Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/bcdd073f-7ba1-3bc9-aa99-b7343afffdd1.roa
File:                     bcdd073f-7ba1-3bc9-aa99-b7343afffdd1.roa (raw, json)
Hash identifier:          OtH6eOfJp67nepGZJB27gvGsuZVDhG6EP6UXw4vDnnc=
Subject key identifier:   D3:46:70:4A:BB:44:99:A2:1A:78:49:DE:4C:7C:58:F6:35:AE:C0:6F
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584E815FBF819939C8174D4AF480
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/bcdd073f-7ba1-3bc9-aa99-b7343afffdd1.roa
Signing time:             Wed 15 Jul 2026 09:00:13 +0000
ROA not before:           Wed 15 Jul 2026 09:00:13 +0000
ROA not after:            Tue 13 Oct 2026 09:00:13 +0000
asID:                     30036
IP address blocks:        74.84.112.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:81:5f:bf:81:99:39:c8:17:4d:4a:f4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Jul 15 09:00:13 2026 GMT
            Not After : Oct 13 09:00:13 2026 GMT
        Subject: CN=38284d8e-53ad-4611-8d39-9256875cd289
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:f1:9b:e5:ba:ba:95:46:d3:4f:07:b8:ae:44:
                    58:b6:35:79:b4:3e:89:d1:28:3a:a0:ab:7c:6b:06:
                    36:34:fd:56:1e:c8:0b:04:b8:67:51:d1:ca:9c:2a:
                    c3:8f:72:2b:db:f7:b5:be:a9:56:06:54:c1:80:27:
                    e9:a1:8c:66:59:03:6a:6b:66:d5:86:68:71:e5:13:
                    38:3a:ed:24:e7:6d:0f:1d:01:88:8e:5c:b0:ef:1f:
                    d1:c7:b8:50:8a:a8:92:28:5b:5a:03:2e:3e:76:dc:
                    0c:27:5d:89:de:af:e6:5c:84:a8:62:e4:e9:9e:1d:
                    89:e4:15:08:28:63:50:14:29:5f:af:9c:36:8a:9b:
                    cc:24:34:c7:01:65:cd:f0:79:cb:68:01:54:28:a3:
                    39:3d:1f:1e:bd:47:61:ec:11:3f:23:c5:a5:06:9a:
                    23:54:bf:8e:c2:d9:f7:e3:df:d7:77:e5:78:af:ed:
                    73:4e:f7:36:4c:65:ba:f1:86:d1:fd:32:a0:9e:ba:
                    a8:8c:dd:70:3f:90:69:35:ba:83:3e:1e:31:e5:cf:
                    a3:73:62:20:07:09:89:ef:d2:41:b8:64:c1:12:eb:
                    e4:c9:f3:ec:4f:65:57:26:c1:c1:06:61:f4:d2:66:
                    67:8f:a4:e0:32:a8:42:17:c9:52:54:41:07:ee:f3:
                    8c:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:46:70:4A:BB:44:99:A2:1A:78:49:DE:4C:7C:58:F6:35:AE:C0:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/bcdd073f-7ba1-3bc9-aa99-b7343afffdd1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.84.112.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:e3:94:47:2f:29:26:13:46:c8:55:56:d3:ef:94:c3:b4:eb:
         09:87:7b:9d:e1:45:84:44:7a:d8:48:cf:56:d2:93:a0:b6:2c:
         ea:82:4e:0d:ac:7c:79:e8:5f:54:a9:8c:15:90:82:89:e5:e1:
         00:85:04:b7:26:ad:fb:2b:29:ed:75:77:79:00:29:d4:f8:e0:
         a3:63:d7:db:89:31:72:29:b2:a4:1e:7a:6d:6f:3d:7f:3d:12:
         1e:33:3b:09:46:db:75:ce:67:4a:e2:2b:be:2f:04:89:3b:7b:
         ed:2b:3a:0e:17:c5:bd:6b:65:b1:53:88:27:80:65:bb:eb:0f:
         92:5f:cd:e8:aa:e6:cf:a7:d1:bb:cc:45:3d:76:31:9f:1b:29:
         05:d1:5b:07:d3:5e:d9:63:cd:38:55:23:a9:f7:6e:1f:a3:58:
         1c:cb:11:e4:bb:ea:fc:5e:93:89:e8:38:97:c2:b9:1f:33:dc:
         60:02:6f:41:1c:5f:1c:03:1c:32:b1:60:6b:58:0b:8f:af:04:
         6b:5a:c5:39:2d:79:33:e9:1d:cb:da:f0:19:e9:e8:a5:ec:01:
         2b:fc:8e:bf:39:07:65:7e:87:48:29:1b:1f:15:db:1a:32:8d:
         7b:2f:d0:13:d1:ed:7e:d0:92:db:88:ca:a9:e0:a6:4d:11:2c:
         68:9c:77:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:51:07 2026 by rpki-client