Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/ee45ad1e-fc42-3052-a830-d53abe715fa0.roa
File:                     ee45ad1e-fc42-3052-a830-d53abe715fa0.roa (raw, json)
Hash identifier:          CLPb+p6GSSlGfBHldWTwJUZ4l+Y461hHX8QuEhepR1Y=
Subject key identifier:   44:3B:17:FD:3A:44:D1:4E:17:75:80:8F:C1:16:66:2C:E4:FB:F6:85
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584B92DD8E713EF083D09E11D9C0
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/ee45ad1e-fc42-3052-a830-d53abe715fa0.roa
Signing time:             Sun 19 Oct 2025 13:00:39 +0000
ROA not before:           Sun 19 Oct 2025 13:00:39 +0000
ROA not after:            Sat 17 Jan 2026 14:00:39 +0000
asID:                     30036
IP address blocks:        97.64.194.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:92:dd:8e:71:3e:f0:83:d0:9e:11:d9:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Oct 19 13:00:39 2025 GMT
            Not After : Jan 17 14:00:39 2026 GMT
        Subject: CN=08c7b125-72e7-4fe0-a67c-6e6eff7900da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:12:cc:37:cc:e9:36:72:16:15:2d:b8:51:14:
                    cd:75:74:64:c0:4d:0e:5b:10:c4:bd:c9:33:dd:37:
                    36:86:78:63:ab:ca:c2:47:13:31:85:6f:65:cf:3c:
                    d3:47:df:a0:51:91:de:3d:41:bd:20:69:33:58:5f:
                    85:21:4e:eb:4f:40:c5:4b:75:b1:b4:11:b8:97:ee:
                    9a:12:e9:4a:5e:d8:79:c3:15:0e:38:a3:3c:6f:b0:
                    67:97:9e:1d:af:77:83:f7:35:2c:64:af:61:57:c9:
                    ee:43:7d:32:d6:b0:e6:71:9b:e3:93:e5:5b:68:2c:
                    0e:2a:9a:31:ee:fb:f5:d9:95:0d:a9:34:b3:71:88:
                    7e:5f:b7:54:16:48:c1:ce:cd:0c:fb:9d:80:7a:2b:
                    44:d4:2c:92:b8:14:ca:35:b0:16:5e:d4:76:0c:16:
                    71:79:89:16:f8:30:d0:94:31:f2:c4:44:88:7a:65:
                    69:79:47:3d:32:b8:2b:5a:94:96:a5:89:4d:b9:7a:
                    29:0f:f5:13:45:1a:90:ad:d2:76:16:8a:97:4c:b4:
                    3b:b7:cb:5f:9b:d2:42:2b:b6:fd:89:98:44:24:b1:
                    86:84:8f:7f:56:86:8c:c2:89:59:14:2a:6a:fa:4d:
                    08:b1:b9:9a:61:70:77:01:e0:21:8a:fb:bb:39:67:
                    6b:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:3B:17:FD:3A:44:D1:4E:17:75:80:8F:C1:16:66:2C:E4:FB:F6:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/ee45ad1e-fc42-3052-a830-d53abe715fa0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.64.194.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:23:78:a4:a1:c3:9b:8c:68:fd:26:ec:44:7e:c1:d5:91:72:
         68:e0:15:81:9a:d2:c3:44:ad:fb:81:b3:53:20:6a:bb:f5:6d:
         3c:24:35:5e:f2:2e:cc:dd:6d:71:92:fd:6b:fa:2f:0a:32:51:
         51:47:38:ed:3e:36:ab:ed:54:92:72:cb:3a:d5:d2:ad:53:fc:
         14:cf:29:3a:54:9a:12:72:29:12:b8:87:2f:81:f9:37:ac:60:
         3c:73:57:7f:73:be:5f:c7:7e:0d:95:1f:26:ce:8b:24:84:a9:
         73:12:fe:1b:7c:02:11:0d:0d:e2:74:71:a5:33:f8:1b:1c:54:
         cb:d7:dc:32:f5:b5:f7:19:3c:5f:19:02:d1:40:37:dd:de:55:
         fd:76:ee:2c:ae:9b:45:20:45:18:36:bd:aa:21:74:d0:a1:75:
         21:cd:50:cf:42:ba:7c:c2:ff:fc:36:2c:f6:57:68:81:06:cf:
         4d:0f:7b:e4:25:94:3b:b2:14:be:72:dc:45:06:94:3d:f7:91:
         b1:b8:8a:44:8c:95:e0:16:cf:1c:d7:6d:5d:ca:9e:9c:b5:27:
         0f:57:8c:13:e5:73:99:9c:14:06:9c:6f:8e:44:87:8b:2f:d5:
         30:95:09:ed:9b:6b:c2:c6:31:17:d6:88:be:92:f5:ea:bd:80:
         4d:2b:0b:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:45:03 2025 by rpki-client