Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a76e80fc-9a3c-3de0-854e-2eaccc574900.roa
File:                     a76e80fc-9a3c-3de0-854e-2eaccc574900.roa (raw, json)
Hash identifier:          j7unLua6SliAN4y14b2Ep/MSaEo2Dt1g7L0U731dz4s=
Subject key identifier:   32:6A:FB:D5:E5:73:42:A3:2F:C1:F0:87:86:4E:36:EA:55:89:AE:33
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F43285849AF82C21266FEE987945F4640
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a76e80fc-9a3c-3de0-854e-2eaccc574900.roa
Signing time:             Tue 29 Apr 2025 09:43:45 +0000
ROA not before:           Tue 29 Apr 2025 09:43:45 +0000
ROA not after:            Mon 28 Jul 2025 09:43:45 +0000
asID:                     19905
IP address blocks:        74.84.64.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 May 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:af:82:c2:12:66:fe:e9:87:94:5f:46:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Apr 29 09:43:45 2025 GMT
            Not After : Jul 28 09:43:45 2025 GMT
        Subject: CN=3e8b8e5e-ad52-4f58-a7db-e6b9b68782c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ca:ee:e3:c7:89:86:49:3d:c8:79:3d:ae:67:
                    29:de:06:42:7b:91:7c:6f:2d:85:97:e3:31:33:43:
                    79:74:e1:74:8b:3d:ea:1b:cc:a3:93:4c:0e:f5:6f:
                    ca:c0:e9:ab:c7:fa:2e:1d:73:7f:6f:e1:99:c3:fb:
                    ef:d5:90:f0:86:12:9f:82:6d:fc:21:5d:88:35:70:
                    7f:6c:dc:48:91:8d:d0:6f:c3:5d:19:54:1e:48:3d:
                    d1:2b:35:1d:64:6e:e4:e4:ec:68:12:c7:df:da:4f:
                    8d:e2:fa:50:3d:1b:f3:cc:d0:83:82:f1:9f:23:d2:
                    f3:75:34:9b:d2:0e:15:80:f2:70:77:51:0e:27:c9:
                    65:88:d8:de:d4:00:49:98:88:39:c7:01:97:51:bb:
                    2f:e8:19:cd:11:c5:5c:25:4b:cc:29:80:52:f6:6f:
                    9e:23:6c:f2:fc:58:74:33:43:67:36:6a:dd:e2:30:
                    ff:5e:11:fa:f3:86:40:ec:f1:03:b2:56:e1:a3:be:
                    cd:3e:91:82:15:13:64:9b:b0:6c:da:52:2e:d4:17:
                    dd:18:0e:74:11:2e:aa:eb:4a:59:a4:be:9c:c4:b5:
                    5b:e4:ff:59:71:9e:b5:c8:20:07:fe:a7:fe:c9:18:
                    d1:5a:08:00:15:1f:45:11:0f:9d:d8:74:7e:e6:a8:
                    0b:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:6A:FB:D5:E5:73:42:A3:2F:C1:F0:87:86:4E:36:EA:55:89:AE:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a76e80fc-9a3c-3de0-854e-2eaccc574900.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.84.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:90:93:38:f3:d1:a6:69:79:36:d8:c9:48:0c:13:68:4a:b4:
         8e:11:0b:4c:3b:4d:f4:fc:77:ea:a0:1e:4e:a9:69:1d:b3:26:
         55:ec:43:89:ec:0d:25:76:59:b9:44:64:e6:db:4c:47:54:c2:
         d6:1b:2e:39:d7:b7:dd:8d:50:91:67:5c:4c:a8:20:b5:63:3d:
         5b:66:07:14:e3:da:8a:55:92:c1:6e:c4:f7:bc:2f:1f:7c:4d:
         97:22:cd:54:46:52:fd:e5:e3:4c:3f:69:43:a7:d0:9b:47:14:
         7e:8f:6e:df:8e:d5:6c:ab:b0:a8:0a:6c:71:25:46:2c:fd:6f:
         b9:e7:39:ff:36:74:67:0e:af:d9:2b:5a:21:98:5f:77:ae:5a:
         45:46:ef:93:9b:bd:fc:50:bd:d6:1c:af:37:66:46:85:f7:b2:
         36:8e:6c:88:5b:c3:67:e6:0e:65:b1:a3:7d:dc:54:53:4d:f5:
         df:08:cd:7d:4d:4f:1b:e8:6d:84:1d:33:cd:4d:15:51:a0:58:
         21:07:a4:ba:8a:cf:44:ff:71:1c:72:73:8c:78:3e:4f:11:7d:
         56:d3:20:7e:6d:19:98:ce:a4:40:c4:f2:61:8c:ab:41:ff:01:
         b3:a4:03:a9:50:e3:9f:da:64:20:57:6c:32:31:9b:b1:50:10:
         c3:b8:d8:02
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmvgsISZv7ph5RfRkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5
YTE1MB4XDTI1MDQyOTA5NDM0NVoXDTI1MDcyODA5NDM0NVowLzEtMCsGA1UEAxMk
M2U4YjhlNWUtYWQ1Mi00ZjU4LWE3ZGItZTZiOWI2ODc4MmM1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtcru48eJhkk9yHk9rmcp3gZCe5F8by2Fl+Mx
M0N5dOF0iz3qG8yjk0wO9W/KwOmrx/ouHXN/b+GZw/vv1ZDwhhKfgm38IV2INXB/
bNxIkY3Qb8NdGVQeSD3RKzUdZG7k5OxoEsff2k+N4vpQPRvzzNCDgvGfI9LzdTSb
0g4VgPJwd1EOJ8lliNje1ABJmIg5xwGXUbsv6BnNEcVcJUvMKYBS9m+eI2zy/Fh0
M0NnNmrd4jD/XhH684ZA7PEDslbho77NPpGCFRNkm7Bs2lIu1BfdGA50ES6q60pZ
pL6cxLVb5P9ZcZ61yCAH/qf+yRjRWggAFR9FEQ+d2HR+5qgL6QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDJq+9Xlc0KjL8Hwh4ZONupVia4zMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw
Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvYTc2ZTgwZmMtOWEzYy0z
ZGUwLTg1NGUtMmVhY2NjNTc0OTAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi
OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4
OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3
NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGSlRAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAISQkzjz0aZpeTbYyUgME2hKtI4RC0w7TfT8d+qgHk6paR2zJlXsQ4ns
DSV2WblEZObbTEdUwtYbLjnXt92NUJFnXEyoILVjPVtmBxTj2opVksFuxPe8Lx98
TZcizVRGUv3l40w/aUOn0JtHFH6Pbt+O1WyrsKgKbHElRiz9b7nnOf82dGcOr9kr
WiGYX3euWkVG75ObvfxQvdYcrzdmRoX3sjaObIhbw2fmDmWxo33cVFNN9d8IzX1N
TxvobYQdM81NFVGgWCEHpLqKz0T/cRxyc4x4Pk8RfVbTIH5tGZjOpEDE8mGMq0H/
AbOkA6lQ45/aZCBXbDIxm7FQEMO42AI=
-----END CERTIFICATE-----
Generated at Fri May 9 20:38:52 2025 by rpki-client