Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/4a890e77-7139-3b99-ba3a-e7e0378ca359.roa
File:                     4a890e77-7139-3b99-ba3a-e7e0378ca359.roa (raw, json)
Hash identifier:          ptgF9TUTLlKjHBbZb2env7qDgIPPVcL1sONY5zEz9TA=
Subject key identifier:   E9:3D:BA:C7:F5:DE:C7:66:26:3E:E8:99:7F:8A:B7:82:E7:80:BA:1F
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584F2D87E45EEFCD317732646380
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/4a890e77-7139-3b99-ba3a-e7e0378ca359.roa
Signing time:             Tue 15 Sep 2026 01:00:12 +0000
ROA not before:           Tue 15 Sep 2026 01:00:12 +0000
ROA not after:            Mon 14 Dec 2026 02:00:12 +0000
asID:                     834
IP address blocks:        66.92.204.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Sep 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:2d:87:e4:5e:ef:cd:31:77:32:64:63:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Sep 15 01:00:12 2026 GMT
            Not After : Dec 14 02:00:12 2026 GMT
        Subject: CN=81effbb1-0f8c-4bcb-b2b3-317efb9e09b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:b1:0b:88:be:54:d8:6d:ec:ab:a1:7b:b4:15:
                    f7:22:24:43:85:cf:b4:72:75:1d:1a:51:23:53:d0:
                    91:af:b3:f4:57:c1:ce:c5:f8:c5:f7:66:09:8e:eb:
                    d4:fa:be:d5:50:79:db:a9:02:b8:04:c0:24:1a:ff:
                    3c:4e:bf:0a:3a:78:28:b5:c9:f8:b6:04:93:bd:a0:
                    31:aa:17:15:9c:ef:5d:dc:64:3b:d0:1b:ac:2a:a1:
                    92:45:6e:b3:00:fd:21:f4:ff:82:5a:37:a3:51:fb:
                    cb:1e:f6:34:47:08:3c:66:2a:ee:05:cd:d1:e0:82:
                    9e:06:eb:13:50:93:3f:be:09:ea:bf:fe:9c:7b:e8:
                    47:19:27:90:c7:db:c3:ba:35:bf:8e:dd:05:a2:ac:
                    87:26:2d:07:ca:a3:77:43:01:d0:02:2b:07:a7:f2:
                    03:fb:28:e5:7f:76:2c:57:de:4c:de:cb:7c:4e:6a:
                    ab:86:30:bf:92:cb:9b:78:40:1c:2b:9c:2a:21:0c:
                    2a:01:c6:67:43:e1:ac:a2:24:1b:fc:34:f7:54:94:
                    a4:1b:4b:a2:a9:62:43:3e:14:8c:88:6f:5a:92:b3:
                    f6:94:3a:53:bc:1a:a2:ff:48:bd:6d:00:69:81:c1:
                    ab:34:ab:e7:63:12:87:d1:3c:be:23:55:42:93:dc:
                    e9:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:3D:BA:C7:F5:DE:C7:66:26:3E:E8:99:7F:8A:B7:82:E7:80:BA:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/4a890e77-7139-3b99-ba3a-e7e0378ca359.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.92.204.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c6:f2:8b:63:a8:2f:95:f1:0e:05:e8:93:36:02:ba:fc:51:7f:
         1b:93:2e:64:56:e8:71:89:5e:22:5f:5d:7e:ea:8a:05:23:f0:
         92:89:93:fe:17:85:7e:ef:48:47:60:72:8b:4a:c0:f9:72:00:
         5c:4c:41:18:d9:f9:5f:70:47:92:73:6c:20:7e:db:ae:1f:b1:
         9e:3b:65:30:64:69:7d:6b:25:8e:3d:6c:64:b2:11:1c:48:11:
         e6:a7:d7:ac:44:03:f5:69:4b:7d:c0:dc:2c:9f:fb:30:53:f2:
         05:e5:28:6f:75:68:81:2c:6d:70:28:d3:74:b2:4b:55:a5:63:
         0a:bf:ae:f8:ea:77:be:5a:f3:b5:aa:78:e8:b3:d9:d2:2e:e6:
         2a:00:97:76:ae:02:a7:99:6c:58:22:fd:70:ec:56:99:5e:3a:
         e9:10:1c:d4:bd:ea:ec:b3:67:c8:2f:7d:8f:03:b9:b9:80:6b:
         2b:76:76:63:4f:69:fd:be:7f:a3:c6:8b:09:ce:d7:7b:b9:4e:
         5b:f4:1c:3d:1b:e0:8a:43:22:11:69:2a:f9:74:6b:3b:bf:d2:
         9f:4a:74:4e:af:23:5c:c5:74:94:3d:fd:7f:00:b2:5c:b6:0e:
         4e:be:09:ce:ef:66:d6:eb:63:ce:b8:e5:93:d9:b0:47:9f:75:
         3c:c3:8f:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 21:18:58 2026 by rpki-client