Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/efd221cd-be8f-335f-a197-adbb68940a3a.roa
File:                     efd221cd-be8f-335f-a197-adbb68940a3a.roa (raw, json)
Hash identifier:          67JcxCNQFkz/buxVGAhcUlfTK+zbbFoow5LI1MtGbQU=
Subject key identifier:   91:85:75:86:49:9D:87:AB:28:FD:25:35:00:7B:8E:82:AB:D1:2F:6D
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584AB4EF023C7A5079F65CBEFC34
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/efd221cd-be8f-335f-a197-adbb68940a3a.roa
Signing time:             Fri 01 Aug 2025 01:00:31 +0000
ROA not before:           Fri 01 Aug 2025 01:00:31 +0000
ROA not after:            Thu 30 Oct 2025 01:00:31 +0000
asID:                     30036
IP address blocks:        97.64.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b4:ef:02:3c:7a:50:79:f6:5c:be:fc:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Aug  1 01:00:31 2025 GMT
            Not After : Oct 30 01:00:31 2025 GMT
        Subject: CN=de858c46-2341-4686-9ec8-e15e0497e4c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:b3:2c:c7:fd:bb:66:c4:bd:a7:42:6d:3f:fa:
                    db:2e:bf:59:65:12:b1:f2:a2:8b:8b:8a:d7:ea:f3:
                    6f:90:73:ef:b6:a1:6b:7d:d7:dc:91:56:18:70:b4:
                    67:3b:51:f6:39:8e:a0:d8:31:dc:9e:01:9e:f1:89:
                    a3:d6:3d:a8:75:1d:98:fc:3d:a9:d3:02:07:2c:86:
                    63:d5:26:75:53:ee:e0:e3:b0:4f:ad:46:c8:37:cd:
                    00:88:ab:44:00:2a:db:f7:5c:a5:3f:ec:4d:34:bd:
                    b7:7b:7f:0f:e4:bd:74:75:20:19:a1:bd:03:5c:ce:
                    c3:f8:12:d6:b6:5e:d6:8e:4d:5d:65:29:7e:9f:82:
                    ef:99:d9:4c:e2:13:04:b0:b6:14:13:d6:fb:5d:3b:
                    09:0f:2e:54:0a:0f:41:8c:3f:82:b5:a0:6b:c9:bb:
                    40:d7:e8:09:f5:21:08:7a:78:47:3c:21:9d:86:94:
                    f1:e4:4c:1d:dc:3e:95:5b:c0:fc:90:b6:a8:18:d9:
                    b0:c8:2d:90:52:c1:07:0d:5e:ff:03:1f:0b:54:44:
                    bc:40:7c:f3:57:2d:1c:74:28:77:48:86:24:57:85:
                    84:0f:28:a1:da:fa:2e:fc:15:ac:e3:07:e6:eb:11:
                    bb:a3:08:b3:6b:83:e7:a2:e9:f0:21:bf:4b:65:9f:
                    70:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:85:75:86:49:9D:87:AB:28:FD:25:35:00:7B:8E:82:AB:D1:2F:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/efd221cd-be8f-335f-a197-adbb68940a3a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.64.128.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:73:f3:8e:d8:37:47:59:d6:9b:5c:14:11:ff:7d:28:b1:31:
         a7:d9:2d:d2:8c:2a:37:4e:b5:4a:21:26:ff:b6:24:9c:1b:00:
         97:08:05:f8:36:34:40:c4:ba:36:65:f2:64:18:c3:90:36:00:
         b0:5b:6d:6b:e6:b9:4d:17:39:c7:2a:e7:09:13:a3:bc:15:0d:
         ba:f5:72:eb:b2:76:61:8a:07:c5:d3:63:8d:d7:71:00:1e:b2:
         f1:3d:5a:d9:61:92:cd:93:5e:52:19:6c:ae:a3:96:af:1c:ab:
         85:3c:2b:88:8b:81:cd:99:07:96:8c:23:dd:0b:3f:8b:85:8b:
         86:32:f6:03:13:8c:83:c7:00:b0:4f:6a:b8:80:75:76:24:fa:
         34:ee:9f:f3:f9:da:e2:f0:9b:d2:ef:b9:35:ab:62:3a:73:f7:
         1c:9e:fc:5c:64:cd:e2:26:c3:12:2f:fe:65:fa:e9:d2:8d:8a:
         9b:34:9a:e1:eb:4a:b6:13:6c:7e:0e:0d:7e:5b:7a:84:b9:13:
         3e:80:33:66:de:28:83:c3:d6:36:72:96:b4:64:b8:13:db:1a:
         25:ef:10:cf:58:e9:ca:c6:f1:f0:29:23:50:f5:5c:dd:b0:bd:
         a4:21:30:83:7d:70:f1:c6:44:e8:c6:b5:a2:3f:8a:e1:fa:1c:
         4e:79:1f:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:23:22 2025 by rpki-client