Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/323d7036-3bbc-38fb-861c-7dfb1aa96ff4.roa
File:                     323d7036-3bbc-38fb-861c-7dfb1aa96ff4.roa (raw, json)
Hash identifier:          HwwWsCNP2A4LZ9d/MrASJ2HjUknS4mzxevRwAsf4+MU=
Subject key identifier:   8D:EA:9C:0F:91:58:0A:EF:49:EB:03:B2:10:75:EE:3D:A4:1F:AE:DD
Certificate issuer:       /CN=74b24643-d6d5-4d2a-b885-83160dec7103
Certificate serial:       010D0C9F4328584EA79C667F94B236CC8604F480
Authority key identifier: 32:48:2C:26:74:5B:59:00:E4:D0:78:12:7E:F4:AA:AE:8A:4E:57:19
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/323d7036-3bbc-38fb-861c-7dfb1aa96ff4.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     1288
IP address blocks:        66.185.126.0/24 maxlen: 24
                          2620:171:ee::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 05 Aug 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9c:66:7f:94:b2:36:cc:86:04:f4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74b24643-d6d5-4d2a-b885-83160dec7103
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=aed08ff2-0fa6-46d7-9b17-fb81cdcdd60a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:73:26:a9:b7:b9:ae:a8:12:aa:95:ee:61:ec:
                    0c:b6:a9:b6:65:bc:58:07:11:90:21:c7:4d:87:47:
                    45:c8:bb:aa:32:79:f1:f5:a1:9e:fd:cd:65:a5:8d:
                    5a:12:ee:05:4b:e1:17:70:47:6d:b9:2d:e2:b9:29:
                    75:13:cc:f5:46:3d:52:81:74:9e:e8:e2:e3:ae:28:
                    94:c8:18:7a:a4:e8:61:01:3b:37:05:c2:c3:3a:14:
                    ec:2e:51:03:16:c8:88:36:d9:ff:b0:a5:3c:0d:f0:
                    0a:a3:ee:ba:77:8b:d6:b4:be:73:9a:32:04:10:3e:
                    2b:88:47:f1:b4:6e:d7:06:74:b5:7e:e4:ab:64:77:
                    f3:60:af:6a:61:13:c6:52:4f:cd:a3:00:62:7f:16:
                    a2:7c:46:75:68:b9:de:5d:be:ae:6c:b9:73:78:7e:
                    73:c2:65:d8:22:f0:a5:fd:fb:76:ba:5e:21:b6:00:
                    17:52:bf:1f:de:74:4a:f8:88:76:90:f9:90:2b:bb:
                    87:61:0a:f0:f1:e1:bf:9c:db:3d:84:39:26:8b:7f:
                    08:a5:c1:61:67:bb:b2:05:54:48:38:53:e1:ec:96:
                    40:53:bf:78:49:0f:ce:63:d4:43:62:9b:09:c6:2d:
                    c0:98:a2:11:45:6d:8f:b4:61:4e:59:04:85:1d:0c:
                    e7:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:EA:9C:0F:91:58:0A:EF:49:EB:03:B2:10:75:EE:3D:A4:1F:AE:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/323d7036-3bbc-38fb-861c-7dfb1aa96ff4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.crl

            X509v3 Authority Key Identifier:
                keyid:32:48:2C:26:74:5B:59:00:E4:D0:78:12:7E:F4:AA:AE:8A:4E:57:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.185.126.0/24
                IPv6:
                  2620:171:ee::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b2:21:ce:b0:40:5e:df:17:c1:69:05:fe:e8:30:64:df:d3:ed:
         c2:44:d6:fc:22:c4:cb:f3:6c:23:07:61:44:6c:5a:eb:e1:78:
         02:91:a3:a0:b1:c9:3e:b1:08:44:39:ef:40:49:2c:7a:76:d2:
         7c:8b:0e:0e:37:09:fb:95:35:a7:f0:ad:bf:45:fb:b4:d5:b5:
         53:00:8d:56:04:7f:30:ea:a9:50:6b:d1:e6:2a:6d:23:72:c1:
         86:32:95:b2:04:b9:c1:56:e3:b4:25:3f:56:99:7d:a4:ad:5d:
         9a:87:25:d8:cf:4d:85:49:27:c5:c2:0b:b3:68:99:4b:c8:36:
         5f:88:73:88:74:d6:02:bb:bb:50:d5:a7:f9:e5:e9:ca:f2:eb:
         fa:eb:8b:34:ef:2e:32:01:92:84:e7:4b:14:78:96:4b:51:e9:
         1f:b8:ab:44:38:95:0b:86:cd:b3:85:10:9b:39:72:f9:b2:2f:
         ca:2b:26:5b:91:52:2c:23:b0:97:9b:88:9c:65:4a:18:99:f7:
         5f:1b:12:14:f2:2e:b0:3d:c2:32:a6:db:40:61:90:23:ad:56:
         0d:26:86:50:49:b2:6a:0d:ed:3b:47:a9:fb:57:95:6c:ce:08:
         a7:39:61:2c:6c:77:89:1c:eb:3b:25:8c:f6:94:17:3f:ff:9a:
         d5:e1:67:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 11:27:05 2026 by rpki-client