Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/66b61c09-aded-3091-831b-438c65b2ed61.roa
File:                     66b61c09-aded-3091-831b-438c65b2ed61.roa (raw, json)
Hash identifier:          iyWCSfqY1jv2b5TxITyDota8Vd3DTv8EW/kODf/O5lE=
Subject key identifier:   38:9C:AB:B5:E8:D4:DE:8A:EF:26:E5:5C:83:58:8D:05:65:7C:2A:5D
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584FB93BC01A3D6EDC0ABCAE1080
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/66b61c09-aded-3091-831b-438c65b2ed61.roa
Signing time:             Wed 04 Nov 2026 02:00:13 +0000
ROA not before:           Wed 04 Nov 2026 02:00:13 +0000
ROA not after:            Tue 02 Feb 2027 02:00:13 +0000
asID:                     13347
IP address blocks:        72.244.92.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 06 Nov 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:b9:3b:c0:1a:3d:6e:dc:0a:bc:ae:10:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Nov  4 02:00:13 2026 GMT
            Not After : Feb  2 02:00:13 2027 GMT
        Subject: CN=f3f94edd-b0bd-4031-98e2-a5e130f9ed9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:12:fe:b8:7e:9d:e5:74:f6:58:b9:ca:b3:14:
                    29:d4:64:0e:44:90:03:06:cf:a4:4f:56:9a:76:49:
                    a7:52:89:84:c0:9c:ab:06:14:3e:3c:eb:7e:fd:37:
                    99:c1:72:aa:48:b1:c9:95:ad:81:c5:c9:4e:1f:86:
                    d6:79:f9:5d:2f:e1:f8:f6:94:39:69:e7:be:c1:6c:
                    d2:a0:fb:48:df:8e:a2:e4:30:cf:4b:7b:38:72:85:
                    53:7c:1f:91:a8:4c:25:7e:01:35:b5:52:12:ea:8c:
                    33:9d:86:37:18:20:3f:1d:15:d2:bf:d2:40:f5:65:
                    5a:84:cc:65:1a:80:2e:e7:36:a9:75:bf:2f:3e:a4:
                    88:ec:b6:7d:9f:03:af:8d:fe:73:0f:a0:b2:02:37:
                    82:61:3c:46:5c:fc:8e:5b:fb:47:4c:d7:f1:bc:4c:
                    cf:2c:30:49:b8:20:f4:06:45:18:62:dd:2e:cf:2b:
                    13:da:7a:ee:30:44:d3:d3:9b:1c:e5:49:0b:b4:7b:
                    3e:a7:e7:3e:79:97:49:0b:e3:d4:42:d6:18:1e:8b:
                    b8:a9:db:b4:50:cd:cf:ca:6d:87:b6:35:c5:94:e2:
                    1e:93:a6:73:1d:d3:59:8b:ee:92:32:c0:e6:8c:40:
                    6f:13:fa:00:ee:38:c2:14:64:b1:98:ab:e0:f6:3f:
                    e0:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:9C:AB:B5:E8:D4:DE:8A:EF:26:E5:5C:83:58:8D:05:65:7C:2A:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/66b61c09-aded-3091-831b-438c65b2ed61.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.244.92.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:67:69:1d:8c:11:7d:94:62:fa:5c:8a:47:51:fc:81:39:77:
         c8:ea:72:61:db:06:80:6d:63:e2:c9:d5:6c:2e:b8:75:8a:14:
         18:9d:aa:01:73:77:83:ed:3e:f9:ab:b5:70:86:9d:17:d6:b9:
         24:8b:78:c4:56:a7:d7:db:f7:a5:ef:3f:94:02:aa:00:70:00:
         7a:9e:dc:c4:99:3b:a5:2d:21:78:0b:41:1d:1a:18:26:76:25:
         8d:8e:e5:bf:65:5d:df:8a:af:d5:fb:a9:63:a4:3d:5d:5e:8e:
         4d:0b:3f:5b:e0:da:b9:05:46:43:54:e0:cb:b2:34:d0:3c:1c:
         a6:f9:ab:bd:fb:32:3a:7c:ed:67:a6:75:89:46:90:bd:24:05:
         e0:45:2f:6c:ec:32:c1:99:c1:1f:c5:e7:a8:6b:45:03:8e:46:
         a1:6c:8f:02:de:f4:f7:98:f9:3f:ce:7d:c5:8d:4d:3e:06:97:
         d9:db:57:48:6e:32:22:2f:5f:4e:98:a0:05:2b:93:6b:ed:21:
         f5:44:08:e3:71:f9:01:af:6c:c2:95:3f:60:ea:08:bf:6c:c4:
         f7:c1:8a:70:eb:61:d8:0c:bd:cb:5a:01:8a:5a:0a:f9:25:81:
         d7:23:0b:6b:de:46:7a:f7:cb:21:a5:a5:4a:75:06:96:39:3a:
         06:3b:bb:55
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+5O8AaPW7cCryuEIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh
YWU3MB4XDTI2MTEwNDAyMDAxM1oXDTI3MDIwMjAyMDAxM1owLzEtMCsGA1UEAxMk
ZjNmOTRlZGQtYjBiZC00MDMxLTk4ZTItYTVlMTMwZjllZDlhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsxL+uH6d5XT2WLnKsxQp1GQORJADBs+kT1aa
dkmnUomEwJyrBhQ+POt+/TeZwXKqSLHJla2BxclOH4bWefldL+H49pQ5aee+wWzS
oPtI346i5DDPS3s4coVTfB+RqEwlfgE1tVIS6owznYY3GCA/HRXSv9JA9WVahMxl
GoAu5zapdb8vPqSI7LZ9nwOvjf5zD6CyAjeCYTxGXPyOW/tHTNfxvEzPLDBJuCD0
BkUYYt0uzysT2nruMETT05sc5UkLtHs+p+c+eZdJC+PUQtYYHou4qdu0UM3Pym2H
tjXFlOIek6ZzHdNZi+6SMsDmjEBvE/oA7jjCFGSxmKvg9j/gPwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDicq7Xo1N6K7yblXINYjQVlfCpdMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3
MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvNjZiNjFjMDktYWRlZC0z
MDkxLTgzMWItNDM4YzY1YjJlZDYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0
YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj
YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw
OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSPRcMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFxnaR2MEX2UYvpcikdR/IE5d8jqcmHbBoBtY+LJ1WwuuHWKFBidqgFz
d4PtPvmrtXCGnRfWuSSLeMRWp9fb96XvP5QCqgBwAHqe3MSZO6UtIXgLQR0aGCZ2
JY2O5b9lXd+Kr9X7qWOkPV1ejk0LP1vg2rkFRkNU4MuyNNA8HKb5q737Mjp87Wem
dYlGkL0kBeBFL2zsMsGZwR/F56hrRQOORqFsjwLe9PeY+T/OfcWNTT4Gl9nbV0hu
MiIvX06YoAUrk2vtIfVECONx+QGvbMKVP2DqCL9sxPfBinDrYdgMvctaAYpaCvkl
gdcjC2veRnr3yyGlpUp1BpY5OgY7u1U=
-----END CERTIFICATE-----
Generated at Thu Nov 5 03:17:17 2026 by rpki-client