Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/325ae4db-0e9c-3240-8c67-adaea40167c1.roa
File:                     325ae4db-0e9c-3240-8c67-adaea40167c1.roa (raw, json)
Hash identifier:          /6FmS6n+CQ0vAEy8KJoK4zJGxynQ9/wVlTeYjBJSYtE=
Subject key identifier:   F9:67:23:36:07:26:23:33:41:BF:78:CC:3F:46:4E:57:9E:94:03:16
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584ED861D79BFDBCD8592DB976E0
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/325ae4db-0e9c-3240-8c67-adaea40167c1.roa
Signing time:             Sat 15 Aug 2026 13:00:11 +0000
ROA not before:           Sat 15 Aug 2026 13:00:11 +0000
ROA not after:            Fri 13 Nov 2026 14:00:11 +0000
asID:                     30036
IP address blocks:        74.84.99.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d8:61:d7:9b:fd:bc:d8:59:2d:b9:76:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Aug 15 13:00:11 2026 GMT
            Not After : Nov 13 14:00:11 2026 GMT
        Subject: CN=f35de2f2-b2c6-4fce-91de-15b822c570ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:40:7c:82:8f:be:b6:85:c6:0e:1d:26:ee:05:
                    46:1d:c3:ce:d3:7b:18:0a:41:48:b7:c3:68:df:ff:
                    c4:19:c8:ab:93:d5:6b:25:39:a5:84:0a:75:05:a8:
                    7d:d2:c5:31:21:68:29:35:d9:60:ac:21:d0:91:55:
                    f2:ff:c2:e3:15:ca:35:29:92:bf:6b:c3:46:41:aa:
                    51:63:64:33:d7:e7:6b:12:ad:20:30:d6:97:d7:02:
                    07:c9:8e:44:90:83:ef:8b:d2:8b:70:03:e6:4c:da:
                    c0:99:d2:6b:39:c9:3f:9f:0b:a8:01:0c:a3:b5:43:
                    04:b1:22:eb:c1:07:ef:39:a7:84:98:9d:22:32:bf:
                    a4:4e:d7:d2:83:8f:94:a4:2d:e1:b5:7f:71:13:7c:
                    c0:5b:09:49:1d:44:57:1a:2a:de:57:5a:33:a5:23:
                    e5:24:60:3e:59:c4:f0:38:19:e2:26:f9:63:1e:4f:
                    28:20:0d:89:48:00:e6:3f:16:fc:c9:28:c2:54:5c:
                    2c:96:e6:a0:af:36:c7:b2:ad:64:e6:2f:5f:b1:c9:
                    11:3f:f1:f0:41:5b:d7:9c:4c:d2:1e:d3:ce:b9:53:
                    31:58:e7:24:8a:20:7a:69:42:b4:be:7e:15:46:d3:
                    f5:bb:0e:26:56:46:de:31:fa:d7:4f:da:25:c4:41:
                    f3:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:67:23:36:07:26:23:33:41:BF:78:CC:3F:46:4E:57:9E:94:03:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/325ae4db-0e9c-3240-8c67-adaea40167c1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.84.99.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:2c:fe:53:e1:ec:1c:22:aa:a6:a8:b2:6e:48:53:6c:ac:f0:
         3e:2d:42:1b:4e:35:84:e0:79:1f:7b:a4:ca:45:d4:47:db:0d:
         13:01:b4:7d:c2:5b:c9:30:51:55:e9:49:f0:25:1b:c9:3c:81:
         ae:c0:8a:96:0c:42:98:e7:df:ac:83:40:3b:9c:97:e1:c5:df:
         10:50:9a:e9:03:bd:b8:fb:7b:03:76:bd:ab:a8:64:f3:01:e5:
         b7:0c:60:1a:e2:ba:b7:ae:d9:fd:81:04:f6:56:a3:45:15:bb:
         17:84:aa:e6:6b:59:a7:a5:76:62:09:67:ca:b0:e9:af:5e:3b:
         ae:b8:5b:14:f3:14:73:20:0e:8c:81:01:4f:cd:c1:e3:d8:df:
         73:7f:d3:01:23:33:97:b7:a1:71:20:25:b7:02:e3:32:74:54:
         dd:fb:c8:6c:2e:2d:36:ab:42:47:05:29:22:83:b9:b8:79:32:
         6e:20:2a:a1:69:40:f0:71:d5:95:34:5a:27:a4:1e:a5:d2:fc:
         bf:a9:cd:f0:c0:12:de:c1:bb:83:10:c8:81:e3:f1:92:97:78:
         f3:17:72:db:d8:7f:5a:b7:ed:bf:86:29:2f:d1:a0:b4:03:c5:
         d9:b9:cf:4b:b4:43:5e:bb:84:02:7e:a8:e8:04:aa:54:d9:e9:
         ce:a3:36:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 01:48:22 2026 by rpki-client