Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/2469d787-a3cb-3354-bad9-414ab6201e37.roa
File:                     2469d787-a3cb-3354-bad9-414ab6201e37.roa (raw, json)
Hash identifier:          3HeC1sxpttrbzqgJhbeA/ayZzyPKogoSaLM2HXrLjDk=
Subject key identifier:   B7:98:BF:1C:83:45:A9:E1:60:79:4B:2F:D6:8C:4F:4E:E9:52:B9:25
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584AB4EB649D13D16D0AF4195B00
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/2469d787-a3cb-3354-bad9-414ab6201e37.roa
Signing time:             Fri 01 Aug 2025 01:00:31 +0000
ROA not before:           Fri 01 Aug 2025 01:00:31 +0000
ROA not after:            Thu 30 Oct 2025 01:00:31 +0000
asID:                     30036
IP address blocks:        74.84.91.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 09 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b4:eb:64:9d:13:d1:6d:0a:f4:19:5b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Aug  1 01:00:31 2025 GMT
            Not After : Oct 30 01:00:31 2025 GMT
        Subject: CN=baa4ddc5-63e4-49f9-9a2d-482d4162177e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:8e:53:18:e1:d6:25:3f:af:eb:b8:9a:b2:d0:
                    3b:c8:cf:18:e6:49:27:ec:f3:cc:f1:0a:d2:c5:7f:
                    22:a4:c2:a5:c5:16:ec:c4:1f:16:f5:30:fd:7c:67:
                    4b:d9:eb:b1:1e:e3:fc:76:e4:01:0f:b2:90:21:53:
                    dd:21:81:a8:63:0a:7a:39:16:27:57:87:af:0a:ce:
                    f4:e8:9d:b6:48:4f:16:8d:c1:e5:6a:39:aa:9f:f0:
                    7a:2c:18:1a:5a:23:83:89:4b:56:24:3f:e6:85:6b:
                    78:52:7f:da:df:bc:7e:f9:46:ce:8f:f6:da:fe:d8:
                    61:5e:58:5d:5f:7a:62:da:87:e4:de:5a:47:4f:46:
                    0f:33:cd:e1:d4:e3:4a:c4:40:34:0d:8b:a6:e4:6e:
                    9e:7f:39:37:52:5d:e8:30:65:89:7f:4a:1f:9e:4a:
                    61:43:52:da:20:83:2e:b7:f8:bd:7c:10:c4:79:50:
                    48:e9:40:c2:ab:e6:8b:b7:f5:e6:8b:41:13:ee:e9:
                    f2:22:3b:25:73:b1:d3:8f:ed:92:40:56:16:47:2b:
                    09:87:83:48:d7:cc:44:9e:6b:4f:22:e0:56:4d:01:
                    a4:43:7b:57:87:bd:3e:e8:52:5b:f0:ba:ba:50:f1:
                    6c:41:9b:35:2b:b8:0a:aa:fe:fe:51:c6:f9:ae:f7:
                    93:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:98:BF:1C:83:45:A9:E1:60:79:4B:2F:D6:8C:4F:4E:E9:52:B9:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/2469d787-a3cb-3354-bad9-414ab6201e37.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.84.91.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:45:9b:19:09:eb:d4:60:95:f1:db:fe:fb:0f:ca:1e:1e:b1:
         b6:99:b7:5d:bf:27:34:36:f4:24:26:37:05:59:37:c7:35:01:
         80:07:fe:a3:1f:77:6b:db:b9:7a:77:17:79:a0:70:7f:03:b8:
         f8:c7:ff:74:82:8b:89:7c:0a:4c:71:9d:ac:5b:2c:9a:14:ee:
         5b:5b:5c:e4:38:79:b8:5c:70:98:58:0f:c8:2a:62:b3:b0:3e:
         9a:fd:2e:26:e9:36:ff:10:34:af:3e:bf:dc:b9:85:fe:86:78:
         26:ad:bc:92:b5:60:27:29:5e:fe:8a:aa:58:0d:92:1f:00:af:
         8c:0e:5f:e5:2a:43:51:88:7c:42:3b:97:03:7f:2c:05:9a:75:
         39:a1:5f:93:13:5e:b8:f8:e2:58:ca:9d:ba:23:52:33:d5:02:
         3d:6f:4a:a9:65:2b:10:71:39:0f:bd:8f:42:b1:36:b7:70:37:
         ad:64:b1:dd:30:a1:79:1f:85:b3:5c:78:97:1f:9b:91:fd:05:
         c1:83:97:41:0f:eb:88:5c:e4:fa:f2:60:7e:6b:4e:a4:af:03:
         1d:ba:f9:91:54:4e:24:48:f0:d4:29:ca:54:86:2e:ad:2d:bf:
         ce:ce:96:f9:5f:7c:54:19:c8:c2:6d:dc:5e:38:30:1b:91:c1:
         9f:6b:d2:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 19:25:10 2025 by rpki-client