Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/ed70805b-b24e-3ed3-b94b-11777131c0c7.roa
File:                     ed70805b-b24e-3ed3-b94b-11777131c0c7.roa (raw, json)
Hash identifier:          ZvGXx4coIR/pDSHsiqAvB0ihWZRCX4rhfnGr2bJCB/0=
Subject key identifier:   45:B9:28:80:2F:A6:5F:0A:E9:1F:D6:CD:6F:88:98:65:A2:21:0E:3C
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584B92DCD7CD0705D37489FB7240
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/ed70805b-b24e-3ed3-b94b-11777131c0c7.roa
Signing time:             Sun 19 Oct 2025 13:00:39 +0000
ROA not before:           Sun 19 Oct 2025 13:00:39 +0000
ROA not after:            Sat 17 Jan 2026 14:00:39 +0000
asID:                     30036
IP address blocks:        97.64.163.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:92:dc:d7:cd:07:05:d3:74:89:fb:72:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Oct 19 13:00:39 2025 GMT
            Not After : Jan 17 14:00:39 2026 GMT
        Subject: CN=40a977aa-a856-434c-8f3e-23a55aff60f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:80:df:af:96:b8:38:2d:15:3b:1a:f7:36:37:
                    b6:7c:45:6b:9d:74:7d:7b:c5:fd:fc:73:02:28:5b:
                    5b:1e:31:ee:42:d8:a2:a2:a8:78:cc:fc:7d:72:36:
                    1e:3b:6c:83:04:54:c0:fe:6a:26:dc:73:ed:30:3c:
                    f6:f7:0f:6b:cd:76:b0:f0:b2:5d:9d:3e:27:7d:07:
                    f8:01:6a:af:17:95:ef:d8:b4:04:74:62:b6:7c:1d:
                    d9:55:20:18:67:77:ab:d8:7f:41:98:b4:26:e0:6c:
                    84:9f:f5:14:9b:dc:b0:9c:6c:24:1e:0a:98:48:2c:
                    37:59:ad:d1:6e:13:6e:c9:c3:44:cb:62:61:5f:72:
                    6b:78:09:35:28:27:ff:06:fb:a1:d4:46:8a:b2:9c:
                    39:50:91:e3:fe:1a:31:9a:61:e0:0c:16:9a:ff:bf:
                    7f:6f:82:f0:82:26:0b:6f:1c:47:0b:68:9d:be:e1:
                    95:bb:ee:6e:d0:b2:32:7d:fa:a4:0c:87:15:6e:0e:
                    82:8e:9e:91:e2:20:c5:78:24:c3:72:75:36:7a:46:
                    ac:5f:c6:7b:3f:61:03:c3:f7:ee:3f:f0:ac:69:8b:
                    be:e8:23:d4:c9:84:81:1b:d2:74:f1:a5:7a:33:aa:
                    9e:1d:c6:51:50:e4:5c:1d:6e:61:da:f5:fb:3e:0d:
                    0f:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:B9:28:80:2F:A6:5F:0A:E9:1F:D6:CD:6F:88:98:65:A2:21:0E:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/ed70805b-b24e-3ed3-b94b-11777131c0c7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.64.163.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:df:f4:24:ef:9e:21:cf:7b:af:ce:d5:64:6f:87:83:10:8d:
         69:3c:19:fa:05:fe:83:6e:61:4f:e1:37:71:1c:72:a9:98:4d:
         01:69:f8:5c:fc:d0:e1:8f:de:2d:06:be:17:e5:64:6b:09:8e:
         47:62:37:1e:69:e9:c3:44:04:28:6f:b4:df:3d:05:12:d6:8f:
         5d:4f:fa:65:2f:0a:98:a2:24:88:c9:c2:9b:75:14:dc:15:27:
         93:03:28:a2:9d:1f:b7:d9:aa:45:9d:2c:bc:22:df:6f:08:d8:
         19:8d:3d:5c:73:77:37:25:51:18:1e:d4:b6:2a:ea:6e:00:81:
         22:fd:ff:ca:d4:d9:84:85:43:31:aa:05:de:9e:0a:e8:97:f5:
         51:22:3c:92:9c:5a:34:b2:59:67:40:7a:b1:4f:a4:c5:1b:61:
         81:09:40:f1:e4:8b:47:c5:3b:cc:9d:18:a0:f4:c0:91:e7:cb:
         a1:eb:db:8b:fe:68:30:cc:f5:79:47:c6:94:1c:32:7f:f9:af:
         17:1a:92:1b:25:c1:7c:53:86:16:47:2b:8d:7a:47:35:92:35:
         e2:c2:49:fa:94:43:d0:52:39:c4:46:5d:c6:c5:ea:28:2d:a6:
         77:e6:aa:cb:e1:b7:b5:84:1c:78:95:77:a2:8c:5a:b2:36:43:
         68:29:b9:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:21:15 2025 by rpki-client