Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/43c1c065-c160-3757-82cd-bdb015ca4555.roa
File:                     43c1c065-c160-3757-82cd-bdb015ca4555.roa (raw, json)
Hash identifier:          W1V6JeTaF5w8SQw0KWBhUGNdWVl2R8qoOM/gR+9a5Gg=
Subject key identifier:   7F:B6:E8:30:39:87:56:37:BC:D2:3B:08:D0:C7:D1:E3:05:77:A1:BB
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584D55BCB484664C7B341A8C8000
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/43c1c065-c160-3757-82cd-bdb015ca4555.roa
Signing time:             Mon 30 Mar 2026 01:00:23 +0000
ROA not before:           Mon 30 Mar 2026 01:00:23 +0000
ROA not after:            Sun 28 Jun 2026 01:00:23 +0000
asID:                     30036
IP address blocks:        74.84.83.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:55:bc:b4:84:66:4c:7b:34:1a:8c:80:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Mar 30 01:00:23 2026 GMT
            Not After : Jun 28 01:00:23 2026 GMT
        Subject: CN=8c57c61e-06a6-4f81-9cc8-526eda3cef8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:86:cd:4f:9e:a6:0a:c8:84:48:01:1f:1c:06:
                    c9:6e:ee:8e:c3:29:aa:00:06:20:e0:0c:37:d1:8a:
                    71:80:88:15:a2:35:8c:4b:45:d9:3f:92:f6:54:2f:
                    6a:5a:1d:c6:35:24:27:a7:06:b0:0f:3c:97:04:4b:
                    fd:43:3e:39:13:a9:24:f9:90:df:fc:f6:9d:c9:09:
                    df:7a:01:98:44:5c:48:d2:d6:32:bd:64:29:23:98:
                    18:8e:95:a2:ef:6b:34:f0:82:a8:b8:2d:c0:f5:93:
                    de:b6:f6:1e:7c:24:bd:08:94:4f:1b:63:37:f9:73:
                    0f:f5:e3:24:a6:a3:ba:6e:ea:13:e1:7a:f9:ff:8c:
                    52:ba:d5:8f:aa:b1:ea:93:c8:2e:cf:6e:84:dd:f3:
                    48:7f:e7:c2:e1:a3:1f:3c:a2:9b:3a:0e:36:4b:59:
                    62:72:94:10:6a:59:33:f7:80:66:c3:69:d3:3f:25:
                    a4:9d:5c:e4:47:0b:bf:bd:de:e6:7a:c0:bd:94:e6:
                    8f:a3:d6:16:02:03:ce:47:9c:0f:18:28:89:c4:f6:
                    d4:86:1c:71:bd:81:c0:fd:4c:b8:b7:75:da:7d:52:
                    04:51:75:7b:c8:2b:b2:ff:db:eb:4e:6d:1d:20:e1:
                    5f:0a:00:cc:d1:02:02:73:13:39:4a:c7:dc:a7:41:
                    62:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:B6:E8:30:39:87:56:37:BC:D2:3B:08:D0:C7:D1:E3:05:77:A1:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/43c1c065-c160-3757-82cd-bdb015ca4555.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.84.83.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:70:82:38:39:64:20:d9:88:cd:41:b2:12:9c:87:b7:eb:79:
         22:d7:e9:f1:a1:4d:b9:23:7d:86:f2:ef:96:c5:cf:b8:91:8b:
         37:e4:1b:5b:8d:b5:1e:41:ae:66:f9:88:d9:cd:da:e2:64:17:
         65:52:b7:bc:12:64:c4:ef:8f:87:1e:6b:3a:91:69:f5:69:e9:
         36:d1:83:bf:ae:e8:6e:45:5a:36:f6:b2:54:b2:37:2e:fa:09:
         83:23:cc:80:5e:47:71:4c:4b:84:75:67:3b:8e:cf:66:25:7e:
         bc:30:0f:a8:c8:1e:a9:2c:56:32:24:11:da:b3:af:8f:a6:0f:
         26:84:7c:6c:bf:8e:cd:dd:46:21:45:f9:72:e8:4f:e9:64:ce:
         e2:91:cc:92:41:f9:73:9c:03:f7:f3:af:b5:d0:67:99:c7:65:
         47:74:43:61:62:14:01:18:f4:5c:12:c0:aa:cd:4c:05:c7:90:
         ca:86:56:07:f4:ab:dd:fd:30:9e:7c:52:2d:eb:80:ab:1f:c7:
         5f:9d:7d:fb:92:18:31:6c:40:1b:2a:d9:01:b5:54:d8:fb:c1:
         2b:4b:f1:01:05:0b:08:11:89:c2:9f:35:06:df:ce:05:2e:02:
         41:cf:07:a6:48:ca:3a:90:a7:71:82:df:d8:dd:b9:12:d5:e6:
         d6:0c:ba:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:25:48 2026 by rpki-client