Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/cb7b4dc1-eb5a-3766-84ef-84426556a075.roa
File:                     cb7b4dc1-eb5a-3766-84ef-84426556a075.roa (raw, json)
Hash identifier:          AdZ9Sl9bmBjz3WQjvH2amx7oaiE4RY/7FddPLoU7P2Y=
Subject key identifier:   C7:9A:3B:BC:D7:0C:FF:57:6B:8A:36:80:32:98:3D:91:43:29:C6:21
Certificate issuer:       /CN=74b24643-d6d5-4d2a-b885-83160dec7103
Certificate serial:       010D0C9F4328584F4974AEED25F90C89E8E72580
Authority key identifier: 32:48:2C:26:74:5B:59:00:E4:D0:78:12:7E:F4:AA:AE:8A:4E:57:19
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/cb7b4dc1-eb5a-3766-84ef-84426556a075.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     1288
IP address blocks:        66.185.116.0/24 maxlen: 24
                          74.80.114.0/24 maxlen: 24
                          2620:171:54::/48 maxlen: 48
                          2620:171:e4::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:74:ae:ed:25:f9:0c:89:e8:e7:25:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74b24643-d6d5-4d2a-b885-83160dec7103
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=93f8774b-9134-49a1-b513-f0908efae543
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:7c:47:04:6e:f2:ef:d7:75:48:37:1d:50:58:
                    d7:af:83:52:a8:22:5a:10:60:90:31:66:8d:8d:59:
                    74:2b:95:a3:fc:68:b7:06:62:f8:3f:6c:72:b6:60:
                    af:5f:01:72:c3:05:0f:ac:ce:da:3a:ce:60:60:46:
                    92:ec:87:ba:56:20:a4:a7:e5:04:6d:06:6d:37:27:
                    0c:1d:f5:9e:01:54:6c:05:24:03:cf:f2:7e:e2:9a:
                    15:f7:50:ff:38:7d:43:8d:7f:96:36:f8:88:09:1a:
                    70:a4:3f:d3:bd:e4:14:75:55:65:83:70:ed:bc:de:
                    0f:93:20:67:65:aa:9e:01:32:fd:a4:38:26:9d:80:
                    3d:b6:c2:df:ff:9e:bf:5e:b8:bd:a2:ee:56:c3:51:
                    46:f9:de:e8:32:5a:ed:f6:2c:07:05:28:c4:5b:4b:
                    1b:60:22:2d:60:61:d6:a6:8e:cf:f2:92:62:34:37:
                    5e:6b:af:37:71:9b:c8:95:5c:3f:c5:af:b1:98:9b:
                    3f:90:82:37:dc:d7:12:e4:83:5e:9a:a3:57:f8:40:
                    89:2e:aa:ed:b0:00:cd:17:3d:f3:e4:38:14:36:65:
                    38:e0:bb:f8:9d:23:26:61:10:04:21:43:15:f7:fc:
                    a7:42:9f:b0:f3:a7:50:04:b0:9d:4a:ac:85:c6:a2:
                    db:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:9A:3B:BC:D7:0C:FF:57:6B:8A:36:80:32:98:3D:91:43:29:C6:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/cb7b4dc1-eb5a-3766-84ef-84426556a075.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.crl

            X509v3 Authority Key Identifier:
                keyid:32:48:2C:26:74:5B:59:00:E4:D0:78:12:7E:F4:AA:AE:8A:4E:57:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.185.116.0/24
                  74.80.114.0/24
                IPv6:
                  2620:171:54::/48
                  2620:171:e4::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:ef:88:0a:20:a6:c0:c6:e9:e5:b8:7d:74:04:27:fb:a6:e5:
         c5:42:a6:c3:2f:80:23:b5:50:31:08:47:ec:0f:a5:73:bf:ec:
         b2:e9:5d:a5:05:9a:b3:f1:ee:1a:70:65:36:f7:10:84:d6:bc:
         c8:9f:09:94:cc:89:6b:fd:dc:1e:37:3a:89:51:ac:e8:51:4c:
         3f:e1:c1:4d:ea:c9:98:70:3b:4e:6c:70:e4:af:df:ee:15:a6:
         1d:9d:97:c9:d4:94:c6:6a:21:f6:57:3d:e5:c3:ff:91:f0:c4:
         23:cb:46:ad:5f:5b:14:e6:7a:27:dd:53:ce:96:2c:5e:b5:3c:
         62:54:2f:42:26:9d:f6:81:3a:7b:7b:97:b4:09:4f:64:c4:5f:
         e1:69:54:65:9f:88:c3:c7:cc:4f:11:90:17:ef:d1:4c:87:d1:
         40:3b:2f:cc:01:20:79:68:85:6a:d5:9b:6d:69:ac:bf:df:6f:
         79:f7:76:d8:1a:3e:66:cb:7c:14:6c:1e:98:da:7d:c8:82:a5:
         17:92:93:1d:12:6a:03:0e:a7:16:2e:49:87:81:75:24:d1:ad:
         7b:e2:db:3d:dd:c6:af:1c:4c:2d:cc:1d:59:a4:98:b4:88:fc:
         7f:76:37:7b:c2:53:e3:34:69:36:24:36:91:23:6d:bb:68:ac:
         61:02:eb:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 01:01:58 2026 by rpki-client