Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a76e80fc-9a3c-3de0-854e-2eaccc574900.roa
File:                     a76e80fc-9a3c-3de0-854e-2eaccc574900.roa (raw, json)
Hash identifier:          QXP2uW7duPku0kwPagC9EQ0FTP2zHb+CvRATX13Cq/I=
Subject key identifier:   90:F6:9A:F0:D1:BB:1F:F2:29:14:0A:AA:38:1C:C4:62:D5:66:DB:52
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584E104F291D2F3B4058DF477F40
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a76e80fc-9a3c-3de0-854e-2eaccc574900.roa
Signing time:             Thu 04 Jun 2026 21:00:12 +0000
ROA not before:           Thu 04 Jun 2026 21:00:12 +0000
ROA not after:            Wed 02 Sep 2026 21:00:12 +0000
asID:                     19905
IP address blocks:        74.84.64.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:10:4f:29:1d:2f:3b:40:58:df:47:7f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Jun  4 21:00:12 2026 GMT
            Not After : Sep  2 21:00:12 2026 GMT
        Subject: CN=716c31c7-eaec-44cd-be75-959e93febf9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:62:7b:19:92:e7:cd:6a:f2:02:59:ba:a5:0c:
                    24:18:5e:8f:b3:73:1a:a3:4e:02:61:75:e9:28:2e:
                    bb:76:ae:c8:c9:9b:32:f1:70:58:b9:05:a3:66:27:
                    16:27:8e:78:ab:8a:35:82:67:69:89:07:76:5c:de:
                    96:5a:85:53:2e:b6:b0:a2:3b:45:1c:49:eb:8c:e3:
                    d8:4c:f1:3e:fe:97:ce:e1:03:07:b0:47:d1:da:5d:
                    39:2c:74:0e:ee:8f:99:65:61:9b:85:6c:25:7b:cc:
                    83:51:86:17:07:2b:f1:ab:a8:08:7d:9e:3f:bf:f0:
                    89:d5:42:4a:02:c2:f9:dc:25:2d:03:7e:88:d8:1d:
                    da:32:51:8e:9c:bc:45:b6:93:38:d6:2a:0f:1d:80:
                    63:4a:76:81:e5:6e:b1:13:f9:4a:e7:c8:c4:3a:ff:
                    65:7e:c1:11:a8:0b:28:93:b7:af:85:2a:d1:35:3a:
                    4d:bd:60:07:21:32:a2:b5:32:12:4b:fb:2c:7d:52:
                    a1:5a:8c:24:26:05:59:c7:66:d6:d8:37:b9:67:72:
                    fa:9c:e5:7a:ba:f8:31:e6:7f:f8:d7:15:87:fa:db:
                    40:48:1e:a2:02:0b:00:b6:e9:8b:6e:31:45:9a:f9:
                    d4:69:b9:e6:1c:98:b3:03:ed:87:f1:32:27:38:34:
                    58:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:F6:9A:F0:D1:BB:1F:F2:29:14:0A:AA:38:1C:C4:62:D5:66:DB:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a76e80fc-9a3c-3de0-854e-2eaccc574900.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.84.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:ec:07:9d:7a:b5:e9:64:2d:59:a6:88:6f:ac:60:3b:48:5f:
         b7:cd:7f:8a:13:a4:54:10:2f:61:b5:9b:d7:c5:87:4d:bc:a4:
         85:f1:15:48:f1:d9:09:8e:da:1a:43:c4:f5:90:3f:e9:80:05:
         a0:ac:1c:55:8e:77:a1:47:66:68:2b:0b:33:6d:40:af:29:45:
         c9:94:70:ef:1e:ac:ca:25:91:bf:b7:9c:78:c8:89:61:96:6b:
         b5:a9:3d:17:4e:2d:cb:7f:fe:b7:ea:e3:8d:94:f5:d8:7c:6e:
         10:30:87:d9:ad:17:d2:89:71:43:35:5c:8d:77:32:38:ac:70:
         11:88:24:3f:6e:a7:98:16:1e:aa:e9:16:b7:4c:70:03:7b:a2:
         6a:82:d3:68:cc:4f:f3:19:7b:e7:c8:3a:68:61:41:f3:2e:62:
         6c:fc:91:9b:28:d2:08:c4:eb:81:f6:2b:76:27:b4:4c:ec:e6:
         4c:54:a9:55:e8:36:3e:15:d0:53:e6:88:2a:90:9c:33:2f:a3:
         9a:f8:60:9f:69:73:d7:41:2d:1a:5a:2e:ca:25:31:46:71:82:
         af:ee:63:ef:1f:bb:cd:3d:11:d0:ff:77:c5:f2:74:c3:8d:d9:
         32:ff:f5:83:d8:1b:63:e8:0a:47:fc:d0:6c:1e:22:aa:b8:7a:
         eb:8c:2a:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:15:11 2026 by rpki-client