Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/bcdd073f-7ba1-3bc9-aa99-b7343afffdd1.roa
File:                     bcdd073f-7ba1-3bc9-aa99-b7343afffdd1.roa (raw, json)
Hash identifier:          MFila/RJnyMFE4nduULxZdwTKwOBM6Rx/4qbfCzWN74=
Subject key identifier:   6E:3F:3A:F5:50:5A:23:ED:4E:EB:AD:E0:C4:94:F3:75:AA:BD:5B:E1
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584B004C2FE56B89776EEB5E5900
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/bcdd073f-7ba1-3bc9-aa99-b7343afffdd1.roa
Signing time:             Thu 28 Aug 2025 01:00:33 +0000
ROA not before:           Thu 28 Aug 2025 01:00:33 +0000
ROA not after:            Wed 26 Nov 2025 02:00:33 +0000
asID:                     30036
IP address blocks:        74.84.112.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:00:4c:2f:e5:6b:89:77:6e:eb:5e:59:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Aug 28 01:00:33 2025 GMT
            Not After : Nov 26 02:00:33 2025 GMT
        Subject: CN=807edb15-fdd8-4cef-a26e-0a98a279d29d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:8e:5a:6f:1d:9d:bd:f8:ab:e3:fd:ea:8a:40:
                    59:1c:76:db:c4:67:91:40:cd:a5:90:c4:43:1f:97:
                    e6:7d:8f:ff:48:06:df:26:99:c1:71:13:24:37:b8:
                    df:32:21:ff:e1:8f:0d:69:c6:c2:d6:fe:0d:84:4b:
                    47:5b:63:79:6a:cb:d0:6b:ef:2e:8e:86:cf:d4:66:
                    41:ca:da:1b:c2:b8:53:68:ec:4e:aa:6b:c6:ef:72:
                    1d:11:e6:0f:05:dd:86:29:79:74:5b:65:53:7a:37:
                    28:82:a8:e4:49:91:2b:c7:38:31:5a:52:4a:73:28:
                    81:5f:fd:79:bf:0c:32:e7:7c:73:11:9c:87:7c:05:
                    2e:b8:a3:e8:06:30:14:35:95:3b:40:2c:70:dc:1f:
                    4e:e5:3e:74:99:56:f7:57:6b:45:96:bc:5c:9d:09:
                    2e:c7:be:60:3f:0d:c0:43:39:8e:7c:d3:83:1d:26:
                    c9:e3:cf:ea:59:0d:00:b5:7c:45:13:3b:3d:f8:5f:
                    f4:b4:25:a3:41:f6:8d:78:c6:ec:e1:3a:31:49:0d:
                    e1:54:73:c0:17:89:69:16:b4:a4:5d:cf:c2:88:07:
                    71:74:e5:75:85:05:d3:b9:58:00:fa:95:0a:e9:71:
                    8e:80:e3:20:83:91:b7:e8:26:33:5e:5f:04:90:82:
                    e9:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:3F:3A:F5:50:5A:23:ED:4E:EB:AD:E0:C4:94:F3:75:AA:BD:5B:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/bcdd073f-7ba1-3bc9-aa99-b7343afffdd1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.84.112.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:f4:b6:74:57:2a:b7:8d:da:3b:f2:52:25:ae:c2:6b:57:fc:
         0d:f4:0f:55:4c:95:b9:be:d1:16:c4:49:58:8f:05:23:e4:e6:
         fa:0b:b9:2d:1a:20:1e:a8:5e:c7:45:9b:87:35:f7:0c:34:ff:
         50:33:25:30:2d:d4:c7:d3:db:dd:8b:aa:d6:94:40:eb:f1:6d:
         82:d6:75:1f:c3:0d:33:39:e3:96:5a:c1:1d:dd:ec:52:9a:72:
         40:a7:85:bd:23:50:b6:75:f6:65:e2:30:e6:5b:45:24:b2:d3:
         1d:24:d7:1f:b9:1b:78:81:e8:ad:86:af:8b:f7:73:67:17:7a:
         06:f0:24:ec:92:26:27:bf:dd:b1:08:a0:e9:e2:52:97:41:4e:
         9a:47:23:50:c3:87:d3:a8:33:7b:35:95:26:cb:02:a9:68:6b:
         08:40:b7:c8:f9:69:7a:0c:71:8d:2c:46:32:95:a0:df:7a:a3:
         b9:3e:0a:a1:78:37:d3:eb:51:e8:e8:ea:09:b5:15:1e:35:04:
         96:ba:d6:1c:fa:7f:86:82:2c:84:68:a1:74:7e:2b:da:5f:82:
         89:10:46:14:80:4d:bc:86:54:50:40:a8:04:36:f3:ee:67:2b:
         7e:7b:fd:78:66:91:cd:be:eb:0a:50:98:2a:d1:9c:e5:82:90:
         29:18:b0:19
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsATC/la4l3buteWQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5
YTE1MB4XDTI1MDgyODAxMDAzM1oXDTI1MTEyNjAyMDAzM1owLzEtMCsGA1UEAxMk
ODA3ZWRiMTUtZmRkOC00Y2VmLWEyNmUtMGE5OGEyNzlkMjlkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnY5abx2dvfir4/3qikBZHHbbxGeRQM2lkMRD
H5fmfY//SAbfJpnBcRMkN7jfMiH/4Y8NacbC1v4NhEtHW2N5asvQa+8ujobP1GZB
ytobwrhTaOxOqmvG73IdEeYPBd2GKXl0W2VTejcogqjkSZErxzgxWlJKcyiBX/15
vwwy53xzEZyHfAUuuKPoBjAUNZU7QCxw3B9O5T50mVb3V2tFlrxcnQkux75gPw3A
QzmOfNODHSbJ48/qWQ0AtXxFEzs9+F/0tCWjQfaNeMbs4ToxSQ3hVHPAF4lpFrSk
Xc/CiAdxdOV1hQXTuVgA+pUK6XGOgOMgg5G36CYzXl8EkILpqQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFG4/OvVQWiPtTuut4MSU83WqvVvhMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw
Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvYmNkZDA3M2YtN2JhMS0z
YmM5LWFhOTktYjczNDNhZmZmZGQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi
OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4
OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3
NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSlRwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJD0tnRXKreN2jvyUiWuwmtX/A30D1VMlbm+0RbESViPBSPk5voLuS0a
IB6oXsdFm4c19ww0/1AzJTAt1MfT292LqtaUQOvxbYLWdR/DDTM545ZawR3d7FKa
ckCnhb0jULZ19mXiMOZbRSSy0x0k1x+5G3iB6K2Gr4v3c2cXegbwJOySJie/3bEI
oOniUpdBTppHI1DDh9OoM3s1lSbLAqloawhAt8j5aXoMcY0sRjKVoN96o7k+CqF4
N9PrUejo6gm1FR41BJa61hz6f4aCLIRooXR+K9pfgokQRhSATbyGVFBAqAQ28+5n
K357/Xhmkc2+6wpQmCrRnOWCkCkYsBk=
-----END CERTIFICATE-----
Generated at Sat Oct 11 07:20:17 2025 by rpki-client