Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a866c1ea-8526-3d61-ad4f-b7c71c63c5d4.roa
File:                     a866c1ea-8526-3d61-ad4f-b7c71c63c5d4.roa (raw, json)
Hash identifier:          s8DziO/X//1GqUh4Z3GJErZ6utKnWmkYpqTDnaQtdC4=
Subject key identifier:   66:0C:47:B7:86:49:40:3C:9D:88:DA:0D:77:5F:5C:1C:6C:42:6B:C7
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584AB4EF024C3CEEEED7BE2B7900
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a866c1ea-8526-3d61-ad4f-b7c71c63c5d4.roa
Signing time:             Fri 01 Aug 2025 01:00:31 +0000
ROA not before:           Fri 01 Aug 2025 01:00:31 +0000
ROA not after:            Thu 30 Oct 2025 01:00:31 +0000
asID:                     30036
IP address blocks:        74.84.127.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b4:ef:02:4c:3c:ee:ee:d7:be:2b:79:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Aug  1 01:00:31 2025 GMT
            Not After : Oct 30 01:00:31 2025 GMT
        Subject: CN=9f86a521-f5e7-46eb-b264-3dbc14beb177
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:c7:86:46:20:61:ce:97:9f:9d:2f:06:82:7c:
                    e0:cf:00:51:89:e5:34:83:80:4e:64:ff:01:c1:9e:
                    71:ce:c9:58:3e:a5:9a:75:03:d6:6c:b1:40:65:9e:
                    27:e4:76:5a:9d:8b:e3:fa:7a:aa:db:d3:79:72:6a:
                    8f:c9:d2:50:2b:62:d1:43:14:fa:e2:5b:16:8b:4e:
                    17:3f:e8:cc:d4:93:2d:9d:16:65:b7:e5:14:0a:f8:
                    88:44:c0:28:57:64:a1:69:4a:c0:08:5e:b8:7f:78:
                    dc:92:a0:32:9e:72:22:30:b5:19:73:e5:4c:b5:31:
                    78:9a:33:00:d8:4a:d6:48:50:fa:4f:3a:58:09:73:
                    5d:f5:5f:29:62:28:3c:38:76:d8:9c:60:ce:d3:db:
                    db:ec:b8:72:10:c0:d6:4b:2e:d9:63:28:23:b6:c3:
                    f5:d3:58:e3:3b:55:1f:fb:2d:ff:ed:0d:73:9f:89:
                    50:2b:0e:8b:e9:10:c5:0e:0b:21:dd:18:6d:fd:46:
                    6d:e9:ed:94:7f:d8:2a:26:69:38:9b:f0:9e:12:57:
                    18:44:f0:4a:56:79:1a:de:18:4d:65:86:2f:aa:41:
                    4a:fc:7f:5e:98:c5:4e:d2:21:b8:1a:f2:38:08:1d:
                    68:41:3d:1c:95:f2:4b:5a:9d:76:48:3e:fb:20:0a:
                    9c:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:0C:47:B7:86:49:40:3C:9D:88:DA:0D:77:5F:5C:1C:6C:42:6B:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a866c1ea-8526-3d61-ad4f-b7c71c63c5d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.84.127.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:ac:94:b0:97:cb:ab:3e:f6:d7:af:a0:9a:fa:0f:c4:ef:39:
         01:e6:35:de:76:43:56:9d:5b:77:f8:8f:9f:68:3f:25:f0:f9:
         0d:08:50:ad:67:4d:1a:f7:5d:ae:a1:54:1b:68:12:20:cc:d9:
         87:5e:0b:bf:40:4a:01:1d:06:03:21:bb:34:10:3c:db:5c:9a:
         bf:93:dc:99:83:ce:be:1b:15:ce:a2:74:48:20:61:2a:01:73:
         17:44:57:f3:3f:cb:55:f3:08:3e:cc:c9:e7:35:4f:24:79:b0:
         66:4b:4f:35:21:a1:00:f1:dc:8c:de:1d:22:aa:04:ae:93:26:
         2c:75:6a:6d:1c:15:2e:f3:f6:e6:4e:28:c0:3a:bd:1a:ff:d6:
         b9:08:cc:42:05:ff:c3:23:39:d1:fa:5f:5f:42:59:c6:ee:97:
         12:21:e2:60:5b:2b:de:6e:97:3c:ed:ff:0f:2b:a7:1e:4e:d0:
         bd:31:7c:ec:17:94:2a:4d:08:55:15:e2:d6:91:a0:b3:a9:df:
         87:6f:ed:96:41:af:ff:6f:16:4b:77:39:54:9c:6d:37:7c:78:
         0c:3e:06:bb:5d:ac:9f:c4:8b:68:20:39:df:59:9d:b1:de:ca:
         22:f1:6a:7c:92:9c:53:c4:48:fd:62:b2:7c:5b:c4:29:80:9b:
         10:0a:84:5f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq07wJMPO7u174reQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5
YTE1MB4XDTI1MDgwMTAxMDAzMVoXDTI1MTAzMDAxMDAzMVowLzEtMCsGA1UEAxMk
OWY4NmE1MjEtZjVlNy00NmViLWIyNjQtM2RiYzE0YmViMTc3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt8eGRiBhzpefnS8GgnzgzwBRieU0g4BOZP8B
wZ5xzslYPqWadQPWbLFAZZ4n5HZanYvj+nqq29N5cmqPydJQK2LRQxT64lsWi04X
P+jM1JMtnRZlt+UUCviIRMAoV2ShaUrACF64f3jckqAynnIiMLUZc+VMtTF4mjMA
2ErWSFD6TzpYCXNd9V8pYig8OHbYnGDO09vb7LhyEMDWSy7ZYygjtsP101jjO1Uf
+y3/7Q1zn4lQKw6L6RDFDgsh3Rht/UZt6e2Uf9gqJmk4m/CeElcYRPBKVnka3hhN
ZYYvqkFK/H9emMVO0iG4GvI4CB1oQT0clfJLWp12SD77IAqc2QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGYMR7eGSUA8nYjaDXdfXBxsQmvHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw
Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvYTg2NmMxZWEtODUyNi0z
ZDYxLWFkNGYtYjdjNzFjNjNjNWQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi
OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4
OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3
NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASlR/MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAECslLCXy6s+9tevoJr6D8TvOQHmNd52Q1adW3f4j59oPyXw+Q0IUK1n
TRr3Xa6hVBtoEiDM2YdeC79ASgEdBgMhuzQQPNtcmr+T3JmDzr4bFc6idEggYSoB
cxdEV/M/y1XzCD7Myec1TyR5sGZLTzUhoQDx3IzeHSKqBK6TJix1am0cFS7z9uZO
KMA6vRr/1rkIzEIF/8MjOdH6X19CWcbulxIh4mBbK95ulzzt/w8rpx5O0L0xfOwX
lCpNCFUV4taRoLOp34dv7ZZBr/9vFkt3OVScbTd8eAw+BrtdrJ/Ei2ggOd9ZnbHe
yiLxanySnFPESP1isnxbxCmAmxAKhF8=
-----END CERTIFICATE-----
Generated at Thu Aug 7 01:13:47 2025 by rpki-client