Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/fdf74bef-5ab8-3beb-8a94-d0e54882a619.roa
File:                     fdf74bef-5ab8-3beb-8a94-d0e54882a619.roa (raw, json)
Hash identifier:          OYItv3GkogBY2Jj8VTgWjJSUPw8Ap8TtE6ki231m3wU=
Subject key identifier:   0E:49:F5:7D:F6:E5:03:16:A7:9C:11:8A:79:3D:F6:53:BA:46:82:AB
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584DD625C845BA4F39373E9BAAC0
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/fdf74bef-5ab8-3beb-8a94-d0e54882a619.roa
Signing time:             Fri 15 May 2026 01:00:24 +0000
ROA not before:           Fri 15 May 2026 01:00:24 +0000
ROA not after:            Thu 13 Aug 2026 01:00:24 +0000
asID:                     30036
IP address blocks:        74.84.98.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:d6:25:c8:45:ba:4f:39:37:3e:9b:aa:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: May 15 01:00:24 2026 GMT
            Not After : Aug 13 01:00:24 2026 GMT
        Subject: CN=a9e25eca-b557-4020-9907-b399be33e0ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:a6:97:38:b1:22:91:60:66:b1:c9:02:a7:04:
                    b6:03:1f:1a:7e:d8:0c:17:f8:3d:24:4b:54:e8:5b:
                    2c:a4:c8:86:8d:0a:76:79:06:7f:5d:3f:df:64:e0:
                    ac:d3:48:08:6a:26:53:fc:9f:d1:26:fb:af:35:d2:
                    61:96:62:02:49:87:23:f2:4b:f4:13:5b:2e:c7:fc:
                    4c:37:df:ca:33:a4:c7:bb:02:88:8c:e6:43:4d:f3:
                    30:2b:54:d4:2e:a1:05:e7:71:83:7e:b7:6a:8a:bc:
                    43:f2:39:ba:e5:ef:76:44:75:6f:c8:0e:cf:00:07:
                    26:21:23:fd:af:5c:a3:3d:c3:ee:40:c6:2e:5e:89:
                    00:07:3a:c8:85:c6:9b:8d:f5:36:53:9a:73:08:f4:
                    be:da:da:fd:39:75:5c:c4:8e:77:db:cc:c8:ec:77:
                    cd:25:76:3a:1b:7d:9b:9e:af:74:97:8a:1b:9e:2d:
                    77:27:2a:8e:bc:fc:50:42:6f:21:44:ce:0b:07:35:
                    91:e1:86:00:90:51:c1:5f:43:e5:10:1c:8e:a9:03:
                    33:30:32:41:5b:9b:fd:cf:5b:94:bc:4b:c9:1b:2f:
                    b7:cb:8f:ab:b8:e4:9a:84:38:cd:db:8c:f5:28:c7:
                    32:29:49:6f:a6:cd:60:cb:5f:7a:31:8d:3d:ef:98:
                    25:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:49:F5:7D:F6:E5:03:16:A7:9C:11:8A:79:3D:F6:53:BA:46:82:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/fdf74bef-5ab8-3beb-8a94-d0e54882a619.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.84.98.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:e9:e3:bf:be:c2:2c:de:2b:7a:6d:c9:fd:10:18:0d:47:a6:
         db:22:a3:e3:ed:42:6b:15:bd:0f:67:5c:51:5b:24:bd:78:14:
         63:3d:40:28:1c:5a:bf:e2:8b:42:6b:72:1a:57:4c:06:f7:ca:
         56:95:91:88:9e:c0:e0:2f:11:f9:36:f2:38:74:b1:28:cf:33:
         9a:b8:0e:57:72:5f:b1:f1:33:31:0b:b9:8e:e0:ac:83:37:50:
         78:e5:fb:e0:5b:ac:b1:a5:7e:43:5f:6e:57:4c:f9:c1:fa:21:
         88:bd:5a:e1:09:04:b7:77:90:88:23:75:d3:7f:88:31:78:35:
         99:ae:8c:20:05:ed:8e:15:d5:6d:27:c8:8a:81:de:e3:25:94:
         79:76:db:13:57:ab:13:71:1c:be:d0:6c:b8:fe:05:38:b9:61:
         7b:27:bd:c3:e8:4b:40:46:32:e8:12:70:37:66:f4:ba:fc:75:
         86:ee:a4:d5:1e:ac:97:97:fe:64:67:35:7b:02:ea:23:b2:fb:
         cb:61:23:f0:fd:56:75:f3:d4:b4:39:a0:e6:6c:c8:31:da:c7:
         5b:29:21:5c:33:7d:61:79:1e:ff:f0:78:ba:4a:97:7a:7e:be:
         f2:ae:69:72:78:cb:24:24:92:4b:ef:d2:e7:bd:41:26:b9:b4:
         2c:cd:3d:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:32:37 2026 by rpki-client