Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/fdf74bef-5ab8-3beb-8a94-d0e54882a619.roa
File:                     fdf74bef-5ab8-3beb-8a94-d0e54882a619.roa (raw, json)
Hash identifier:          GfGP2iqkKPx90MCfFKgLSpnQPgvw2IeqChnvdswvl3c=
Subject key identifier:   57:A6:D4:69:8F:85:54:67:E2:32:6C:A7:AC:BA:1E:24:1F:04:CA:BF
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584A549B1346581F513525BD58C0
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/fdf74bef-5ab8-3beb-8a94-d0e54882a619.roa
Signing time:             Fri 27 Jun 2025 13:01:05 +0000
ROA not before:           Fri 27 Jun 2025 13:01:05 +0000
ROA not after:            Thu 25 Sep 2025 13:01:05 +0000
asID:                     30036
IP address blocks:        74.84.98.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:54:9b:13:46:58:1f:51:35:25:bd:58:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Jun 27 13:01:05 2025 GMT
            Not After : Sep 25 13:01:05 2025 GMT
        Subject: CN=b7375212-7f3a-42fc-a8f0-d05954fe67e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:4b:8a:e8:5b:12:27:97:bf:cf:ca:3b:bc:6f:
                    f8:52:26:13:98:1e:26:83:26:2f:80:69:fa:c8:46:
                    28:2f:8f:d4:88:84:c9:ce:c4:de:41:b5:2f:77:7b:
                    2d:53:e9:6a:c3:20:33:40:70:67:34:de:20:be:51:
                    81:a0:f2:c1:86:a7:f5:66:76:d1:d8:29:80:30:ae:
                    60:eb:9a:3e:9b:d5:ca:07:6f:ed:bb:08:47:f8:40:
                    6c:ab:5f:f3:e3:d1:22:ff:ac:5b:c2:77:ec:f7:c5:
                    96:e1:d5:88:c4:92:92:34:5d:5e:0b:ab:d8:dc:9b:
                    17:64:c8:fe:f8:2b:26:68:54:7e:ad:1e:73:7e:6c:
                    fa:13:25:5c:d8:90:77:18:80:cc:22:d8:7f:d6:c9:
                    90:8d:0d:e1:2c:7a:0a:b0:4e:b1:da:76:c3:aa:75:
                    10:38:3d:36:44:a8:cb:78:d5:c3:dd:e0:48:07:2b:
                    5d:08:53:d1:26:63:62:c2:98:23:cf:83:2c:71:6a:
                    34:06:62:a3:e2:5f:a1:13:ca:db:e3:d2:24:02:b7:
                    4c:a0:54:ba:ed:34:62:b2:7c:5f:80:6c:1b:77:c0:
                    ca:5b:26:d9:7a:eb:fc:7e:d2:9f:4b:ce:f4:32:14:
                    12:c4:4d:de:07:0c:53:ef:c3:a2:18:94:62:61:79:
                    8d:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:A6:D4:69:8F:85:54:67:E2:32:6C:A7:AC:BA:1E:24:1F:04:CA:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/fdf74bef-5ab8-3beb-8a94-d0e54882a619.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.84.98.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:10:a3:83:7a:1b:e1:7b:1e:3e:4d:82:df:0f:84:56:e9:65:
         e4:e1:b5:90:01:09:d3:a5:2e:83:db:b6:c8:40:5a:49:1d:87:
         c3:e3:a5:c5:8d:a1:43:14:8c:6d:92:df:8d:ee:8c:72:ec:4d:
         f4:91:5d:78:50:75:8c:19:16:ca:0a:84:4a:6b:3a:60:a8:c6:
         12:a7:19:19:b1:7d:aa:37:0a:6d:ad:df:f4:c0:5d:b6:c9:06:
         92:1e:b2:7b:c6:93:24:9e:c0:2e:e7:1f:e5:99:42:cd:d3:0b:
         aa:c1:89:94:78:10:0c:a8:59:94:28:f8:1f:d9:73:cb:fa:95:
         7a:6b:e2:1e:ee:47:28:7c:cb:d5:82:59:ec:da:b1:9a:16:bb:
         d4:d9:7b:62:dc:30:8d:37:56:79:29:e7:8a:a5:fc:c8:44:a4:
         90:db:19:c8:76:14:0f:ff:bb:63:e1:c5:04:e4:7b:3e:4f:90:
         ee:16:cb:25:ef:d0:aa:a1:64:99:f2:5d:95:f5:aa:c4:58:93:
         2d:5d:ce:b5:13:ba:de:b4:04:c6:5a:b8:dd:71:26:b0:8c:1a:
         4f:78:ad:84:d1:fe:fd:17:98:19:ed:af:d3:a0:9f:56:fd:a0:
         96:4c:76:1f:54:de:85:e6:53:00:0d:29:2c:3f:39:47:16:d1:
         6e:55:6d:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 18:39:19 2025 by rpki-client