Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/1b1a7484-68ae-38f3-a676-279af3eac6f2.roa
File:                     1b1a7484-68ae-38f3-a676-279af3eac6f2.roa (raw, json)
Hash identifier:          B+zUG91vywZER3I7zK7bIc+tcfn5WqZY211BQX75dp8=
Subject key identifier:   4B:BC:E8:5C:C3:DA:20:60:3B:54:1B:A0:34:AA:F1:05:18:DB:E7:AA
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584A9DF901E0BF122242B8D3DD00
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/1b1a7484-68ae-38f3-a676-279af3eac6f2.roa
Signing time:             Wed 23 Jul 2025 19:44:24 +0000
ROA not before:           Wed 23 Jul 2025 19:44:24 +0000
ROA not after:            Tue 21 Oct 2025 19:44:24 +0000
asID:                     9009
IP address blocks:        66.92.55.0/24 maxlen: 24
                          66.92.60.0/24 maxlen: 24
                          66.92.61.0/24 maxlen: 24
                          66.92.62.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 11 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9d:f9:01:e0:bf:12:22:42:b8:d3:dd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Jul 23 19:44:24 2025 GMT
            Not After : Oct 21 19:44:24 2025 GMT
        Subject: CN=5d3e9e3b-a1bd-4468-8be4-4a29a0b656bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:17:36:cf:2d:f2:a6:69:35:30:42:8c:9e:9c:
                    e8:7d:ee:a5:f5:7c:05:8a:57:bc:92:a3:f3:09:44:
                    f8:28:67:3f:ff:0a:06:3d:dc:e8:47:bb:b1:77:c9:
                    ff:ba:e3:c1:ad:7c:e1:48:90:c2:68:ff:17:ea:53:
                    cc:54:97:32:f2:32:07:a1:c1:63:50:69:75:c9:a3:
                    e8:77:2d:0d:f1:35:5a:03:48:74:c0:29:e2:15:16:
                    90:b5:90:de:eb:07:ac:06:f3:55:0d:69:9b:ad:18:
                    35:e3:12:36:84:77:7f:61:39:48:a0:43:98:db:db:
                    ad:2b:a1:92:1a:88:49:7b:bc:2e:fa:82:08:4c:0c:
                    d1:da:59:3e:dc:66:98:a5:99:29:db:71:a8:77:2d:
                    74:6f:2d:dc:f6:50:a4:ef:6a:84:bf:29:f8:ab:f8:
                    c4:52:a5:71:c0:e6:3d:ef:a8:a1:f1:23:8c:41:63:
                    ad:9d:02:80:b8:6e:3e:8a:4f:6b:06:44:2b:97:f2:
                    61:6d:ad:57:e6:3c:75:86:17:16:aa:4e:ea:78:f1:
                    b2:09:68:24:4d:be:18:b4:d4:4d:fc:c1:1e:6b:64:
                    b6:44:1f:e3:73:43:06:4a:78:19:04:50:b7:ca:28:
                    e7:5f:7b:92:e7:58:95:06:5a:ae:e0:f2:30:d7:bd:
                    8b:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:BC:E8:5C:C3:DA:20:60:3B:54:1B:A0:34:AA:F1:05:18:DB:E7:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/1b1a7484-68ae-38f3-a676-279af3eac6f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.92.55.0/24
                  66.92.60.0-66.92.62.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:63:f0:f7:62:e2:16:ce:07:a4:25:cb:35:2b:d0:8b:d4:42:
         99:33:76:7f:fc:31:7c:77:51:31:58:9e:1d:bc:ad:84:74:10:
         0c:32:54:5f:90:cf:7c:c5:26:2e:07:75:1d:51:41:30:ab:28:
         08:0d:f9:df:ac:b0:01:38:30:83:7f:19:f5:f9:20:14:eb:1d:
         2d:ed:c1:17:a8:5f:70:05:d4:30:b8:de:48:3b:cb:15:c2:1b:
         db:75:b9:10:a0:3b:cc:e0:32:76:91:94:10:5a:22:0f:0f:e1:
         41:79:bc:14:06:69:47:62:42:2f:0f:0a:1e:c4:7b:dd:41:a3:
         77:b6:d5:0d:94:e7:74:0d:3d:ed:34:ed:bf:ac:c4:6a:4e:ac:
         e9:c1:88:ca:74:df:8b:54:e0:48:05:49:1a:41:81:05:85:f6:
         3a:cc:6a:42:cf:a3:20:9f:f4:2f:e7:0a:e6:8f:15:24:cb:d9:
         b7:0e:5a:7f:0c:2c:90:93:2c:6c:a9:99:85:79:52:ec:ac:e0:
         05:20:84:65:a4:59:b5:a2:25:98:f7:f5:bd:3c:29:f1:fa:cb:
         f9:d1:68:24:5f:76:6c:1c:a7:28:4e:f5:3f:2a:2b:af:e5:5b:
         23:82:db:c9:7a:75:6d:f1:9a:fc:be:86:2b:d1:f3:52:03:e7:
         2c:5c:9f:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 23:21:38 2025 by rpki-client