Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/9ee0bf8e-e66b-3dec-b4ba-bd36be63b900.roa
File:                     9ee0bf8e-e66b-3dec-b4ba-bd36be63b900.roa (raw, json)
Hash identifier:          6fFfXL9NdLRv2xFrDNRrxxZM2NgfmVLXKODeufZB2DQ=
Subject key identifier:   6A:B2:BF:9C:52:DA:31:2D:66:14:A0:45:85:67:2D:9C:98:C1:29:61
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584D55BA36552CFEB572DA89DB7A
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/9ee0bf8e-e66b-3dec-b4ba-bd36be63b900.roa
Signing time:             Mon 30 Mar 2026 01:00:23 +0000
ROA not before:           Mon 30 Mar 2026 01:00:23 +0000
ROA not after:            Sun 28 Jun 2026 01:00:23 +0000
asID:                     30036
IP address blocks:        74.84.84.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:55:ba:36:55:2c:fe:b5:72:da:89:db:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Mar 30 01:00:23 2026 GMT
            Not After : Jun 28 01:00:23 2026 GMT
        Subject: CN=8dc7eb99-c2ba-4c11-bbc4-b58b52808b21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:22:eb:34:f1:5d:cc:49:7c:ab:b3:be:e9:7d:
                    ac:64:e0:fa:73:66:36:b6:ac:e4:f9:b4:78:c7:09:
                    b3:44:c1:bc:cc:b9:86:06:2d:5d:b1:5a:11:93:26:
                    29:6b:4c:2f:df:80:51:73:aa:7e:4c:25:08:bc:9d:
                    01:7f:40:ce:b3:06:c2:dd:ba:b6:95:f5:d2:17:55:
                    09:b6:7f:dc:f0:5c:d6:b2:a1:e4:5b:d9:1d:f9:31:
                    f5:85:19:d4:e1:f6:69:a3:b6:05:e2:7b:d2:3c:8d:
                    97:60:0b:0b:31:75:bc:ff:33:17:78:d1:72:80:03:
                    a6:31:0f:1e:c5:8e:8c:2f:cd:f7:74:af:3a:26:3e:
                    c4:05:35:38:52:68:c9:d9:51:d7:6e:8d:dc:7a:d0:
                    13:45:08:43:3a:a3:f6:f2:e9:62:d1:88:80:46:80:
                    08:5b:df:7d:04:cb:5d:e6:da:37:fe:82:e6:02:0a:
                    72:23:17:34:5c:9e:36:7b:b7:11:fc:1f:ca:4c:74:
                    c6:77:27:71:fe:0a:bf:c7:02:1c:1f:81:dd:b2:af:
                    8d:2e:95:bd:35:fe:6b:3d:d1:b6:00:cb:fc:d1:f3:
                    6f:59:99:fc:7d:82:97:e9:f3:7a:a9:db:bc:5a:a3:
                    fd:82:86:d2:37:4b:da:50:48:29:86:dd:de:b8:91:
                    e7:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:B2:BF:9C:52:DA:31:2D:66:14:A0:45:85:67:2D:9C:98:C1:29:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/9ee0bf8e-e66b-3dec-b4ba-bd36be63b900.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.84.84.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:83:78:4d:7c:be:d5:ed:c7:ea:2d:55:fc:2a:e6:df:95:69:
         69:84:f3:b7:38:31:5f:6e:23:47:4b:71:b4:1c:1b:36:8f:0b:
         48:03:40:68:f2:55:74:08:75:40:09:b0:df:86:d6:c2:81:9d:
         37:b7:d8:23:8c:52:c0:f0:e4:77:1d:6c:64:bc:5b:c0:53:be:
         d3:93:44:a4:ce:d0:f7:b8:af:51:18:35:04:f6:b7:24:9a:63:
         a1:66:f9:5d:bb:a5:4e:de:e7:b6:d8:a6:4e:2c:51:b9:bf:59:
         ac:46:96:cb:da:e8:03:83:93:30:3c:5a:a2:b6:e0:0f:e2:9d:
         54:27:4d:e6:af:b5:04:ba:a4:19:55:53:4a:06:33:cd:42:05:
         49:1b:ee:3c:5c:e9:b1:98:88:1f:42:50:d5:3e:37:84:77:2f:
         11:ed:a3:61:f2:d3:33:fb:5c:4f:73:50:c7:3e:d7:98:c7:6e:
         6b:b1:41:b4:ec:1c:f4:e9:83:20:7e:20:b4:ee:c3:af:fb:a7:
         17:4c:37:ab:70:a0:82:92:06:3a:3c:fd:90:bc:1d:c4:89:19:
         2e:6e:cd:a4:0f:df:e6:54:7a:87:56:a1:97:f4:28:d4:04:00:
         d6:7a:a4:b3:89:54:25:99:38:7f:e6:b3:a3:74:1e:5d:11:6e:
         49:7b:c3:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:34:34 2026 by rpki-client