Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/68eaaf49-4083-3639-8759-30c3ccc560f7.roa
File:                     68eaaf49-4083-3639-8759-30c3ccc560f7.roa (raw, json)
Hash identifier:          L/tmOH6Q4GVSWN485ogdSBSUH8s8iPGKvb4n4XDejkI=
Subject key identifier:   CE:21:F8:D6:8B:F9:9B:3A:22:04:30:D9:BE:67:19:82:C4:82:06:8D
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584BBE845EB952F7E77632346C40
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/68eaaf49-4083-3639-8759-30c3ccc560f7.roa
Signing time:             Tue 04 Nov 2025 04:18:00 +0000
ROA not before:           Tue 04 Nov 2025 04:18:00 +0000
ROA not after:            Mon 02 Feb 2026 04:18:00 +0000
asID:                     834
IP address blocks:        66.92.40.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:be:84:5e:b9:52:f7:e7:76:32:34:6c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Nov  4 04:18:00 2025 GMT
            Not After : Feb  2 04:18:00 2026 GMT
        Subject: CN=a2447edc-7dbc-4225-a2a3-afb038cbc695
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:9f:5e:a5:b1:7e:0b:35:0f:6d:52:2c:b0:8e:
                    ad:e7:c6:96:d2:f6:b3:c0:a6:da:08:07:f2:9e:bf:
                    5b:38:ad:3c:b0:05:78:e0:33:76:8c:06:ed:0a:ea:
                    26:67:69:39:cc:98:df:4e:35:8e:98:17:4f:45:19:
                    78:7e:da:9e:97:6f:f4:f2:7d:61:1c:d0:d8:7a:54:
                    cd:15:01:aa:e3:83:1a:f2:ba:82:02:49:df:c0:fc:
                    e3:5f:c7:a6:f7:ac:35:42:39:27:21:05:a1:44:96:
                    1e:3a:71:d7:f8:01:5a:ce:a3:8d:fa:5f:44:03:a6:
                    09:2c:0e:08:89:f4:89:be:fd:d7:65:7c:36:61:94:
                    d1:41:93:04:b5:c3:c8:93:79:5e:fe:21:b9:a4:1d:
                    7b:b0:79:3a:4b:4b:90:ea:55:7d:37:fd:24:0d:c0:
                    70:d6:d7:62:d0:c9:7c:99:c6:0f:25:21:d5:84:c7:
                    e5:53:d9:36:ac:bc:f0:61:09:73:89:34:92:f8:88:
                    c3:30:aa:4b:fa:8c:e2:8a:e1:cd:4b:ce:b6:ed:13:
                    59:8e:fe:87:8c:8f:3f:e0:f3:75:8c:13:55:a0:15:
                    5d:c8:29:82:d8:49:82:aa:e0:ce:1b:b9:c4:e5:47:
                    b1:92:39:f5:e0:83:e3:82:c9:35:81:b7:6f:2a:8b:
                    10:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:21:F8:D6:8B:F9:9B:3A:22:04:30:D9:BE:67:19:82:C4:82:06:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/68eaaf49-4083-3639-8759-30c3ccc560f7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.92.40.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:76:05:7a:2d:2b:f4:73:f8:4f:5c:9f:6c:90:53:c5:87:e4:
         50:8e:a7:fd:53:e2:bf:79:45:5f:c7:4c:13:e3:e1:7a:2b:b3:
         90:02:2e:63:0a:2b:50:8a:27:fd:94:03:32:94:8b:19:fa:d0:
         56:34:dc:ec:c2:8b:f1:62:3c:00:48:b5:61:17:f3:93:8f:19:
         de:fc:68:50:f8:ea:5b:6e:ca:7e:33:7e:1c:af:17:09:e8:33:
         14:2e:94:62:a3:83:bf:a2:44:d9:28:65:31:d7:f7:8e:2d:33:
         09:ba:f9:ce:5e:79:9e:18:50:00:02:13:ce:0e:2c:40:96:75:
         f0:39:f1:31:d7:f8:2a:93:aa:fa:c5:a6:0b:39:2f:60:6f:72:
         32:e3:9d:2a:f6:09:c6:93:9e:f4:54:04:9d:f2:fa:02:6a:a8:
         99:a1:13:0b:ac:ab:0f:de:ee:4d:b6:82:c8:a9:f8:d7:a6:35:
         6f:a8:8d:78:0e:5e:eb:d8:a2:23:11:58:20:59:25:26:12:59:
         cc:b9:e2:ee:0b:7b:21:82:44:99:90:93:3f:ff:71:73:e2:fc:
         da:47:8b:e5:f1:75:41:30:fd:01:4b:f1:3c:34:cc:85:93:35:
         ec:a4:29:e1:40:8d:d0:2f:d2:9e:40:49:ba:d1:05:22:01:17:
         f1:f8:05:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:47:06 2025 by rpki-client