Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/325ae4db-0e9c-3240-8c67-adaea40167c1.roa
File:                     325ae4db-0e9c-3240-8c67-adaea40167c1.roa (raw, json)
Hash identifier:          Ep5Q+zIgwAaPYToh03urbVjS9su2cpP0Y5/4EwXJpc8=
Subject key identifier:   DC:C6:EE:75:14:05:04:D4:2E:17:CE:65:78:FA:F8:D8:5A:B1:F0:DA
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584AB4EB657E114298FAB5C38900
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/325ae4db-0e9c-3240-8c67-adaea40167c1.roa
Signing time:             Fri 01 Aug 2025 01:00:31 +0000
ROA not before:           Fri 01 Aug 2025 01:00:31 +0000
ROA not after:            Thu 30 Oct 2025 01:00:31 +0000
asID:                     30036
IP address blocks:        74.84.99.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b4:eb:65:7e:11:42:98:fa:b5:c3:89:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Aug  1 01:00:31 2025 GMT
            Not After : Oct 30 01:00:31 2025 GMT
        Subject: CN=6bd92093-f560-419f-a481-dae8e2313779
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:16:e3:ba:80:c1:f1:8c:b4:63:74:2f:49:39:
                    ca:19:4c:ed:67:2a:aa:69:ee:13:f5:68:11:c9:55:
                    8f:8f:5c:07:08:60:d8:0b:cb:be:3d:64:14:8f:fc:
                    8f:89:22:df:57:45:ef:ef:a2:93:7d:5e:80:e9:09:
                    e0:ed:07:c4:d4:50:36:15:5d:c4:88:a3:97:35:65:
                    fa:0d:90:3b:30:eb:1b:80:7f:b6:b5:02:61:6b:9e:
                    50:46:83:26:60:53:df:32:99:74:6e:39:95:16:65:
                    83:bd:02:43:5b:93:30:55:bf:9d:1c:28:88:75:03:
                    4a:f8:a2:5b:c5:c9:18:f6:06:61:b1:e6:ac:24:c5:
                    5a:87:b7:5c:2b:55:ef:31:43:f4:34:c6:6a:a0:3c:
                    02:be:b4:36:f9:71:3e:41:1e:8c:a3:0a:08:cb:08:
                    f1:f3:b8:43:e2:9b:fa:cd:2e:cc:77:f2:1f:da:46:
                    fc:ba:53:f5:f4:64:2c:d0:21:9a:ca:38:03:7f:5b:
                    35:61:90:07:ab:de:d7:d0:70:3a:d7:e1:bd:be:d2:
                    73:ae:3e:ed:4c:50:2a:01:45:52:cd:28:52:22:09:
                    bb:cf:66:23:b3:f7:e9:ab:ba:e8:d2:38:94:7b:36:
                    12:99:24:ba:a3:b5:6b:37:07:43:59:18:06:5a:f0:
                    1d:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:C6:EE:75:14:05:04:D4:2E:17:CE:65:78:FA:F8:D8:5A:B1:F0:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/325ae4db-0e9c-3240-8c67-adaea40167c1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.84.99.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:37:7e:bb:bf:f5:c2:5a:d7:2b:0a:b9:58:cb:b0:5d:43:b4:
         cb:66:ca:c3:0e:ea:8b:56:56:dd:de:71:a5:59:ea:f9:d1:67:
         be:52:65:7a:3d:5c:8f:27:33:ec:a8:4f:93:18:c8:0c:36:e7:
         a0:d1:57:af:a4:27:5d:28:00:da:f5:af:3e:2d:bf:51:7c:94:
         b7:2c:b7:d4:25:38:80:5d:63:84:55:f2:fb:e0:69:78:c3:c0:
         66:14:e2:38:41:ed:ed:8a:10:35:7d:67:63:15:25:77:e7:e3:
         eb:7d:7a:7e:4f:e0:c9:44:3f:03:fc:b5:7d:28:92:44:06:47:
         f4:7b:a3:1b:b8:8a:99:e5:e7:c3:ec:f9:ec:78:90:6d:6f:63:
         fc:ab:6b:29:ee:ae:18:62:d2:6b:f2:83:3c:bf:ea:09:14:08:
         a7:56:a5:9b:78:0c:a6:b0:10:97:9e:08:a7:13:65:f5:67:37:
         df:3f:3e:75:02:b9:a0:68:e8:d9:9f:b7:54:91:42:a6:36:19:
         0e:20:9a:d4:9e:d1:e0:d7:79:43:c1:7f:f3:b4:33:b8:ba:51:
         75:37:4e:57:c0:33:a5:3a:94:4f:b4:2e:aa:b4:54:a0:c0:2b:
         c7:ad:3e:fc:79:ee:07:67:8d:c3:bb:96:75:72:23:d1:08:e4:
         94:82:b1:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 00:33:15 2025 by rpki-client