Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/f9840d72-5b38-347f-b355-0fd0c1f34ecf.roa
File:                     f9840d72-5b38-347f-b355-0fd0c1f34ecf.roa (raw, json)
Hash identifier:          2lzy7eFp8321jggV1U2PUrj0zXlgNwidjEHBcWqJuhY=
Subject key identifier:   B6:70:51:50:5F:E1:82:A3:4E:69:2A:49:BB:5A:6A:D2:C0:06:D5:62
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584ED8648F186F09DA8A85288300
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/f9840d72-5b38-347f-b355-0fd0c1f34ecf.roa
Signing time:             Sat 15 Aug 2026 13:00:11 +0000
ROA not before:           Sat 15 Aug 2026 13:00:11 +0000
ROA not after:            Fri 13 Nov 2026 14:00:11 +0000
asID:                     30036
IP address blocks:        74.84.65.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d8:64:8f:18:6f:09:da:8a:85:28:83:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Aug 15 13:00:11 2026 GMT
            Not After : Nov 13 14:00:11 2026 GMT
        Subject: CN=f6252443-9ea0-4fce-924b-ab930bedffa2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:bb:79:8c:16:38:31:58:1b:70:71:a1:83:aa:
                    c1:a2:c6:02:90:74:8d:36:85:37:e7:e5:f2:20:d7:
                    0b:30:c0:a4:d0:c4:42:90:88:fe:f2:c5:b1:1a:20:
                    cd:30:39:2a:c5:39:ed:72:93:0e:47:8e:b3:e0:99:
                    bb:dd:f6:49:51:fd:cf:e1:d6:57:95:f9:07:6a:70:
                    cc:09:12:1a:9b:be:89:74:0b:58:48:ed:ea:6f:a7:
                    5e:22:a8:92:d9:3c:6a:37:95:90:e9:96:f1:3f:7d:
                    64:41:1d:44:9d:85:0c:1a:4c:c5:68:a1:57:d9:59:
                    ba:76:58:0d:6a:c0:7e:a7:0f:3b:2f:bf:88:14:4e:
                    cc:19:7f:c3:61:36:2f:4b:55:7d:b2:1a:58:13:a5:
                    ba:56:0d:ef:41:99:b3:6b:22:90:0d:f4:a6:51:2c:
                    df:d9:17:8d:b7:9b:a8:c1:bf:42:cc:3f:ff:dd:85:
                    15:93:e7:f9:44:29:7d:b6:78:24:2b:55:b9:09:9e:
                    24:0f:63:b5:af:f9:45:bc:76:e4:bc:25:96:26:7d:
                    d2:69:13:7b:1d:ef:6b:5f:d2:58:0c:d6:4e:6d:e4:
                    61:c6:2d:14:b0:29:e1:21:c2:71:59:f2:2c:5a:61:
                    8f:6e:c7:8b:f3:cf:f7:76:24:c1:bf:9d:f0:69:c4:
                    4f:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:70:51:50:5F:E1:82:A3:4E:69:2A:49:BB:5A:6A:D2:C0:06:D5:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/f9840d72-5b38-347f-b355-0fd0c1f34ecf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.84.65.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:50:75:85:6f:a1:18:2f:fd:fc:a7:c3:fd:f9:a8:66:63:77:
         29:20:e1:6d:98:7d:9a:5e:a8:45:29:74:d6:92:ff:5e:bf:54:
         1a:3e:f8:9f:49:32:f1:cb:93:00:cb:da:68:39:5b:9a:0c:cc:
         b7:c7:c2:5a:c7:3b:68:a3:2d:0f:9d:71:31:98:ec:f6:de:6f:
         c3:7e:25:e3:32:2b:2c:64:2a:4a:99:94:13:bd:78:df:da:30:
         1d:48:7d:1e:e1:eb:6f:94:41:16:32:7b:43:4d:5e:e2:ab:23:
         cc:a1:e4:47:73:cb:af:5d:3a:ee:fc:be:1c:21:34:40:54:2d:
         e2:33:98:a1:96:1c:3d:65:bb:0e:8a:95:c5:e2:05:c3:ce:57:
         8e:6e:c2:88:2a:e8:21:17:4b:7b:31:b4:3e:5f:8f:6e:55:a6:
         58:39:f2:d0:85:1a:8a:1f:fd:91:10:74:84:40:71:39:73:17:
         a9:6e:c1:ac:89:6d:1b:9d:13:1a:88:a9:e1:ad:d3:97:fd:e1:
         a2:65:bf:19:3a:e1:01:88:19:f4:29:9f:52:93:c9:03:68:60:
         a3:8d:f3:9e:98:73:2e:1a:a1:89:5e:13:3e:a9:9f:f8:33:25:
         e6:a1:d3:62:b8:13:cd:fa:47:c7:05:38:22:ff:c0:b8:00:9f:
         d4:3c:70:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 01:46:33 2026 by rpki-client