Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/6224a74f-a63c-30c8-9b88-c1979a43cceb.roa
File:                     6224a74f-a63c-30c8-9b88-c1979a43cceb.roa (raw, json)
Hash identifier:          oG8jTEPyZ7wFRSEeD+M9wgryGmLO3Z9CF1n2hIZk65U=
Subject key identifier:   8B:67:32:D4:03:28:2B:8A:48:D9:07:A7:F6:BF:94:B2:60:6F:B4:89
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584AB4EF02F89714C3B5C21F22E0
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/6224a74f-a63c-30c8-9b88-c1979a43cceb.roa
Signing time:             Fri 01 Aug 2025 01:00:31 +0000
ROA not before:           Fri 01 Aug 2025 01:00:31 +0000
ROA not after:            Thu 30 Oct 2025 01:00:31 +0000
asID:                     30036
IP address blocks:        74.84.120.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b4:ef:02:f8:97:14:c3:b5:c2:1f:22:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Aug  1 01:00:31 2025 GMT
            Not After : Oct 30 01:00:31 2025 GMT
        Subject: CN=d6b7763a-9fc9-4a33-b5cc-277d258db6d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:94:ad:97:da:a8:df:7d:67:55:4c:d8:8e:c2:
                    f5:e6:4c:6a:22:07:e0:43:79:00:8a:09:ed:e4:7d:
                    26:fe:37:45:2f:17:f4:30:96:f7:d6:dd:0f:78:f3:
                    9a:75:68:c5:5a:28:6a:c7:d3:83:d5:9c:ae:12:10:
                    09:56:41:57:e7:c6:26:71:27:e0:5e:c7:90:7c:fc:
                    83:36:d4:92:26:6c:c6:68:b3:ac:6d:f9:4d:3c:ed:
                    a0:98:75:45:b0:b1:79:a1:7d:da:e4:46:d3:c5:ea:
                    42:d9:a3:b8:6c:9b:db:41:68:59:78:2c:aa:cf:84:
                    72:39:05:64:c2:b0:43:84:cf:5c:3c:2d:4f:92:fa:
                    c5:8f:f1:b8:8c:50:05:15:f3:3c:26:04:4a:17:40:
                    9b:86:66:98:19:de:78:44:8c:d7:41:0e:28:46:18:
                    6f:2c:b5:23:aa:de:51:ba:b9:a9:13:d5:25:31:35:
                    24:16:0c:d5:dc:7f:26:57:9d:7b:16:81:82:30:78:
                    14:8e:ce:d4:52:ed:dd:9a:78:ef:a3:ff:85:0f:70:
                    ab:6c:fb:89:3d:80:9c:b9:b9:95:64:c5:2b:44:c1:
                    bf:c0:84:82:c5:cd:2c:4e:fa:4b:e1:cb:a5:09:be:
                    2c:f2:be:78:89:8b:a7:48:2d:c1:5e:82:12:1c:0a:
                    1d:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:67:32:D4:03:28:2B:8A:48:D9:07:A7:F6:BF:94:B2:60:6F:B4:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/6224a74f-a63c-30c8-9b88-c1979a43cceb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.84.120.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:5f:22:bf:ac:60:78:c2:d2:e1:8c:f6:a1:34:e2:03:83:95:
         2d:c8:d8:b7:ba:46:5e:01:8e:18:c0:06:07:c0:06:1d:f4:4c:
         25:97:b0:79:a1:e2:bc:1f:dd:a7:08:1e:3b:d3:da:5e:d4:9d:
         ae:ff:86:9f:11:2f:66:83:34:1e:5a:48:2f:07:c7:c8:73:a5:
         1e:c9:38:70:d6:ff:65:9c:ea:74:3b:0b:b0:ec:34:84:b5:00:
         0e:93:1e:79:b1:da:8e:da:04:e1:db:79:10:62:e3:65:d5:ce:
         36:81:f9:6e:15:30:60:e3:ea:13:28:93:86:8d:57:8c:6e:d2:
         bd:41:15:2b:e7:cd:76:e5:a9:46:87:b1:f9:47:fd:2c:da:d1:
         df:87:27:e6:b3:1f:21:c1:87:1c:46:24:79:89:92:4d:d8:d5:
         3d:d0:3a:71:70:58:b4:8f:f0:ca:3d:1d:66:f0:03:98:8c:78:
         4b:23:d1:51:9d:39:cc:b4:2b:45:d8:be:7e:a1:36:5e:00:b0:
         fd:9c:0a:9e:09:50:8b:a5:89:69:48:ab:66:1a:3f:9c:7e:db:
         d4:f1:3e:79:f5:b9:ca:03:ad:00:bf:e1:0a:b1:1d:24:18:67:
         02:9c:44:fc:3c:72:67:5c:28:5c:d9:09:a7:d7:44:da:72:b8:
         16:34:af:95
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq07wL4lxTDtcIfIuAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5
YTE1MB4XDTI1MDgwMTAxMDAzMVoXDTI1MTAzMDAxMDAzMVowLzEtMCsGA1UEAxMk
ZDZiNzc2M2EtOWZjOS00YTMzLWI1Y2MtMjc3ZDI1OGRiNmQzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwJStl9qo331nVUzYjsL15kxqIgfgQ3kAignt
5H0m/jdFLxf0MJb31t0PePOadWjFWihqx9OD1ZyuEhAJVkFX58YmcSfgXseQfPyD
NtSSJmzGaLOsbflNPO2gmHVFsLF5oX3a5EbTxepC2aO4bJvbQWhZeCyqz4RyOQVk
wrBDhM9cPC1PkvrFj/G4jFAFFfM8JgRKF0CbhmaYGd54RIzXQQ4oRhhvLLUjqt5R
urmpE9UlMTUkFgzV3H8mV517FoGCMHgUjs7UUu3dmnjvo/+FD3CrbPuJPYCcubmV
ZMUrRMG/wISCxc0sTvpL4culCb4s8r54iYunSC3BXoISHAodmQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFItnMtQDKCuKSNkHp/a/lLJgb7SJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw
Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvNjIyNGE3NGYtYTYzYy0z
MGM4LTliODgtYzE5NzlhNDNjY2ViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi
OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4
OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3
NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASlR4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEhfIr+sYHjC0uGM9qE04gODlS3I2Le6Rl4BjhjABgfABh30TCWXsHmh
4rwf3acIHjvT2l7Una7/hp8RL2aDNB5aSC8Hx8hzpR7JOHDW/2Wc6nQ7C7DsNIS1
AA6THnmx2o7aBOHbeRBi42XVzjaB+W4VMGDj6hMok4aNV4xu0r1BFSvnzXblqUaH
sflH/Sza0d+HJ+azHyHBhxxGJHmJkk3Y1T3QOnFwWLSP8Mo9HWbwA5iMeEsj0VGd
Ocy0K0XYvn6hNl4AsP2cCp4JUIuliWlIq2YaP5x+29TxPnn1ucoDrQC/4QqxHSQY
ZwKcRPw8cmdcKFzZCafXRNpyuBY0r5U=
-----END CERTIFICATE-----
Generated at Thu Aug 7 01:20:28 2025 by rpki-client