Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/1bdfc8b8-832e-37a1-b3bd-018f47b95ac0.roa
File:                     1bdfc8b8-832e-37a1-b3bd-018f47b95ac0.roa (raw, json)
Hash identifier:          FJSP7SrepW25xAiHoYgwTfzoAHr4lYmpcXXpWaZcmgY=
Subject key identifier:   DA:88:4D:4B:A6:22:44:32:C2:32:8A:AD:A8:6C:52:CA:25:80:9E:F2
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584F7A502832EF31D8EEC19AB300
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/1bdfc8b8-832e-37a1-b3bd-018f47b95ac0.roa
Signing time:             Mon 12 Oct 2026 13:00:12 +0000
ROA not before:           Mon 12 Oct 2026 13:00:12 +0000
ROA not after:            Sun 10 Jan 2027 14:00:12 +0000
asID:                     30036
IP address blocks:        74.84.124.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 15 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:7a:50:28:32:ef:31:d8:ee:c1:9a:b3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Oct 12 13:00:12 2026 GMT
            Not After : Jan 10 14:00:12 2027 GMT
        Subject: CN=3be0df4a-ace8-4b81-96b5-614cf395231b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:0d:93:8e:82:f4:b3:06:fe:d4:a3:b9:d0:38:
                    d1:a7:08:7e:ca:06:fe:76:ba:47:49:d6:4c:47:d2:
                    00:e8:12:67:62:1b:54:44:ca:f3:0f:98:53:98:26:
                    ef:ab:21:b1:58:d4:28:45:bc:18:c1:67:36:3b:ae:
                    63:b4:e1:b6:19:90:61:07:ef:12:47:e5:45:37:9c:
                    a1:ff:18:49:52:5b:42:d0:09:6a:fd:52:32:90:8d:
                    bc:6e:61:fb:92:0e:82:f3:57:db:9a:c5:78:73:a2:
                    81:c5:f5:50:9a:17:c0:6d:3e:14:b3:6c:33:aa:b7:
                    00:cd:31:74:b3:23:0c:1f:13:8b:5f:78:6b:58:bf:
                    f9:85:35:44:a6:05:4c:7d:4e:0c:71:42:c7:8a:2a:
                    71:26:c3:af:d1:6c:2d:aa:23:35:a0:6a:56:3c:d7:
                    05:25:de:5c:2d:f6:58:0a:75:50:62:73:9c:b5:dd:
                    9a:15:9b:ee:ae:57:4c:84:d7:f2:2d:c3:91:b6:e3:
                    12:02:94:f3:08:cd:90:6c:1b:27:7b:bd:cc:3c:a9:
                    3c:f3:da:33:d0:cb:3a:e6:25:80:96:93:16:db:56:
                    c5:7c:48:d5:7e:96:b1:0f:26:06:4b:a0:ba:09:f9:
                    cb:51:ec:63:26:2b:1f:99:40:a3:b9:12:f2:07:32:
                    96:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:88:4D:4B:A6:22:44:32:C2:32:8A:AD:A8:6C:52:CA:25:80:9E:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/1bdfc8b8-832e-37a1-b3bd-018f47b95ac0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.84.124.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:f7:81:cf:36:08:5c:5a:ed:b3:f9:d5:ed:30:b6:46:e2:71:
         5f:b7:3f:b6:90:af:f9:03:7c:67:42:af:51:d9:61:75:46:90:
         58:3f:ba:d6:ba:0b:b6:4b:d4:ec:81:b7:2f:42:15:e6:f6:ed:
         4b:95:1e:54:30:d1:f6:49:5b:7a:c8:02:bd:7e:48:36:5f:41:
         7f:91:28:43:32:97:9a:ca:33:4e:9d:3c:7f:e4:24:18:cf:16:
         90:6d:df:f2:98:15:7a:57:1c:43:1e:7c:ff:60:6f:f0:e7:06:
         15:09:69:44:56:14:95:1e:7b:3a:53:8f:c7:6c:04:d8:21:2b:
         96:2b:69:ac:af:e8:ef:1f:eb:69:c3:2a:a1:8e:49:54:a2:50:
         4e:72:fd:a5:cc:89:b6:22:21:4e:41:ac:da:3c:6c:5d:d6:e0:
         33:9b:e9:61:64:7e:58:17:50:1d:b1:cd:ea:85:8e:0d:d3:93:
         a2:10:eb:4f:53:66:21:6e:7f:cc:26:51:3d:f2:97:61:50:52:
         58:e8:78:fa:cc:59:d5:9c:91:be:b0:b2:0c:d4:15:29:4c:95:
         c6:f0:38:21:7c:40:6a:89:74:9d:be:be:23:9f:a2:05:ca:38:
         31:10:57:2f:cd:79:06:72:28:b2:43:62:9c:19:a6:07:06:7a:
         9e:51:04:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 18:49:40 2026 by rpki-client