Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/671cda85-2fc1-3394-9198-0989169ed909.roa
File:                     671cda85-2fc1-3394-9198-0989169ed909.roa (raw, json)
Hash identifier:          H1N9+dlJe/33LxD6G/EtEh+10NSg+UbvXvK3mkpApu8=
Subject key identifier:   A3:8C:70:04:B6:2F:51:C8:17:92:31:F4:2D:BE:C0:A9:9B:64:20:1B
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584AB7004518584EC10C09536500
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/671cda85-2fc1-3394-9198-0989169ed909.roa
Signing time:             Fri 01 Aug 2025 18:54:14 +0000
ROA not before:           Fri 01 Aug 2025 18:54:14 +0000
ROA not after:            Thu 30 Oct 2025 18:54:14 +0000
asID:                     36231
IP address blocks:        66.92.176.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 12 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b7:00:45:18:58:4e:c1:0c:09:53:65:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Aug  1 18:54:14 2025 GMT
            Not After : Oct 30 18:54:14 2025 GMT
        Subject: CN=c679c707-cbc2-4200-9caa-fa104380e5a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:95:2b:b6:87:d6:ca:84:df:a2:f5:0d:67:df:
                    41:3f:bc:fb:6a:a5:f1:90:91:82:d7:e2:13:dd:a3:
                    3e:31:4a:8d:93:95:ac:30:bc:bb:bb:71:d8:d7:6e:
                    58:38:0c:bb:67:e7:6b:0f:02:03:d4:f0:26:87:08:
                    a7:30:62:2c:3b:f8:b0:2b:c4:ca:74:00:07:96:b8:
                    7b:a1:fe:89:a5:a6:18:69:3a:9b:e2:bd:41:b7:d8:
                    b5:62:94:63:47:b2:22:58:e6:81:b3:b0:e9:f5:d6:
                    42:e5:5c:63:28:21:f1:92:cd:48:1d:64:1d:bd:9f:
                    81:9e:e9:20:74:7e:26:ed:20:bd:8b:0f:0d:41:a2:
                    30:a7:84:ee:f6:74:e4:10:bf:47:45:5b:f3:9e:e1:
                    d8:e3:99:4f:bb:7f:bf:14:29:5a:ff:58:38:95:62:
                    8b:b4:27:a9:18:b7:9f:80:50:78:d2:12:70:ea:97:
                    fd:51:b0:d4:9e:9a:be:9c:24:06:da:d4:e9:91:b6:
                    24:4c:e1:34:d0:d0:5e:1b:69:c8:12:e8:b8:92:27:
                    3f:dd:1c:76:ef:a4:0d:60:4a:87:67:b4:29:73:4c:
                    28:e4:36:2e:65:8b:76:c3:65:73:59:2a:f9:1a:bf:
                    b6:36:15:af:fc:70:82:f4:54:b2:33:1d:f3:c0:f4:
                    ad:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:8C:70:04:B6:2F:51:C8:17:92:31:F4:2D:BE:C0:A9:9B:64:20:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/671cda85-2fc1-3394-9198-0989169ed909.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.92.176.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:b6:f6:23:1b:66:5a:4c:19:82:ee:f7:40:ee:67:0d:b9:39:
         0f:a0:25:36:52:d0:05:7d:33:31:a4:09:a6:fe:98:41:68:22:
         55:a2:ae:5b:65:58:d6:2c:26:ca:53:bb:65:2f:b1:5c:13:a8:
         e9:23:1d:53:7b:09:ab:38:ab:f5:f5:ea:71:be:89:39:70:31:
         d8:e9:54:c4:47:e0:e3:e2:c5:7e:a6:99:c0:ae:8b:27:1a:8b:
         a6:6e:a9:3a:ae:ec:4f:bc:29:79:f2:d2:5e:d5:9e:02:a0:d3:
         50:c0:c9:4a:f1:49:cb:d9:d2:39:f6:29:fd:68:1a:b1:a6:9b:
         b1:a2:59:81:05:1a:30:94:1a:c6:53:24:33:78:53:92:47:5d:
         66:24:d1:36:a0:c1:89:fb:b8:9f:3b:74:4c:d6:c5:1a:3d:3e:
         1f:2a:b2:a2:e6:dc:71:02:a1:77:51:2f:ce:df:af:db:b8:05:
         32:60:f4:4e:76:34:8d:b7:87:e8:78:b7:8f:72:50:c5:14:78:
         b4:07:d7:fb:93:c7:df:29:9e:ce:5c:db:da:1f:e3:8a:01:f3:
         27:fd:d6:d6:30:8e:80:c8:98:d1:82:f3:7e:e1:1b:28:a5:63:
         c5:68:3a:c8:7c:26:12:c0:e2:3a:61:3b:4f:98:73:ca:90:26:
         d6:27:ba:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 21:10:26 2025 by rpki-client