Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/3d11981b-8982-37fc-a501-187ff3b75521.roa
File:                     3d11981b-8982-37fc-a501-187ff3b75521.roa (raw, json)
Hash identifier:          8ZtwqyW6bFFbBCv5zDIcbXv4OzNGrX5w0SOsk5ybmuc=
Subject key identifier:   C2:F1:4A:7F:01:F3:92:36:B5:F3:C8:82:14:20:97:3A:E1:2B:4F:4B
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584B92DD904A8032A2D0A2A71840
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/3d11981b-8982-37fc-a501-187ff3b75521.roa
Signing time:             Sun 19 Oct 2025 13:00:39 +0000
ROA not before:           Sun 19 Oct 2025 13:00:39 +0000
ROA not after:            Sat 17 Jan 2026 14:00:39 +0000
asID:                     30036
IP address blocks:        97.64.217.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:92:dd:90:4a:80:32:a2:d0:a2:a7:18:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Oct 19 13:00:39 2025 GMT
            Not After : Jan 17 14:00:39 2026 GMT
        Subject: CN=d2dbcaa5-54da-4cc6-9d4b-3d688cdf5acd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:c0:33:0f:8d:fc:9a:e8:92:99:71:c3:cd:3b:
                    a7:3b:a8:b7:45:d5:81:12:62:d9:01:61:45:1c:07:
                    7c:5f:27:21:e0:5d:f0:01:9d:59:47:13:4c:b6:2c:
                    d4:59:b2:3a:bc:19:fc:01:e2:53:b3:06:8a:0f:80:
                    23:63:34:c1:03:61:06:c6:79:13:81:e7:79:b9:c9:
                    1b:b9:5b:cf:65:e7:b6:e7:7a:16:94:d3:03:de:2d:
                    36:9d:a3:39:6c:7a:79:ea:98:c6:85:10:e6:e1:79:
                    a0:73:2e:f4:46:dc:ec:16:eb:43:df:d2:a1:22:3a:
                    8d:6f:54:4a:67:f1:1c:b6:bf:8f:d1:94:f6:33:4c:
                    61:a9:80:2f:fa:f8:ab:bf:0f:f1:3a:7e:29:91:f5:
                    0e:94:3a:c3:ef:e0:5e:49:1a:69:3a:6b:bd:fe:a8:
                    ab:fa:06:fb:98:5e:c1:91:0b:d3:f1:e6:0a:39:80:
                    67:86:42:ea:8f:02:3f:48:cd:0b:55:95:ae:6e:5b:
                    dd:73:3a:78:50:ed:71:20:6f:e9:e9:65:d1:b8:e5:
                    83:16:0f:a3:d4:70:de:bd:cb:61:df:ed:29:c3:f2:
                    6d:79:29:6d:19:80:05:09:c3:b5:66:12:6b:6b:7a:
                    39:e8:2c:96:f4:e3:58:b1:e9:49:ad:18:82:4d:96:
                    f5:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:F1:4A:7F:01:F3:92:36:B5:F3:C8:82:14:20:97:3A:E1:2B:4F:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/3d11981b-8982-37fc-a501-187ff3b75521.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.64.217.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:e4:73:e7:d3:7b:c1:6e:12:a2:0b:0d:4a:f1:ee:13:2f:32:
         ee:3a:83:0f:3f:43:3a:41:65:6c:e7:0e:4b:74:83:7e:c9:bc:
         ca:e8:ee:3e:d3:20:1c:f2:78:e6:78:10:4f:97:76:86:9c:83:
         5d:16:b5:d6:c2:1a:31:1b:ea:03:4f:6c:82:a4:5b:24:dc:a2:
         6d:1c:18:cc:ae:6e:af:ed:e6:48:ac:b9:6f:91:e9:f8:2e:1c:
         1d:e2:65:cc:e3:44:1d:92:13:6c:77:27:38:c8:8c:10:6f:dd:
         a8:c1:98:72:7f:43:27:46:fa:5a:03:7c:ba:cf:ff:1c:40:2e:
         04:c8:62:61:24:ac:a0:3f:f7:35:01:51:0d:a9:6c:eb:5e:d0:
         3f:53:02:fc:df:d4:29:7a:09:52:ee:8e:de:58:66:86:c1:41:
         31:31:46:ca:9f:32:a4:3d:11:9b:e1:1d:c0:1a:9b:0e:be:ad:
         4a:f6:6b:fb:1e:2c:21:86:8b:5b:39:3a:5a:89:38:61:46:ca:
         15:41:09:d7:f0:99:4f:52:bb:e9:12:38:8d:2a:d8:62:04:f4:
         e1:16:3b:14:92:a6:13:71:47:2f:54:45:2b:d5:ba:7c:9b:a0:
         58:c2:31:93:3d:4a:cf:4d:f3:5e:48:95:00:d6:8c:a5:bd:b8:
         52:d3:df:31
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuS3ZBKgDKi0KKnGEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5
YTE1MB4XDTI1MTAxOTEzMDAzOVoXDTI2MDExNzE0MDAzOVowLzEtMCsGA1UEAxMk
ZDJkYmNhYTUtNTRkYS00Y2M2LTlkNGItM2Q2ODhjZGY1YWNkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiMAzD438muiSmXHDzTunO6i3RdWBEmLZAWFF
HAd8Xych4F3wAZ1ZRxNMtizUWbI6vBn8AeJTswaKD4AjYzTBA2EGxnkTged5uckb
uVvPZee253oWlNMD3i02naM5bHp56pjGhRDm4Xmgcy70RtzsFutD39KhIjqNb1RK
Z/Ectr+P0ZT2M0xhqYAv+virvw/xOn4pkfUOlDrD7+BeSRppOmu9/qir+gb7mF7B
kQvT8eYKOYBnhkLqjwI/SM0LVZWublvdczp4UO1xIG/p6WXRuOWDFg+j1HDevcth
3+0pw/JteSltGYAFCcO1ZhJra3o56CyW9ONYselJrRiCTZb1hwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMLxSn8B85I2tfPIghQglzrhK09LMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw
Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvM2QxMTk4MWItODk4Mi0z
N2ZjLWE1MDEtMTg3ZmYzYjc1NTIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi
OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4
OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3
NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYUDZMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAATkc+fTe8FuEqILDUrx7hMvMu46gw8/QzpBZWznDkt0g37JvMro7j7T
IBzyeOZ4EE+Xdoacg10WtdbCGjEb6gNPbIKkWyTcom0cGMyubq/t5kisuW+R6fgu
HB3iZczjRB2SE2x3JzjIjBBv3ajBmHJ/QydG+loDfLrP/xxALgTIYmEkrKA/9zUB
UQ2pbOte0D9TAvzf1Cl6CVLujt5YZobBQTExRsqfMqQ9EZvhHcAamw6+rUr2a/se
LCGGi1s5OlqJOGFGyhVBCdfwmU9Su+kSOI0q2GIE9OEWOxSSphNxRy9URSvVunyb
oFjCMZM9Ss9N815IlQDWjKW9uFLT3zE=
-----END CERTIFICATE-----
Generated at Mon Oct 20 10:34:59 2025 by rpki-client