Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a76e80fc-9a3c-3de0-854e-2eaccc574900.roa
File:                     a76e80fc-9a3c-3de0-854e-2eaccc574900.roa (raw, json)
Hash identifier:          A1aogMvo9ei0SeTxtGdXsM5NLb6fXK6FnPWQQrpKHU8=
Subject key identifier:   2E:93:34:B0:59:EF:F6:77:E2:EF:E9:A9:F2:48:21:17:E1:93:A0:F6
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584B6FF744897F23B7C587D37A50
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a76e80fc-9a3c-3de0-854e-2eaccc574900.roa
Signing time:             Tue 07 Oct 2025 01:00:29 +0000
ROA not before:           Tue 07 Oct 2025 01:00:29 +0000
ROA not after:            Mon 05 Jan 2026 02:00:29 +0000
asID:                     19905
IP address blocks:        74.84.64.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:6f:f7:44:89:7f:23:b7:c5:87:d3:7a:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Oct  7 01:00:29 2025 GMT
            Not After : Jan  5 02:00:29 2026 GMT
        Subject: CN=ba4e2313-cd00-47a4-9b74-d1d7467de8e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:b8:43:2b:34:99:89:e6:21:67:cd:b5:83:4b:
                    0d:fe:fa:28:ba:67:0d:4e:ca:a3:96:9d:e4:a3:95:
                    2b:3e:9f:5e:7a:04:b1:72:5a:ce:44:80:d2:19:a0:
                    72:43:76:89:b9:e5:a5:f2:67:c7:1c:86:cf:27:84:
                    05:c4:a6:e3:13:75:07:2c:c0:94:03:ff:30:e3:5e:
                    44:42:fe:3b:cb:f7:4a:0d:6b:0a:7c:16:0d:75:89:
                    25:42:31:c2:fa:30:3f:5e:fd:75:a0:a1:1c:6f:73:
                    02:82:fd:d8:aa:c4:6d:02:76:50:d9:b0:14:9f:04:
                    34:e3:f4:66:40:26:f2:16:66:51:b5:0d:64:5f:cd:
                    15:79:21:bb:cd:7b:b0:a9:89:75:57:3e:e4:90:18:
                    3a:a0:eb:f8:5d:6f:5c:9c:39:f3:19:dd:d2:4f:10:
                    ee:cb:15:11:f7:4d:47:26:3e:1a:33:fc:60:49:7d:
                    17:fa:94:48:09:02:45:91:e1:ca:6c:fb:a9:fb:5e:
                    3e:79:c3:a2:e0:57:85:42:2e:88:75:48:19:78:93:
                    c0:c7:24:d5:99:8c:5c:b2:b0:89:a3:da:00:e7:2d:
                    c6:84:e6:a8:fc:3f:37:f5:66:86:09:7a:7e:5b:f0:
                    65:5e:1e:31:ed:68:1e:c5:2d:89:52:47:70:6e:a8:
                    08:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:93:34:B0:59:EF:F6:77:E2:EF:E9:A9:F2:48:21:17:E1:93:A0:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a76e80fc-9a3c-3de0-854e-2eaccc574900.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.84.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:27:72:f0:31:aa:62:07:a8:55:be:ce:cd:c7:a7:93:62:4e:
         b6:db:39:5c:f5:20:ae:a9:7e:f9:96:99:9e:fc:d4:fe:c1:8c:
         3a:71:25:34:83:e9:4c:2c:96:ac:46:89:93:da:0a:a3:f1:1b:
         df:da:ee:4b:fd:d2:f2:d9:2e:8c:37:de:18:07:69:e3:1b:dc:
         a1:1a:69:06:98:b5:13:97:b5:8a:9d:d1:80:55:6b:cf:59:c2:
         b7:ff:eb:87:83:69:24:ff:3e:19:d3:e5:63:49:8d:d9:df:35:
         e1:1e:1e:2c:2a:37:e9:b5:69:ad:9c:6c:04:71:e2:49:f2:d4:
         e6:5b:f1:80:7b:70:eb:51:2d:09:06:7b:a7:2b:b2:36:d6:fd:
         1a:b1:bb:4b:c2:9b:fb:ca:60:bd:da:cf:65:de:97:69:8f:99:
         e2:ec:88:47:94:50:fe:27:11:83:4b:e1:42:b1:a7:cb:06:a6:
         f1:ee:c9:e2:7b:9d:03:74:96:9e:d2:c8:9d:85:8d:b1:12:27:
         4d:1e:db:f8:13:06:27:da:72:37:2c:8f:c6:a9:7e:ae:f9:6f:
         72:20:4d:dd:b1:2e:e0:ba:52:51:ca:18:ba:30:71:96:aa:c9:
         ba:6a:54:14:b1:50:57:dd:00:a4:54:ad:72:9c:99:ad:67:d4:
         7f:94:a3:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:21:52 2025 by rpki-client