Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/82fe9f4a-978d-3afd-806d-02995e43350f.roa
File:                     82fe9f4a-978d-3afd-806d-02995e43350f.roa (raw, json)
Hash identifier:          /Nn0nXwO/RjSJbg2CBw4VrV6SYY6qq+Wh73rnJt97Hc=
Subject key identifier:   70:5F:41:C4:44:74:59:81:C1:0A:99:A4:DF:6A:EF:8C:4E:FE:35:15
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584D55BA33A31CD6C2D6EA923080
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/82fe9f4a-978d-3afd-806d-02995e43350f.roa
Signing time:             Mon 30 Mar 2026 01:00:23 +0000
ROA not before:           Mon 30 Mar 2026 01:00:23 +0000
ROA not after:            Sun 28 Jun 2026 01:00:23 +0000
asID:                     30036
IP address blocks:        74.84.86.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:55:ba:33:a3:1c:d6:c2:d6:ea:92:30:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Mar 30 01:00:23 2026 GMT
            Not After : Jun 28 01:00:23 2026 GMT
        Subject: CN=45b8a549-285f-45b7-bca4-3aa3ad804d3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:b7:1b:ed:35:96:8a:c6:35:80:9a:f6:42:1a:
                    d6:a3:92:5d:59:4c:d9:46:a5:cf:62:74:36:70:76:
                    d2:0e:4f:a5:6f:09:73:0a:f0:b1:f2:87:a8:6d:d6:
                    71:81:44:6f:ad:13:9d:bc:00:b4:68:42:73:b2:14:
                    89:2c:65:61:7f:f2:c4:64:eb:a0:0c:4a:1b:1c:ec:
                    ac:73:c2:89:93:53:ed:ca:35:39:59:35:e9:24:95:
                    37:d1:75:c7:e4:28:f2:d2:1c:8d:47:6a:86:6a:5b:
                    81:4a:1c:2d:2a:81:0a:89:d6:38:37:60:1f:91:e5:
                    a0:b5:61:22:b0:0d:ce:36:52:9d:48:6a:56:c9:04:
                    90:01:4a:ea:3e:62:df:98:23:26:72:04:41:c9:d9:
                    ef:6e:82:a2:c5:bd:3d:4e:c8:a9:8e:27:23:06:d9:
                    cc:16:40:db:31:27:7f:25:2e:9b:7f:b2:3e:3e:2f:
                    46:25:f3:e4:69:58:ad:d2:7f:1e:13:02:96:7e:92:
                    ab:e2:3d:57:02:b5:28:ab:fe:ce:12:d8:9f:7f:40:
                    9a:26:8c:bc:dc:17:43:4e:d6:90:af:b4:9b:6e:a2:
                    67:d7:5c:14:02:cb:7d:3e:47:6b:07:2e:f1:45:e5:
                    0d:83:5a:8b:51:73:e9:f3:2f:cc:bc:93:e1:4b:b3:
                    f8:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:5F:41:C4:44:74:59:81:C1:0A:99:A4:DF:6A:EF:8C:4E:FE:35:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/82fe9f4a-978d-3afd-806d-02995e43350f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.84.86.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:f8:57:7b:74:1d:e0:cb:4b:bc:94:5e:ae:3a:87:6b:a5:cc:
         9d:44:62:a7:5d:a1:9e:e5:65:e4:8d:a2:ab:6f:20:8e:bc:bb:
         6c:fd:80:a9:62:48:a6:d8:2f:7d:98:f8:0e:fa:5d:2d:02:ae:
         1c:cb:77:38:7e:30:30:1b:f7:bc:bb:57:b0:ac:1d:11:85:b4:
         7a:c3:bb:86:2f:16:a5:ba:df:78:14:62:0e:60:5a:78:d2:9f:
         c0:3c:5a:a8:24:38:f2:8a:69:3f:1b:df:e6:45:5b:db:b9:56:
         49:19:d3:e3:77:c2:85:c3:59:19:ed:b6:49:04:05:c3:e4:21:
         97:91:3a:ed:e4:d6:20:2c:27:20:23:6c:e4:b4:ce:ae:46:a6:
         07:39:ce:db:b8:2d:b0:2f:0b:a7:ba:be:ce:03:a3:72:c2:f7:
         85:7d:14:48:e4:50:a4:88:5f:38:64:ab:b5:ba:28:54:d1:fc:
         c6:a4:85:5e:77:f2:3b:6d:a4:9d:f4:8d:39:cf:a2:e7:42:b2:
         6e:26:70:3f:03:64:92:e5:37:68:7e:b0:88:ab:92:2e:4c:bf:
         ec:90:86:f9:c0:79:09:8f:72:e8:14:ff:19:a0:a2:d9:a8:97:
         4a:75:2e:1d:94:66:7d:d2:e5:30:6c:29:1a:60:9e:47:d3:60:
         90:88:c4:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:40:28 2026 by rpki-client