Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/12b0fe98-8172-307c-859e-6ea55959e17f.roa
File:                     12b0fe98-8172-307c-859e-6ea55959e17f.roa (raw, json)
Hash identifier:          Nfp9CloRQdNJ+terSX/Fb8K1dCN9Ka7ePWNnAZJyk4k=
Subject key identifier:   F6:E1:0A:96:6D:A9:91:9F:6A:84:97:55:43:38:B6:6E:F1:F3:8A:17
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584F7A502961F71051003AD33D00
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/12b0fe98-8172-307c-859e-6ea55959e17f.roa
Signing time:             Mon 12 Oct 2026 13:00:12 +0000
ROA not before:           Mon 12 Oct 2026 13:00:12 +0000
ROA not after:            Sun 10 Jan 2027 14:00:12 +0000
asID:                     30036
IP address blocks:        74.84.102.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:7a:50:29:61:f7:10:51:00:3a:d3:3d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Oct 12 13:00:12 2026 GMT
            Not After : Jan 10 14:00:12 2027 GMT
        Subject: CN=d80a6a67-9d7b-4cbc-b2cb-8326672e5a15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:39:35:64:1c:e8:db:17:a2:cd:5d:27:ad:cc:
                    ee:9c:79:f5:8f:b7:9e:14:ea:fb:e5:e5:fb:42:c0:
                    c5:19:ec:5d:b2:6c:f3:88:58:06:16:37:ab:53:bd:
                    86:fb:f2:32:52:0a:e8:0a:17:72:6a:82:f1:64:ec:
                    32:11:54:e7:b6:2d:11:0e:71:a5:70:52:fb:e2:0b:
                    92:1d:3d:47:34:94:7a:8c:ba:fe:54:48:81:b7:f2:
                    32:cd:28:8d:f7:82:43:9b:f7:de:f2:49:74:7b:45:
                    3e:cd:96:a3:c4:73:3e:03:2b:cb:55:61:87:42:04:
                    03:9c:b1:fa:3f:85:af:39:b0:14:c1:0b:16:bb:94:
                    82:c1:24:5c:9a:f6:8a:51:80:01:62:4b:4b:e6:61:
                    6c:77:5d:31:5a:0e:ff:52:73:aa:9a:01:60:2c:a0:
                    85:66:c6:b2:5c:34:ce:93:58:40:77:cd:e2:2c:b3:
                    41:d6:91:2d:71:21:53:cf:1b:ba:eb:48:15:85:f4:
                    9d:67:5b:d9:63:52:43:bb:e7:0b:2c:5d:1b:1f:3a:
                    cc:75:94:71:94:3b:e4:0b:cf:da:f0:02:9d:4c:51:
                    1b:fa:93:48:a3:86:8d:7a:90:e6:ba:f0:64:e8:fa:
                    49:58:c3:0b:f8:56:8d:74:5f:32:23:7c:11:1d:64:
                    33:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:E1:0A:96:6D:A9:91:9F:6A:84:97:55:43:38:B6:6E:F1:F3:8A:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/12b0fe98-8172-307c-859e-6ea55959e17f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.84.102.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:8d:5d:a8:53:b0:ec:4a:21:f2:e1:33:59:16:7c:65:d5:e1:
         fe:4a:f9:c4:b4:20:a8:ef:8e:99:13:e5:2d:85:f4:2e:f7:5c:
         f1:90:82:18:33:0d:ba:03:20:38:c5:9b:04:03:b1:fe:5e:67:
         35:c9:45:4f:ae:16:63:f1:3e:f4:f1:24:0b:a9:b9:63:35:27:
         61:1d:84:93:9d:60:62:9f:8f:79:db:9d:8c:b9:9a:ee:bd:17:
         f9:72:ba:0c:40:45:00:7f:62:81:7e:ff:7b:4d:32:05:29:73:
         73:51:21:8f:e7:0f:2a:d3:ab:55:7f:22:51:f2:50:eb:85:4c:
         f7:36:02:6b:b0:ad:ca:02:13:33:36:3a:54:b0:ba:4e:58:52:
         f4:ec:9b:6c:41:79:cc:38:4a:ee:58:88:9a:3f:f9:06:87:e0:
         53:eb:67:ef:7d:3b:e8:b4:ac:55:c4:5e:4b:40:6f:0c:a3:82:
         ac:64:39:ec:bc:35:27:04:dd:f2:65:2b:fa:49:a4:52:d6:61:
         eb:30:be:d3:84:02:8f:64:98:62:e9:23:8a:e2:38:8d:40:59:
         55:20:22:98:ed:98:cd:54:73:a8:cb:c2:ed:20:a0:9c:97:3d:
         9e:32:41:f1:b1:6d:30:38:22:0b:fc:8c:1b:90:86:f7:d6:fe:
         1a:fe:c7:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 12:59:14 2026 by rpki-client