Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/c412655c-8fb3-391e-b749-c41de890e588.roa
File:                     c412655c-8fb3-391e-b749-c41de890e588.roa (raw, json)
Hash identifier:          lcOxjnVjDcrIp52BZCsX47DUZ6kS6v0yGlG2xwm/buk=
Subject key identifier:   BF:DA:EA:63:47:7E:3B:12:5B:59:C3:58:AA:DF:3E:B1:BA:47:A0:6B
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584A1F900FCE1B7E9B533F2DD280
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/c412655c-8fb3-391e-b749-c41de890e588.roa
Signing time:             Sun 08 Jun 2025 13:01:01 +0000
ROA not before:           Sun 08 Jun 2025 13:01:01 +0000
ROA not after:            Sat 06 Sep 2025 13:01:01 +0000
asID:                     30036
IP address blocks:        74.84.100.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:1f:90:0f:ce:1b:7e:9b:53:3f:2d:d2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Jun  8 13:01:01 2025 GMT
            Not After : Sep  6 13:01:01 2025 GMT
        Subject: CN=299c7a4e-0394-4e7d-89c6-50130d905592
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:5a:ba:00:9c:f8:37:fd:83:40:16:86:89:20:
                    18:72:c4:dc:32:0a:03:61:c5:c6:c9:8b:44:9c:1d:
                    7b:9f:c6:11:90:5a:2d:83:b6:f7:99:0d:db:28:bf:
                    21:53:61:cd:03:fc:19:11:ed:bc:a1:eb:b0:62:00:
                    7b:9d:f6:3b:f7:02:dd:6b:92:c9:f2:d9:d6:0e:65:
                    33:5f:41:ca:c3:1e:d1:8e:c9:3f:01:2c:fd:72:31:
                    6a:20:5d:ca:03:d6:41:75:45:29:a3:5d:3e:96:0e:
                    e0:8e:ca:47:3e:d6:17:b4:7e:39:60:98:b3:1a:08:
                    aa:73:1b:db:a6:f3:1c:10:45:ba:4f:cf:4f:e3:52:
                    62:1b:09:8e:48:f8:d2:bf:d1:ca:bb:e1:81:81:7d:
                    9b:77:9e:22:6f:b4:c7:85:fd:08:ca:ec:5f:c2:47:
                    4a:46:a0:0d:5c:4d:28:99:56:39:f2:96:19:a9:e0:
                    9f:2a:46:07:a2:56:65:ef:b9:bc:c2:51:b5:ad:d4:
                    07:c4:2b:d0:df:6a:7b:05:8c:5b:de:a3:ae:09:b3:
                    f6:a3:7d:6d:ac:df:98:dd:01:b1:db:41:83:26:1a:
                    ed:6e:13:0c:09:58:0a:b2:d6:26:df:fb:a7:4c:44:
                    e4:c3:ab:e4:3f:4c:c7:83:8f:01:20:35:a9:a2:89:
                    fb:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:DA:EA:63:47:7E:3B:12:5B:59:C3:58:AA:DF:3E:B1:BA:47:A0:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/c412655c-8fb3-391e-b749-c41de890e588.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.84.100.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:28:aa:60:a3:6e:fe:24:1b:0d:a2:0f:ed:e5:f8:24:46:ed:
         ce:b9:bf:f1:94:47:4a:b2:0c:88:7c:b6:b2:f2:c1:b4:3d:fb:
         f9:ad:a8:7d:fc:29:8b:25:06:84:cb:52:74:07:93:63:60:dd:
         7f:e1:ca:a3:96:94:fc:92:d4:d1:af:fd:ad:38:0c:e0:e6:26:
         13:a8:5a:3e:b4:43:2e:cb:1a:c2:6d:67:cb:9b:11:45:0f:94:
         b1:dd:67:3b:45:ca:69:79:ae:f2:f2:42:fe:a2:db:14:bb:9d:
         bc:32:94:da:08:82:73:e2:0a:83:63:27:f7:18:fd:66:70:89:
         d1:24:c7:96:c0:4e:04:4c:54:80:f5:80:76:76:79:d9:0b:11:
         4f:a7:88:1e:20:a0:04:9c:86:e3:3e:5c:c2:8a:2c:c8:67:a3:
         87:2f:f2:ed:c8:28:31:cb:76:2e:16:67:17:be:3d:30:8d:c3:
         fa:b7:84:64:e8:ac:1b:22:3b:5b:53:db:20:62:c6:6f:9f:82:
         77:c6:61:38:4c:fb:9d:9f:1e:01:38:76:ee:53:a3:ad:b9:e9:
         bd:f7:c5:05:3e:9f:8c:92:fd:35:21:b1:a0:89:1e:db:8b:cd:
         9d:de:9e:bc:89:95:fb:5d:70:15:80:a0:3d:52:8a:0e:d1:eb:
         e7:2a:54:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 20:05:09 2025 by rpki-client