Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/bb54c778-baac-3880-a969-ff4893150e34.roa
File:                     bb54c778-baac-3880-a969-ff4893150e34.roa (raw, json)
Hash identifier:          BG433WqWt/9akYV0xNQ7KFqVnogOMzrYAVDdf0BHkDI=
Subject key identifier:   26:B4:2F:78:4E:51:DD:A0:C3:D5:DB:78:8A:FE:12:44:88:ED:D1:2B
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584B3556E75D22DA5A7E48C87B00
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/bb54c778-baac-3880-a969-ff4893150e34.roa
Signing time:             Tue 16 Sep 2025 01:00:33 +0000
ROA not before:           Tue 16 Sep 2025 01:00:33 +0000
ROA not after:            Mon 15 Dec 2025 02:00:33 +0000
asID:                     19905
IP address blocks:        74.84.119.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:35:56:e7:5d:22:da:5a:7e:48:c8:7b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Sep 16 01:00:33 2025 GMT
            Not After : Dec 15 02:00:33 2025 GMT
        Subject: CN=3d048967-799c-4e15-93fa-aad8c609ae88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:a4:26:10:90:fc:f4:da:07:7d:a6:8e:9a:79:
                    32:b2:e9:57:c7:1a:3a:5c:a8:e2:8e:12:3f:94:d0:
                    f9:2f:48:dc:45:95:90:eb:79:93:75:dc:87:30:74:
                    dc:3e:ec:f1:23:ec:59:df:6b:e9:c6:99:e5:fd:1b:
                    ae:20:49:57:29:82:bf:10:5a:8c:ba:f2:7f:a8:78:
                    89:79:96:bd:c8:a6:d0:cf:2f:eb:c6:e5:bf:09:bd:
                    47:22:2f:62:5d:9f:61:13:01:12:0a:f5:d6:9e:68:
                    d6:a9:8f:7a:0e:b2:01:dc:ef:b4:2a:ef:99:8a:28:
                    92:05:49:1f:02:74:83:e5:64:fd:5a:b8:33:02:71:
                    ea:eb:64:a6:7d:bd:a1:08:a8:d3:b7:65:3a:ab:d0:
                    5f:f5:8f:a9:04:5d:fe:4b:ae:f6:cd:fe:54:95:8b:
                    20:09:8d:ae:c6:27:29:13:b0:1a:3a:7a:07:3f:3c:
                    bf:08:3e:80:3c:eb:71:3f:41:6c:78:1b:c5:d3:33:
                    ee:4f:54:df:64:66:fa:db:b7:aa:8b:6b:e2:f4:e6:
                    65:f8:fd:7f:78:ab:19:bd:94:1b:0a:6b:0e:4c:02:
                    49:91:47:6f:9b:c5:82:37:e5:79:f0:2d:66:06:ea:
                    19:6c:2c:17:bb:3e:05:65:19:e0:01:25:21:bb:c9:
                    e4:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:B4:2F:78:4E:51:DD:A0:C3:D5:DB:78:8A:FE:12:44:88:ED:D1:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/bb54c778-baac-3880-a969-ff4893150e34.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.84.119.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:f7:88:95:32:9e:7f:3b:75:4b:14:81:bb:b5:6a:e7:fd:2b:
         d1:26:b8:3b:80:06:2b:40:28:c3:e1:a2:e0:b3:30:29:ad:0f:
         1c:e1:c9:fb:f8:bb:1b:5b:c7:82:3b:3e:55:1e:b2:57:9e:d4:
         04:b8:3e:00:15:a6:94:bb:28:62:75:fa:44:3a:06:4e:1a:74:
         8d:67:28:99:16:9d:89:b9:fa:ef:21:98:ac:cd:ea:75:4f:5f:
         25:18:b0:00:02:97:52:49:a9:50:be:cf:d7:0c:73:80:7d:41:
         b7:f4:57:0d:94:e2:ff:d4:96:96:8f:af:db:6f:45:b2:7d:0e:
         d0:dd:1e:a1:03:ef:28:ee:f9:bc:95:36:e3:a9:d3:64:33:33:
         ee:ae:b1:56:d5:f5:db:a8:a6:24:f0:e2:9c:98:49:d6:a9:48:
         a4:da:95:b5:60:13:da:80:7b:05:1f:89:cf:e5:a7:07:27:30:
         df:c7:bb:93:bb:a0:10:1e:06:e3:3f:2a:30:93:55:30:6c:f2:
         1d:ae:2e:76:45:20:67:e3:0a:8c:d6:07:ee:56:9c:ec:0d:67:
         9d:34:57:99:d3:bf:c7:c6:3f:fe:6e:9c:5b:7c:57:3e:79:d1:
         f8:12:27:ad:b3:1b:79:b9:b9:d6:b2:a2:03:fc:84:22:b4:b7:
         4f:22:e0:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 07:19:15 2025 by rpki-client