Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/07a684ac-b483-3e24-9976-7fabee6769e4.roa
File:                     07a684ac-b483-3e24-9976-7fabee6769e4.roa (raw, json)
Hash identifier:          m4ALCFuTTtH1BqURg67yRuX55uIZSaY3QT1lZkB937I=
Subject key identifier:   C9:7C:7C:1E:B4:CE:71:60:E5:BA:FC:F3:63:C5:04:AA:23:98:24:9C
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584B92DCD74AEC7787A6166F5F80
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/07a684ac-b483-3e24-9976-7fabee6769e4.roa
Signing time:             Sun 19 Oct 2025 13:00:39 +0000
ROA not before:           Sun 19 Oct 2025 13:00:39 +0000
ROA not after:            Sat 17 Jan 2026 14:00:39 +0000
asID:                     30036
IP address blocks:        97.64.184.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:92:dc:d7:4a:ec:77:87:a6:16:6f:5f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Oct 19 13:00:39 2025 GMT
            Not After : Jan 17 14:00:39 2026 GMT
        Subject: CN=0d767517-2c0d-4154-93be-49a61e4081e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:69:7e:82:15:fd:92:49:2c:e9:97:fa:64:3b:
                    97:c8:45:19:fa:33:cb:8d:5b:fd:4b:ee:02:5e:ca:
                    dd:bc:b4:10:d4:ec:23:d3:d5:8c:82:bc:60:eb:19:
                    38:ef:77:42:77:15:a9:15:bd:13:00:22:bd:9f:31:
                    80:80:12:a0:92:6c:08:ab:dc:1b:63:01:fd:a0:fb:
                    98:59:fa:8e:d5:f1:c3:3c:0a:e1:d1:5e:59:5e:e7:
                    43:04:73:86:4a:38:f2:f5:73:fd:2f:fb:aa:d3:49:
                    af:65:7f:66:e9:f3:fa:03:79:4d:c5:31:ca:80:76:
                    38:25:6b:50:1c:7c:18:32:86:15:f3:61:80:db:91:
                    6b:50:e6:4b:b7:0d:20:9a:4c:d6:55:ae:67:5b:ad:
                    3f:9d:17:33:ea:7d:0a:b1:4b:2f:06:15:cf:40:37:
                    72:ed:df:6c:71:10:bb:6b:63:19:66:69:a2:64:a6:
                    1f:72:92:9f:00:b4:65:20:5a:15:22:2c:68:4c:d3:
                    19:3d:37:99:d4:e1:f0:52:ae:b5:3b:96:c4:b8:22:
                    25:2d:0d:20:13:af:8e:e6:32:77:24:de:7c:33:cc:
                    1c:dc:21:97:8f:cd:a6:c9:92:01:ee:bd:fc:6f:3e:
                    7b:ab:3f:fd:0b:39:95:fa:c9:98:e6:ab:45:f9:81:
                    35:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:7C:7C:1E:B4:CE:71:60:E5:BA:FC:F3:63:C5:04:AA:23:98:24:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/07a684ac-b483-3e24-9976-7fabee6769e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.64.184.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:07:97:76:b1:cb:20:05:df:dd:ed:a7:78:ad:b8:4d:87:cb:
         a2:4f:66:e3:7f:53:60:dc:d8:9b:d1:b6:b4:92:62:31:0d:94:
         9a:b7:31:cb:81:88:2c:79:0d:f0:d0:d0:6f:bd:a4:52:dc:40:
         ec:56:e0:1c:39:55:fe:d5:42:a4:75:a5:b8:76:4b:00:04:62:
         87:a0:39:2f:5e:fd:e2:0d:f7:e8:0e:06:ae:92:87:35:ac:22:
         86:6b:e1:b0:19:d1:cc:49:3c:15:c6:02:c1:0c:72:9b:af:1d:
         4c:6a:84:9a:86:32:07:ec:93:d2:74:84:0f:6b:56:ec:08:37:
         73:ea:1c:ce:78:f0:2b:0f:64:6b:0a:82:c2:41:f8:57:2e:b2:
         c7:b8:52:f7:97:5f:d4:03:24:cd:3d:8a:09:77:9a:ed:87:0c:
         4f:54:82:b7:82:f8:8b:7d:f6:06:df:03:11:81:0e:9b:ed:58:
         bb:fe:db:05:4a:09:99:d9:a9:e1:5a:c7:14:a6:5d:cb:0d:29:
         c6:2f:15:44:db:e2:53:8b:3d:e4:ed:48:69:5d:da:99:35:4a:
         4f:c6:8f:e2:b2:03:eb:34:97:34:09:58:7b:a2:93:2f:97:6a:
         eb:56:55:a1:98:f3:50:a3:24:be:30:3a:d2:6a:65:76:46:62:
         a8:4d:95:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:19:47 2025 by rpki-client