Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c63341d1-6cda-433e-9220-8eb860d0f1d5/24cb6931-6f99-3dcb-90a7-004a047b98c2.roa
File:                     24cb6931-6f99-3dcb-90a7-004a047b98c2.roa (raw, json)
Hash identifier:          qFUCusN5D4xjx3P8G3mjfOE7hm6paVXpypbhWBNnn5A=
Subject key identifier:   A1:37:D4:BB:BF:38:42:51:DD:DC:2B:E5:D7:75:EB:D3:8D:BD:C9:ED
Certificate issuer:       /CN=c63341d1-6cda-433e-9220-8eb860d0f1d5
Certificate serial:       010D0C9F4328584EA79A53174E25DB9C327D0F00
Authority key identifier: 30:8E:63:48:1C:3A:A3:59:5B:A4:2F:67:BC:4B:84:13:B1:61:B0:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c63341d1-6cda-433e-9220-8eb860d0f1d5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c63341d1-6cda-433e-9220-8eb860d0f1d5/24cb6931-6f99-3dcb-90a7-004a047b98c2.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     16509
IP address blocks:        66.45.74.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c63341d1-6cda-433e-9220-8eb860d0f1d5/c63341d1-6cda-433e-9220-8eb860d0f1d5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c63341d1-6cda-433e-9220-8eb860d0f1d5/c63341d1-6cda-433e-9220-8eb860d0f1d5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c63341d1-6cda-433e-9220-8eb860d0f1d5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 31 Jul 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9a:53:17:4e:25:db:9c:32:7d:0f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c63341d1-6cda-433e-9220-8eb860d0f1d5
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=ea9f052f-5015-4f82-987e-5f22eb3f4656
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:98:fb:a7:f7:8d:f1:ed:40:08:67:73:be:93:
                    8c:ac:e1:aa:4f:4f:01:36:b5:c2:28:40:12:f5:73:
                    e8:12:47:f1:45:fc:5c:c0:40:06:b9:af:34:1f:b5:
                    a1:47:fc:5d:b1:1a:e4:58:3a:7b:65:dd:57:92:50:
                    de:f0:27:50:23:a2:23:54:59:e3:77:33:f8:d5:f1:
                    71:dd:c8:46:34:84:75:28:19:d1:d5:12:85:9d:62:
                    58:c8:8b:83:87:67:8a:c8:d1:1a:6e:2f:c7:9b:d4:
                    10:a4:a7:a7:ac:1c:45:f8:66:f9:39:fb:30:28:ee:
                    bc:5d:5a:7c:b3:89:1f:ea:0b:12:62:9b:83:5b:88:
                    6b:85:80:04:8c:9b:fd:f3:ad:8a:52:ad:c4:cf:ae:
                    3e:13:b8:8e:b2:8b:93:c2:a0:7b:67:0f:15:20:92:
                    fc:e2:a8:01:f9:7f:f8:c2:f4:98:d2:b6:3a:39:6a:
                    7f:e0:1d:f7:18:c5:7e:5d:91:30:07:86:da:7a:4a:
                    5c:b6:a3:8b:f8:79:62:21:3e:6f:45:90:e3:cd:b8:
                    4d:25:cc:5f:c5:87:8f:b6:a4:90:88:56:76:84:aa:
                    cc:33:f4:f1:44:a1:0a:67:87:c2:ce:b7:8c:f4:15:
                    f7:6f:12:a4:81:48:9e:27:ea:fb:ef:46:ab:28:96:
                    99:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:37:D4:BB:BF:38:42:51:DD:DC:2B:E5:D7:75:EB:D3:8D:BD:C9:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c63341d1-6cda-433e-9220-8eb860d0f1d5/24cb6931-6f99-3dcb-90a7-004a047b98c2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c63341d1-6cda-433e-9220-8eb860d0f1d5/c63341d1-6cda-433e-9220-8eb860d0f1d5.crl

            X509v3 Authority Key Identifier:
                keyid:30:8E:63:48:1C:3A:A3:59:5B:A4:2F:67:BC:4B:84:13:B1:61:B0:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c63341d1-6cda-433e-9220-8eb860d0f1d5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.45.74.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:43:37:76:43:2f:ac:dc:15:d4:59:16:d8:d4:15:6c:69:a4:
         45:e8:b2:19:18:b3:64:18:83:16:c1:29:cc:95:bf:70:a8:f4:
         dd:7d:4c:e2:a7:65:f0:c6:a0:38:6d:3a:40:5a:01:27:16:d0:
         87:db:94:56:27:5f:7a:b8:8c:5f:51:b9:cc:a3:5e:92:f8:b9:
         de:fe:fe:10:ca:93:cd:a0:af:e4:74:72:2d:45:da:0e:31:e3:
         5b:05:64:96:cb:14:48:56:73:22:fb:bc:6d:3b:5a:28:f8:85:
         94:97:2e:b9:ad:68:73:09:d1:f1:d5:48:13:31:75:67:1a:47:
         bd:05:b4:36:f3:f5:fe:cf:3f:5f:67:ea:cf:c3:8f:ab:d8:a2:
         68:89:49:aa:e6:15:18:d8:c8:0f:a6:03:af:d8:48:c8:84:32:
         29:b1:6c:28:54:8c:34:8d:02:8e:4e:50:52:ed:19:b9:a9:30:
         a1:10:ec:ce:01:10:f6:0a:f4:84:fa:95:e4:be:92:5d:fe:0b:
         31:d6:c7:5b:63:39:02:a9:38:2b:4a:4e:38:13:24:44:81:d4:
         bc:52:5a:53:1a:e6:4c:6d:fe:a6:96:f1:e2:4b:c7:e9:9b:f6:
         3e:94:67:96:7a:0a:05:90:7d:47:6f:17:fc:e4:96:5c:42:04:
         ad:f6:ba:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 20:38:05 2026 by rpki-client