Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/e982be65-3513-3c46-9156-46c858138f03.roa
File:                     e982be65-3513-3c46-9156-46c858138f03.roa (raw, json)
Hash identifier:          45C513Ij9bSaPoEJNhwnlZiRmPKb+7lJVZj2ZxmrcoU=
Subject key identifier:   45:BD:6A:DC:E2:DE:72:77:21:15:B7:C5:17:0E:7B:0C:6B:1B:50:28
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584ED8648695325DC37832FFEF80
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/e982be65-3513-3c46-9156-46c858138f03.roa
Signing time:             Sat 15 Aug 2026 13:00:11 +0000
ROA not before:           Sat 15 Aug 2026 13:00:11 +0000
ROA not after:            Fri 13 Nov 2026 14:00:11 +0000
asID:                     30036
IP address blocks:        74.84.72.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d8:64:86:95:32:5d:c3:78:32:ff:ef:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Aug 15 13:00:11 2026 GMT
            Not After : Nov 13 14:00:11 2026 GMT
        Subject: CN=c0353070-5d71-4a4a-94b8-a6efe711a4ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:29:55:70:a5:a2:de:c5:03:a6:e8:05:43:c8:
                    2a:09:62:c3:fb:d7:cf:ab:40:32:15:ea:db:63:b7:
                    af:a4:8e:af:5b:a3:41:44:e4:c5:34:c0:c6:17:25:
                    ab:24:bf:53:c9:b5:d6:80:19:29:0b:71:7c:24:b9:
                    6b:fd:9e:4a:c9:06:fc:2a:ce:5f:55:3c:f4:aa:13:
                    83:6e:96:1a:bc:72:98:a8:69:b5:af:c6:70:97:5f:
                    fc:fa:b3:6e:6a:7f:7e:4a:dc:65:32:9a:6e:f8:e0:
                    2f:03:95:ed:25:97:20:6f:aa:07:f7:53:0a:8e:07:
                    a5:8f:01:a3:e1:8f:1b:29:62:78:70:1a:ba:30:a5:
                    07:a0:5e:2d:0b:5d:33:05:91:a7:26:12:e7:41:a1:
                    4a:a4:a6:61:e5:b8:71:ea:9d:91:e4:77:da:d7:e0:
                    28:5a:9f:13:d3:11:ed:d3:1e:c3:39:8e:33:48:73:
                    9d:53:b8:cc:b3:b2:96:a3:4e:a8:59:34:3d:f7:f3:
                    98:ca:c5:cc:15:cb:57:37:be:85:49:b7:15:8d:36:
                    81:17:de:5f:fd:02:16:6d:31:59:70:34:94:23:51:
                    a4:d9:c7:5c:66:e2:03:e6:f3:7f:f4:da:1c:99:1a:
                    7c:30:b1:c4:a6:e7:d6:8b:74:0d:86:18:c1:88:ac:
                    73:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:BD:6A:DC:E2:DE:72:77:21:15:B7:C5:17:0E:7B:0C:6B:1B:50:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/e982be65-3513-3c46-9156-46c858138f03.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.84.72.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:23:a6:f7:95:99:80:7a:3a:f8:29:62:07:87:70:b0:53:f3:
         14:2c:fb:90:c6:b7:31:d8:0a:f9:8b:00:31:95:c8:c8:20:71:
         15:99:f3:ef:9a:74:fb:98:de:ee:00:73:b2:be:39:15:e4:c0:
         aa:47:06:92:64:c5:8d:3a:c0:3b:af:08:5f:fa:5e:d9:0a:c1:
         08:49:59:d2:d9:7c:0c:69:97:d2:0d:e9:ec:f8:e8:6a:e2:3b:
         28:4a:e5:89:dd:2b:cd:07:43:4e:a9:b1:6f:ef:79:b2:a4:7c:
         cc:cb:60:3e:69:85:aa:c5:16:32:ad:2f:44:4c:48:c6:5a:04:
         99:4d:b1:ee:34:5a:a9:60:08:de:fe:f7:ca:06:5b:2d:79:83:
         c1:86:46:c0:9e:c3:b4:e0:a5:49:eb:91:82:64:a8:f7:61:d9:
         f6:28:2f:be:ec:f1:81:9d:c4:fc:86:64:d6:8a:17:68:f8:62:
         3b:76:7a:b8:f7:ea:8a:59:75:23:b0:f7:3f:d1:a2:ea:2c:5a:
         9c:c4:68:05:38:4f:02:50:18:8c:f4:05:ab:8a:2a:64:52:54:
         df:c6:9e:5e:17:38:65:26:f0:be:55:ec:08:af:3c:81:83:13:
         83:87:4b:c3:ba:3a:7c:de:d4:4b:4b:f5:7b:8b:b1:60:41:00:
         75:f4:27:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 01:47:53 2026 by rpki-client