Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/f88b1c4c-2918-3e1d-a08b-fbd7cccf9af5.roa
File:                     f88b1c4c-2918-3e1d-a08b-fbd7cccf9af5.roa (raw, json)
Hash identifier:          /OZ4zU6ZYoIJe8XQ4isRfWnk/IepwdcJM3niBKiZLng=
Subject key identifier:   61:3F:AA:2B:3E:79:D4:14:52:B8:29:F5:5F:0E:23:B2:AA:3A:FA:52
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584B92DD909F1A617890A3EA2D00
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/f88b1c4c-2918-3e1d-a08b-fbd7cccf9af5.roa
Signing time:             Sun 19 Oct 2025 13:00:39 +0000
ROA not before:           Sun 19 Oct 2025 13:00:39 +0000
ROA not after:            Sat 17 Jan 2026 14:00:39 +0000
asID:                     30036
IP address blocks:        97.64.205.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:92:dd:90:9f:1a:61:78:90:a3:ea:2d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Oct 19 13:00:39 2025 GMT
            Not After : Jan 17 14:00:39 2026 GMT
        Subject: CN=efc09d37-2b1b-4e6c-bd96-89b25c3f148c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:3a:b1:77:78:20:65:72:1d:f1:2f:18:37:c7:
                    a5:55:16:dc:fc:90:8d:5d:4d:93:c7:55:e5:84:da:
                    ff:5a:e0:94:ad:b3:02:7e:c7:25:72:6f:e4:a7:e8:
                    8e:b5:60:56:88:19:5b:67:f1:e0:fc:44:48:5e:b8:
                    52:02:52:9f:6d:c4:dd:3f:25:6f:6f:58:14:52:46:
                    d5:a9:04:ca:b7:1a:bd:60:03:53:a2:46:d1:49:40:
                    b2:55:9f:83:2e:df:56:dc:2a:62:8c:c2:02:13:20:
                    0b:fa:2b:12:86:c2:5d:e9:1e:6d:bc:d1:e1:a1:52:
                    a1:78:d2:81:7d:74:3d:91:02:5b:57:f9:e6:63:60:
                    79:5c:44:ee:41:67:f6:eb:c2:32:42:67:fa:d6:e0:
                    99:4e:7a:36:c1:a6:61:7b:3b:4a:c4:e0:29:54:55:
                    5a:d0:62:97:0e:33:4e:3c:f8:1c:f6:f1:69:5d:3a:
                    8f:5f:a5:2c:7c:2d:ff:06:82:b2:8f:01:fa:39:a5:
                    6a:66:d7:9b:79:dd:07:07:7c:41:1a:db:fb:0b:ad:
                    b2:bb:05:fc:39:ae:06:94:24:e4:5f:dd:77:51:4a:
                    b7:bc:d6:74:68:13:f9:35:ff:ee:d8:e8:a8:00:0e:
                    68:83:d4:00:46:54:f6:68:63:22:f9:82:48:6e:43:
                    ae:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:3F:AA:2B:3E:79:D4:14:52:B8:29:F5:5F:0E:23:B2:AA:3A:FA:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/f88b1c4c-2918-3e1d-a08b-fbd7cccf9af5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.64.205.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:45:02:71:7a:39:96:af:a7:87:76:db:e3:f8:4b:32:94:ec:
         39:43:ff:2c:4c:7e:d8:a1:44:d0:e6:3f:2b:de:2b:38:e9:cd:
         8b:2c:44:f0:a9:b3:30:91:4a:bf:19:59:5a:03:b0:37:5f:f0:
         b0:da:9d:cd:d3:a9:31:96:ca:3b:bf:f6:26:8e:7b:47:d3:5c:
         dc:95:7d:cb:84:b6:53:bf:ff:6c:1b:a9:06:73:9c:0d:33:d4:
         d7:9d:83:94:df:b0:d4:58:91:b0:eb:f0:e8:4e:d3:29:f8:a2:
         ec:66:2d:a6:03:ff:f7:96:be:ac:6a:46:ae:32:a9:2c:15:84:
         18:d3:45:4e:72:60:14:da:ef:19:b3:ec:d8:63:90:01:04:fb:
         9a:4d:ae:14:7e:b8:db:61:da:c3:11:af:7a:df:ba:97:29:58:
         62:45:7b:cd:f5:b0:63:5d:9b:46:7f:33:c7:29:6c:6f:6a:bd:
         aa:4e:c5:05:40:08:6f:e7:ee:4d:83:95:ef:15:1b:51:1b:18:
         9a:7d:cb:d9:bf:20:ad:da:8d:8d:c9:96:7e:07:ab:a3:86:6a:
         fc:8d:ff:c5:23:f8:f3:6b:bb:56:76:76:ab:07:12:b9:54:c6:
         7c:6c:74:ff:0f:5b:95:e4:f0:dc:75:39:34:05:f9:c9:e7:29:
         12:13:3e:dd
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuS3ZCfGmF4kKPqLQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5
YTE1MB4XDTI1MTAxOTEzMDAzOVoXDTI2MDExNzE0MDAzOVowLzEtMCsGA1UEAxMk
ZWZjMDlkMzctMmIxYi00ZTZjLWJkOTYtODliMjVjM2YxNDhjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmTqxd3ggZXId8S8YN8elVRbc/JCNXU2Tx1Xl
hNr/WuCUrbMCfsclcm/kp+iOtWBWiBlbZ/Hg/ERIXrhSAlKfbcTdPyVvb1gUUkbV
qQTKtxq9YANTokbRSUCyVZ+DLt9W3CpijMICEyAL+isShsJd6R5tvNHhoVKheNKB
fXQ9kQJbV/nmY2B5XETuQWf268IyQmf61uCZTno2waZheztKxOApVFVa0GKXDjNO
PPgc9vFpXTqPX6UsfC3/BoKyjwH6OaVqZtebed0HB3xBGtv7C62yuwX8Oa4GlCTk
X913UUq3vNZ0aBP5Nf/u2OioAA5og9QARlT2aGMi+YJIbkOuSQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGE/qis+edQUUrgp9V8OI7KqOvpSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw
Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvZjg4YjFjNGMtMjkxOC0z
ZTFkLWEwOGItZmJkN2NjY2Y5YWY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi
OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4
OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3
NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYUDNMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAElFAnF6OZavp4d22+P4SzKU7DlD/yxMftihRNDmPyveKzjpzYssRPCp
szCRSr8ZWVoDsDdf8LDanc3TqTGWyju/9iaOe0fTXNyVfcuEtlO//2wbqQZznA0z
1Nedg5TfsNRYkbDr8OhO0yn4ouxmLaYD//eWvqxqRq4yqSwVhBjTRU5yYBTa7xmz
7NhjkAEE+5pNrhR+uNth2sMRr3rfupcpWGJFe831sGNdm0Z/M8cpbG9qvapOxQVA
CG/n7k2Dle8VG1EbGJp9y9m/IK3ajY3Jln4Hq6OGavyN/8Uj+PNru1Z2dqsHErlU
xnxsdP8PW5Xk8Nx1OTQF+cnnKRITPt0=
-----END CERTIFICATE-----
Generated at Mon Oct 20 13:21:54 2025 by rpki-client