Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/75ae7e8d-4fdc-3ae8-8c16-10235dda27a4.roa
File:                     75ae7e8d-4fdc-3ae8-8c16-10235dda27a4.roa (raw, json)
Hash identifier:          jN4skpjYHXXlKPMvDSm1Jmxk+MPC54DDprkgYUd0loU=
Subject key identifier:   4A:1A:C0:CD:95:D5:D9:F6:27:2C:DD:1E:E6:32:03:70:6C:73:EC:BE
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584B92DCE7977BDA063844955F80
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/75ae7e8d-4fdc-3ae8-8c16-10235dda27a4.roa
Signing time:             Sun 19 Oct 2025 13:00:39 +0000
ROA not before:           Sun 19 Oct 2025 13:00:39 +0000
ROA not after:            Sat 17 Jan 2026 14:00:39 +0000
asID:                     30036
IP address blocks:        97.64.248.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:92:dc:e7:97:7b:da:06:38:44:95:5f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Oct 19 13:00:39 2025 GMT
            Not After : Jan 17 14:00:39 2026 GMT
        Subject: CN=62f47684-a301-42d0-8ff9-f9b42398e616
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:cd:e2:8e:09:9b:a1:f9:dd:cd:c7:96:e5:d2:
                    a7:f3:88:8b:be:21:61:59:2d:6b:1b:a1:92:91:46:
                    cd:5e:ba:9e:7d:7d:bc:50:68:58:ce:8b:92:7d:20:
                    14:5a:19:df:24:22:6b:8b:76:fa:22:f0:76:b0:9e:
                    01:ac:04:e3:ef:e1:ff:d4:20:76:78:5d:46:7b:07:
                    f8:33:27:10:d1:c7:3c:90:51:15:3d:c7:02:ad:80:
                    60:57:73:fa:10:aa:31:7b:72:74:92:81:38:31:d5:
                    26:05:08:d1:ae:4d:36:85:60:67:bd:cf:28:31:fb:
                    96:30:0f:9c:c6:1a:b3:59:19:b0:82:70:89:62:ba:
                    58:48:57:56:54:39:3b:06:cf:10:e4:44:bc:4b:9c:
                    fe:ba:58:e9:d1:0a:59:75:8c:88:92:90:e1:7d:ea:
                    39:2d:b9:79:68:a3:e8:5f:9b:26:6a:a1:cb:4e:0d:
                    e9:04:42:4f:c8:8e:60:fc:05:51:3c:78:3f:95:ea:
                    97:5b:85:29:da:3e:67:39:cc:93:ff:45:e7:93:1d:
                    f6:f8:ed:98:db:73:46:af:be:a1:3c:79:b5:24:f9:
                    f5:f4:39:13:98:06:55:cf:30:93:25:20:c7:19:d3:
                    9e:21:a8:9e:1b:07:bd:16:02:e1:ed:76:a8:b4:f7:
                    f3:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:1A:C0:CD:95:D5:D9:F6:27:2C:DD:1E:E6:32:03:70:6C:73:EC:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/75ae7e8d-4fdc-3ae8-8c16-10235dda27a4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.64.248.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:9b:a5:e3:4a:65:d6:09:92:f7:98:40:71:16:4b:bd:49:e6:
         4c:b3:ae:be:7a:5e:53:c1:8c:f9:e1:5c:2e:2d:6c:13:81:74:
         02:a8:4d:ed:82:78:3b:8e:56:6c:2d:6e:69:7a:82:5e:1d:a2:
         ec:eb:80:cf:a2:91:38:9e:e6:8a:f4:c1:c3:c4:c8:82:b6:1f:
         f3:56:28:56:98:35:4b:3d:91:bc:ac:cc:78:5f:da:a4:5e:9d:
         ab:f5:6f:51:1b:c6:63:c6:94:ee:10:da:46:ce:71:3e:59:bd:
         91:59:83:aa:91:bb:d3:df:e1:45:43:9a:f6:94:99:50:8e:ba:
         08:f2:dc:b8:5b:f4:d5:1b:70:6e:3d:c0:3d:ca:71:cc:03:06:
         c7:1a:ee:ca:1f:73:fd:6e:fb:c4:8f:6a:b3:6a:aa:75:83:7d:
         3c:85:3b:2c:8d:7c:3b:70:e2:b2:e7:c2:12:48:6d:53:02:9b:
         9b:9e:b6:ca:e2:38:7f:70:06:f4:27:d4:da:a5:87:c0:47:3b:
         43:a7:b1:34:12:2a:d7:a4:7f:69:4c:6d:52:75:af:be:88:df:
         8c:8e:2c:66:73:34:e4:93:02:8c:bb:97:5b:2d:fc:71:be:a9:
         c3:e9:fd:cc:62:cc:8e:e4:1d:6a:d4:e9:7b:60:46:ed:e8:b5:
         23:eb:64:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:42:33 2025 by rpki-client