Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/d409082c-a41a-325d-adc1-c4919ccec761.roa
File:                     d409082c-a41a-325d-adc1-c4919ccec761.roa (raw, json)
Hash identifier:          n/9s1SaJgZWoOWgUVMm2XJauvo9jBO9tOfrQs0RfqNU=
Subject key identifier:   E2:98:FF:FC:E6:14:3C:9D:5A:F2:1F:AD:90:31:07:2D:D0:AA:CD:61
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584D52433F6727A599FDEEAB6C00
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/d409082c-a41a-325d-adc1-c4919ccec761.roa
Signing time:             Sat 28 Mar 2026 19:13:19 +0000
ROA not before:           Sat 28 Mar 2026 19:13:19 +0000
ROA not after:            Fri 26 Jun 2026 19:13:19 +0000
asID:                     30036
IP address blocks:        97.64.227.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:52:43:3f:67:27:a5:99:fd:ee:ab:6c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Mar 28 19:13:19 2026 GMT
            Not After : Jun 26 19:13:19 2026 GMT
        Subject: CN=10ffa122-f5a2-49ce-9fdd-a9b2b7a19f4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:38:ef:28:ba:f2:f4:ec:2c:fb:2c:be:eb:47:
                    5d:91:3e:6b:a8:b4:09:ea:90:c4:a7:81:c6:9c:f7:
                    ae:a0:88:9a:d8:92:c1:bf:99:cb:7d:38:5e:44:96:
                    53:16:61:18:4b:f9:fd:3d:de:a4:43:c1:cb:a8:87:
                    96:25:6a:4b:39:b4:72:65:20:8c:54:d7:de:e1:33:
                    24:54:8f:43:27:27:e4:d4:32:3f:8b:db:c8:62:4a:
                    a6:e2:5f:62:9b:4c:ce:91:4c:33:09:61:33:f0:72:
                    93:fe:cc:f7:8e:fd:00:72:d3:86:00:89:1a:d5:a8:
                    24:54:38:d8:b3:89:38:80:01:52:64:05:bd:0b:8b:
                    15:b6:82:b6:52:aa:62:b1:49:81:67:49:3b:bc:b2:
                    fd:6f:94:3d:bc:b9:92:52:bc:7b:3f:c1:ac:e7:6f:
                    f6:47:73:ae:b3:fb:fe:85:9c:9f:df:03:d5:8d:3d:
                    04:65:a4:92:0d:80:ee:ec:32:4c:d7:9e:db:48:3d:
                    78:b4:2f:34:a6:90:b3:10:60:37:bb:3c:c4:53:89:
                    88:82:fd:2c:f0:4e:61:58:56:14:2c:8c:5b:4f:32:
                    08:35:29:01:6c:dd:c3:7d:9e:54:1e:db:00:4a:f6:
                    7a:4d:72:00:54:7f:cd:da:30:57:ab:90:cf:9c:ca:
                    12:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:98:FF:FC:E6:14:3C:9D:5A:F2:1F:AD:90:31:07:2D:D0:AA:CD:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/d409082c-a41a-325d-adc1-c4919ccec761.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.64.227.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:66:6e:1c:59:ec:a7:32:b9:dd:ef:fb:a4:b1:40:f2:6e:d8:
         c6:ee:54:6f:bc:03:ad:56:0a:aa:61:84:e5:99:b8:75:5c:33:
         c1:2e:df:86:91:70:fc:ef:f4:27:15:9e:7e:6c:e8:89:2a:74:
         05:02:43:f4:2e:76:b7:73:d3:0d:31:bf:6a:1c:0b:b0:c1:6f:
         ad:a7:2e:7e:2f:60:0e:2a:6e:2e:20:9e:5a:95:98:31:f6:e1:
         1e:15:5b:e2:6c:52:4b:62:b9:a4:e4:14:16:c8:68:04:b6:64:
         ec:4d:3f:ad:e0:04:0d:b8:99:b0:de:74:e6:96:28:ae:ff:c9:
         9a:f1:0d:40:4e:9b:98:06:9f:6d:89:3b:a9:2d:fc:a1:d9:8c:
         1e:4b:f4:40:db:00:91:b7:01:07:2b:88:8f:eb:87:5c:77:31:
         30:db:ca:64:a7:4b:3c:14:7f:56:7b:66:83:e2:71:1d:11:7e:
         5a:b9:58:f7:f2:79:29:ca:79:af:6e:06:a8:57:d8:56:3a:e6:
         5c:5f:26:25:3c:78:86:95:c9:66:cb:a9:87:ee:0d:83:1e:94:
         37:49:8a:cc:d1:48:f3:79:cf:46:b5:2a:b2:33:8d:e5:67:ea:
         4c:65:c6:ee:78:e1:4f:a5:63:ea:02:aa:0d:b7:06:88:49:59:
         eb:4b:9d:c3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1SQz9nJ6WZ/e6rbAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5
YTE1MB4XDTI2MDMyODE5MTMxOVoXDTI2MDYyNjE5MTMxOVowLzEtMCsGA1UEAxMk
MTBmZmExMjItZjVhMi00OWNlLTlmZGQtYTliMmI3YTE5ZjRlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqjjvKLry9Ows+yy+60ddkT5rqLQJ6pDEp4HG
nPeuoIia2JLBv5nLfTheRJZTFmEYS/n9Pd6kQ8HLqIeWJWpLObRyZSCMVNfe4TMk
VI9DJyfk1DI/i9vIYkqm4l9im0zOkUwzCWEz8HKT/sz3jv0ActOGAIka1agkVDjY
s4k4gAFSZAW9C4sVtoK2UqpisUmBZ0k7vLL9b5Q9vLmSUrx7P8Gs52/2R3Ous/v+
hZyf3wPVjT0EZaSSDYDu7DJM157bSD14tC80ppCzEGA3uzzEU4mIgv0s8E5hWFYU
LIxbTzIINSkBbN3DfZ5UHtsASvZ6TXIAVH/N2jBXq5DPnMoShQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOKY//zmFDydWvIfrZAxBy3Qqs1hMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw
Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvZDQwOTA4MmMtYTQxYS0z
MjVkLWFkYzEtYzQ5MTljY2VjNzYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi
OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4
OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3
NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYUDjMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEZmbhxZ7Kcyud3v+6SxQPJu2MbuVG+8A61WCqphhOWZuHVcM8Eu34aR
cPzv9CcVnn5s6IkqdAUCQ/Qudrdz0w0xv2ocC7DBb62nLn4vYA4qbi4gnlqVmDH2
4R4VW+JsUktiuaTkFBbIaAS2ZOxNP63gBA24mbDedOaWKK7/yZrxDUBOm5gGn22J
O6kt/KHZjB5L9EDbAJG3AQcriI/rh1x3MTDbymSnSzwUf1Z7ZoPicR0Rflq5WPfy
eSnKea9uBqhX2FY65lxfJiU8eIaVyWbLqYfuDYMelDdJiszRSPN5z0a1KrIzjeVn
6kxlxu544U+lY+oCqg23BohJWetLncM=
-----END CERTIFICATE-----
Generated at Fri Apr 17 14:36:20 2026 by rpki-client