Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/fde94365-8756-38bd-a245-4051853c723e.roa
File:                     fde94365-8756-38bd-a245-4051853c723e.roa (raw, json)
Hash identifier:          hd/gv05m3Y8kGrXW5f6QSwBD0V4GFzux6pnIjr7crAs=
Subject key identifier:   F1:75:3C:B6:04:3A:70:25:8F:02:EF:38:1A:C9:6C:31:12:D6:80:9F
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584AB4EB643EBE4E5C0718BDD900
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/fde94365-8756-38bd-a245-4051853c723e.roa
Signing time:             Fri 01 Aug 2025 01:00:31 +0000
ROA not before:           Fri 01 Aug 2025 01:00:31 +0000
ROA not after:            Thu 30 Oct 2025 01:00:31 +0000
asID:                     30036
IP address blocks:        74.84.78.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b4:eb:64:3e:be:4e:5c:07:18:bd:d9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Aug  1 01:00:31 2025 GMT
            Not After : Oct 30 01:00:31 2025 GMT
        Subject: CN=2f0360a7-8713-499e-a30c-9401f84e56dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:7d:0e:9f:ba:28:30:b8:4d:15:b6:99:02:53:
                    b6:ed:ff:5d:b9:e3:c3:7e:41:ea:01:4d:45:96:84:
                    47:5a:12:1c:dc:4f:b0:18:13:f6:9d:5b:e7:e7:96:
                    1f:4d:9a:45:30:e3:16:f8:5d:b6:98:b5:d5:b9:ea:
                    91:cf:be:7f:b9:0b:1d:55:a5:a5:33:43:7e:52:5c:
                    ba:dd:73:0c:c2:c9:ad:ce:eb:7b:ab:e4:07:54:41:
                    5c:22:b1:c5:ba:ab:3b:9e:ee:ba:04:44:ed:2a:f7:
                    4e:11:49:6c:a2:ad:98:eb:e7:93:57:7d:c8:f5:db:
                    36:0e:cf:01:be:0f:39:5e:0f:ad:d8:a1:a3:ca:c1:
                    a9:37:89:4a:30:15:56:d2:07:73:d1:8a:2b:18:56:
                    4d:7c:f6:b8:5a:71:3b:f1:35:36:7d:ad:74:f4:6f:
                    c0:85:14:24:0b:7b:8a:f8:07:a1:b0:c3:c5:7d:be:
                    cf:08:e1:19:cb:47:5e:b6:9e:48:ea:99:15:36:b5:
                    c1:1d:61:30:0f:03:d2:1f:c9:f0:c6:71:c2:8b:3c:
                    f0:40:82:ef:a4:57:25:54:73:54:9b:3e:57:a8:26:
                    79:8a:a4:a5:84:eb:87:26:eb:9a:0d:10:c7:32:94:
                    ae:4b:d1:d1:fe:84:3a:36:f7:1c:29:5a:f9:33:6e:
                    46:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:75:3C:B6:04:3A:70:25:8F:02:EF:38:1A:C9:6C:31:12:D6:80:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/fde94365-8756-38bd-a245-4051853c723e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.84.78.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:1b:ee:a3:c4:d4:23:99:49:5f:f3:66:a0:49:61:2f:c8:05:
         78:a6:2d:5a:04:67:21:61:b7:29:3b:19:f7:5c:cf:00:96:15:
         80:a9:7d:fa:45:cf:14:b2:ae:d3:73:9f:c3:12:87:01:e6:66:
         39:32:b3:8a:44:7e:47:08:da:d7:78:08:64:2b:8d:56:cc:9a:
         7b:54:83:b0:06:45:aa:b1:f1:0f:5e:45:2b:27:6e:89:40:9c:
         2c:ee:f6:ff:54:e0:08:65:95:6a:b1:6c:0f:d1:0f:7e:43:ec:
         9f:7d:11:27:1c:98:03:68:d6:8b:b7:3f:e6:90:e9:9f:0f:b5:
         cf:b9:45:cf:f8:63:13:3c:bd:bf:34:ee:79:28:94:27:b4:6f:
         76:26:95:25:91:93:ed:86:31:c2:0b:9c:01:84:15:23:dd:df:
         6d:ec:27:09:c7:73:23:8c:f1:a1:8c:c5:66:1d:35:03:41:09:
         be:88:73:4b:ed:ea:57:97:a9:38:be:ff:8d:21:82:ab:fa:69:
         9f:8d:45:a3:6b:9c:77:49:54:91:97:82:6a:6c:ad:24:1a:81:
         a7:72:09:ea:33:b9:71:9a:3e:96:d3:1d:b1:69:ed:42:de:5e:
         d7:ef:36:00:fd:e7:cc:ab:e0:93:f6:de:36:c6:06:e5:a1:0c:
         fd:02:92:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:14:13 2025 by rpki-client