Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/2469d787-a3cb-3354-bad9-414ab6201e37.roa
File:                     2469d787-a3cb-3354-bad9-414ab6201e37.roa (raw, json)
Hash identifier:          feAH+fvj4rhv87v64pYDmEXEcwV1N2WzVtDmneZgARk=
Subject key identifier:   13:56:A1:69:5F:50:EF:02:70:B3:C6:E9:A3:38:C6:33:2A:13:6C:5A
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F43285849D42F9A15DD32C2CE51E649F0
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/2469d787-a3cb-3354-bad9-414ab6201e37.roa
Signing time:             Mon 12 May 2025 13:01:00 +0000
ROA not before:           Mon 12 May 2025 13:01:00 +0000
ROA not after:            Sun 10 Aug 2025 13:01:00 +0000
asID:                     30036
IP address blocks:        74.84.91.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 16 May 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d4:2f:9a:15:dd:32:c2:ce:51:e6:49:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: May 12 13:01:00 2025 GMT
            Not After : Aug 10 13:01:00 2025 GMT
        Subject: CN=975dd60a-0c49-41c9-93ca-d4c9cf7c0841
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:20:24:6e:07:74:16:25:ef:18:2e:ce:52:30:
                    e9:33:ca:5b:50:f4:9f:64:89:5f:b4:78:4e:90:f4:
                    79:2e:52:2b:90:9b:92:fa:4f:91:6f:41:47:97:dc:
                    49:b4:ab:08:e1:22:4b:b6:93:4a:b0:36:16:dd:52:
                    e5:a2:18:e0:f1:9b:90:1f:88:54:1e:2f:d5:9e:e4:
                    ca:b8:6e:41:5d:04:3c:0f:28:1e:25:80:c2:be:f6:
                    54:3c:12:3d:df:63:84:a3:f3:9e:97:36:e4:39:14:
                    e9:5d:a5:0d:ca:47:14:7d:4a:e8:35:42:58:84:e4:
                    f8:d1:41:0a:6d:9d:e3:e4:ba:d6:86:ab:cb:78:c3:
                    b7:21:88:ed:b0:7e:87:ca:7c:a2:7c:20:81:70:aa:
                    b5:8f:33:2e:d9:c8:49:f2:29:a1:c8:60:a7:c8:65:
                    bd:08:64:ab:7a:f0:85:75:f6:da:44:58:cc:d7:7a:
                    52:bb:a0:3b:46:bb:94:87:5b:fd:cd:93:bf:ba:bf:
                    61:c4:08:5c:9e:59:db:4b:66:00:63:d7:55:d4:a8:
                    5e:7b:fd:97:f6:a1:df:62:2c:2d:36:30:a9:10:07:
                    fd:88:7a:59:6f:f4:4f:67:f6:dc:eb:74:0a:73:15:
                    96:f5:ee:dc:cf:f9:5c:f2:ba:74:06:f5:67:70:95:
                    8d:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:56:A1:69:5F:50:EF:02:70:B3:C6:E9:A3:38:C6:33:2A:13:6C:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/2469d787-a3cb-3354-bad9-414ab6201e37.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.84.91.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:b3:88:ea:88:22:53:82:ea:ba:c7:e6:40:a9:4d:2a:78:27:
         0a:f1:79:e4:ae:ae:73:00:5a:4b:58:4f:1e:13:58:82:87:6f:
         b3:f5:e1:a1:94:fc:a9:bc:be:7d:1c:ac:c0:5f:68:d0:48:35:
         f0:fd:13:64:30:36:f5:ea:ff:2b:c1:49:7f:81:f0:82:02:c6:
         59:e6:4d:93:24:a5:81:89:0e:30:3f:92:f3:17:c0:0d:f3:2c:
         6a:96:f0:7f:7c:f0:2d:81:42:86:49:90:de:e5:3a:df:1b:3d:
         3b:03:ba:5b:41:11:0a:a7:df:0b:7d:7a:36:57:5b:ca:9d:30:
         88:79:22:7f:d1:7d:04:4b:80:b8:7a:47:40:19:2b:4a:65:43:
         ed:b9:85:a9:b4:e9:e4:d9:d7:a0:9e:e9:38:52:38:9d:4d:89:
         de:30:bf:77:ba:23:58:be:23:e6:60:26:60:eb:60:0c:8a:53:
         f0:52:5d:17:9b:9f:ad:7b:5d:51:68:57:68:ec:85:eb:1c:47:
         e7:85:0d:af:23:71:0f:3e:cc:03:95:bc:a0:79:63:08:74:eb:
         cd:d4:9e:16:26:9f:ab:98:05:77:e5:d8:b4:6f:9f:f7:82:55:
         53:ea:35:a5:6a:d1:39:15:63:bc:e9:07:a1:f7:26:c2:24:e6:
         4a:9c:c6:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 02:39:43 2025 by rpki-client