
         51:97:bb:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:23:48 2026 by rpki-client