Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/47b89d69-b927-39d2-bdab-4446cca83880.roa
File:                     47b89d69-b927-39d2-bdab-4446cca83880.roa (raw, json)
Hash identifier:          Xgz+70JKZ/7llFNiSY+3c1mKv+gSeoTjb1ejLb0Acqs=
Subject key identifier:   79:F2:3E:25:A1:9E:31:C8:DC:C3:E1:E5:83:87:0E:B8:81:48:9D:D5
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584AAB37D6BCDA8E732A50F92900
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/47b89d69-b927-39d2-bdab-4446cca83880.roa
Signing time:             Mon 28 Jul 2025 13:36:30 +0000
ROA not before:           Mon 28 Jul 2025 13:36:30 +0000
ROA not after:            Sun 26 Oct 2025 13:36:30 +0000
asID:                     13444
IP address blocks:        66.92.1.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 11 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ab:37:d6:bc:da:8e:73:2a:50:f9:29:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Jul 28 13:36:30 2025 GMT
            Not After : Oct 26 13:36:30 2025 GMT
        Subject: CN=0735d474-7104-419e-aea2-78f9f9d84157
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:64:14:11:a4:f2:50:3f:ce:ec:13:a9:17:2e:
                    3f:ee:d6:5c:30:cd:87:04:c8:f7:c1:8b:8a:6a:0c:
                    38:77:11:d9:9c:63:9f:5d:db:64:91:ff:98:a6:bb:
                    ab:da:a1:9d:fd:01:b2:c4:e8:97:2a:f5:a9:ca:29:
                    34:53:09:1f:f6:e0:ca:9d:1d:a9:9d:71:89:15:0d:
                    7b:e4:e8:aa:d5:b1:31:49:68:74:d8:81:95:fd:93:
                    c2:8e:1b:8a:5f:4f:55:cc:33:84:b5:58:69:79:ce:
                    03:73:84:45:8d:5e:ae:9e:72:d0:b7:0e:32:ef:c7:
                    e0:20:0e:ee:4f:48:4a:81:ac:46:7d:02:a2:74:64:
                    de:8b:06:1a:21:88:e6:96:55:4c:4b:06:60:12:7b:
                    22:df:0c:62:47:c2:75:e8:91:91:1b:1a:25:43:87:
                    52:d5:b8:a1:02:2b:b7:7a:8c:d2:0e:d1:08:92:99:
                    ea:69:f4:66:72:b0:20:ae:bd:ae:a9:bd:bb:ff:59:
                    69:6c:9b:e6:2d:a9:4a:a4:96:6e:18:b5:07:97:88:
                    63:eb:56:d9:2c:6a:45:f6:c2:9c:bf:08:e4:f5:81:
                    75:89:7f:3a:4d:20:b3:24:09:cd:23:5a:79:d0:e8:
                    f1:b5:6c:ae:ed:72:c5:47:3b:92:98:60:ef:f1:fc:
                    71:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:F2:3E:25:A1:9E:31:C8:DC:C3:E1:E5:83:87:0E:B8:81:48:9D:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/47b89d69-b927-39d2-bdab-4446cca83880.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.92.1.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b2:fe:6e:79:80:89:e6:5e:a5:37:91:e1:fa:1d:73:98:22:56:
         cc:7a:39:18:74:9b:11:48:54:55:60:f6:ee:bb:db:46:d2:15:
         19:3e:f2:b0:e3:89:17:25:ac:47:27:c0:8e:b1:b8:ef:b3:fe:
         bf:26:77:94:bc:2f:a9:25:15:9d:6b:95:e9:03:dd:5a:c3:9e:
         49:06:cb:2b:3c:29:aa:fa:ea:ee:ef:b8:23:16:8a:56:f2:5f:
         29:03:67:cf:4f:a8:00:77:30:a9:b4:26:ae:0e:28:95:7f:74:
         dd:ce:d6:b0:75:83:63:61:8a:62:48:e8:f0:dc:45:c6:8c:bc:
         66:4c:f0:6d:f3:8b:80:ed:ba:0b:f4:a5:b0:53:56:b9:31:c1:
         83:9b:03:a4:ed:a4:18:05:f6:c2:90:06:5b:1d:35:3d:88:e8:
         e5:b5:87:10:cd:59:16:18:07:55:a3:88:bf:61:de:a0:ba:62:
         cf:87:53:85:e3:42:9e:1d:37:ce:4d:52:45:ff:ef:59:db:fd:
         ad:16:17:82:dc:1e:0a:ed:12:e0:fe:4e:8f:12:07:9a:19:2c:
         bc:14:0c:24:5c:4c:f4:87:22:e7:67:e2:1e:f6:7a:f1:d8:fe:
         6f:d4:b1:ae:13:f8:28:8f:ec:d0:ba:b7:78:d2:e4:7d:9d:6c:
         7d:87:8d:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 23:28:46 2025 by rpki-client