Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/71eeb18f-386a-3ee2-bf0b-252a1ebfa2f2.roa
File:                     71eeb18f-386a-3ee2-bf0b-252a1ebfa2f2.roa (raw, json)
Hash identifier:          2jP1QcZ4rfGF0c2FFMp3WPkMi5x7WWfiEyfAwXFGJAk=
Subject key identifier:   E8:95:B0:64:44:88:CE:8D:5C:C2:10:E0:E1:AA:75:64:5A:28:05:A4
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584B92DCD4E0F03776B412421280
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/71eeb18f-386a-3ee2-bf0b-252a1ebfa2f2.roa
Signing time:             Sun 19 Oct 2025 13:00:39 +0000
ROA not before:           Sun 19 Oct 2025 13:00:39 +0000
ROA not after:            Sat 17 Jan 2026 14:00:39 +0000
asID:                     30036
IP address blocks:        97.64.193.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:92:dc:d4:e0:f0:37:76:b4:12:42:12:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Oct 19 13:00:39 2025 GMT
            Not After : Jan 17 14:00:39 2026 GMT
        Subject: CN=8a98ade3-4ec4-45e2-a90f-49c17bfbaa5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:4c:64:94:b2:32:25:b9:c4:3a:ea:20:a7:23:
                    22:b2:8c:8b:99:d8:9e:9f:8e:01:e3:45:f0:26:d6:
                    71:ce:87:10:cc:94:5e:a0:2c:f9:88:54:2d:54:e3:
                    38:9a:4a:30:2c:bc:45:bc:54:0c:a2:be:11:0f:0c:
                    1b:4d:fb:71:42:7b:65:1d:b0:a9:91:f0:2c:89:92:
                    9c:01:71:b4:bf:83:1d:25:77:b5:47:24:1e:df:65:
                    5e:fb:5a:a0:a0:f0:39:4d:9f:1a:33:67:7d:17:52:
                    0d:9f:dd:3b:6c:48:1a:bb:ff:ac:01:af:67:ca:ab:
                    49:e8:b4:49:8b:ed:17:6d:c5:68:bb:a4:96:79:93:
                    7b:b7:9a:55:a0:03:25:1f:c3:9f:51:01:c7:62:25:
                    44:48:ba:2c:a5:eb:a8:7d:1f:b8:ce:c6:08:a4:b6:
                    e4:d0:c0:ab:b1:58:b8:cd:db:d7:9a:fd:b3:d5:dd:
                    7f:94:a8:44:49:c8:e7:28:0e:cb:a3:1d:6a:79:83:
                    35:90:dc:25:e3:02:b5:38:8d:94:72:9d:86:7b:4d:
                    26:76:2f:e0:b7:19:20:49:f9:47:d1:d0:db:d6:b0:
                    09:90:0e:9b:06:d4:5a:5d:c7:60:74:bd:8e:d1:6a:
                    3d:d1:ae:a9:86:45:26:41:df:e1:a3:a9:1f:e0:68:
                    fd:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:95:B0:64:44:88:CE:8D:5C:C2:10:E0:E1:AA:75:64:5A:28:05:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/71eeb18f-386a-3ee2-bf0b-252a1ebfa2f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.64.193.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:ba:41:2e:72:c5:57:e2:4c:e0:f5:ce:44:48:88:bc:da:ed:
         2e:1c:d5:51:1a:91:96:68:ed:d4:7b:c1:9d:63:b5:5d:db:72:
         e7:45:94:a6:8b:f7:ef:47:0c:ee:68:c6:19:1c:e1:dd:f9:0d:
         b0:ca:54:a6:39:1a:7e:0d:ad:d2:e7:7e:94:a2:bf:f8:bf:70:
         a7:04:9c:75:be:9f:8e:28:00:56:56:87:cf:cc:d2:39:40:82:
         86:f8:fe:66:3c:fb:e2:2c:46:d5:e3:5c:27:71:bf:85:8c:73:
         f7:91:18:4c:c9:c1:07:95:df:ca:ea:8b:6f:84:1b:8b:cd:0b:
         7a:4e:51:ec:67:cd:99:4d:b6:f7:8a:f5:ce:46:0a:97:a0:6d:
         e7:de:53:87:51:3b:98:df:e1:2d:48:88:b9:3a:57:0a:56:18:
         11:b1:53:26:ef:96:52:3e:58:3d:14:67:bb:3b:d3:b8:ba:35:
         bc:60:06:76:5e:fb:88:55:af:9d:e0:3e:61:cc:58:fb:f7:c4:
         1e:db:5e:e2:55:d4:80:85:d3:9d:2f:4e:d8:45:5a:8c:4b:8a:
         4b:55:50:dc:f6:9d:d9:ed:21:3e:45:5f:e1:53:db:6e:2e:5e:
         fc:a7:79:b4:83:19:e0:a9:8a:ec:d3:9c:8f:f8:3c:a0:0f:e8:
         b0:ab:61:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:04:12 2025 by rpki-client