Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/6f5f1b4f-0920-339d-98c7-c8541646c618.roa
File:                     6f5f1b4f-0920-339d-98c7-c8541646c618.roa (raw, json)
Hash identifier:          cv+y9iq2LMXmFeX4iQc1OjeLwddAUOKM3BzhgibI+08=
Subject key identifier:   BE:E3:5B:9E:80:3A:0E:35:EA:C8:71:BB:31:D9:9F:31:1D:33:1E:1B
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584F0D6CFC85212E5524C1504F80
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/6f5f1b4f-0920-339d-98c7-c8541646c618.roa
Signing time:             Thu 03 Sep 2026 13:00:12 +0000
ROA not before:           Thu 03 Sep 2026 13:00:12 +0000
ROA not after:            Wed 02 Dec 2026 14:00:12 +0000
asID:                     7018
IP address blocks:        66.92.88.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Sep 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:0d:6c:fc:85:21:2e:55:24:c1:50:4f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Sep  3 13:00:12 2026 GMT
            Not After : Dec  2 14:00:12 2026 GMT
        Subject: CN=1ac20185-bc75-41d4-aead-9af0570f63dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:47:30:ff:0a:9f:aa:4f:59:50:3c:fa:6b:0b:
                    48:62:b9:2e:13:cf:94:63:e1:b5:58:cb:b7:fa:c1:
                    35:b1:84:c7:a5:ad:a5:cd:04:f4:47:0f:67:c9:2e:
                    d9:f3:fd:d6:29:ac:42:21:a9:ec:da:fb:bb:a5:a3:
                    72:17:a1:ac:06:6d:16:13:9c:ed:5b:23:2a:01:08:
                    39:f2:70:7e:0b:f4:01:30:0b:00:76:3f:5f:e1:d3:
                    a8:79:11:2b:cf:8f:ea:da:e1:fe:92:d6:23:af:80:
                    1f:69:b4:db:f7:3d:94:b6:57:6a:79:19:6e:df:40:
                    c6:d9:f5:1f:cb:00:44:d0:48:96:74:b9:b3:fb:97:
                    5f:90:0e:3a:31:4b:f0:82:5b:d9:07:14:6b:a6:7e:
                    e2:31:e8:7a:47:aa:51:64:ea:21:19:e4:59:84:4a:
                    b0:b0:2d:15:c6:36:6b:d7:cf:bb:20:3c:9c:8c:59:
                    70:4d:99:28:38:a5:18:68:84:6c:86:9b:39:c6:ac:
                    9e:7b:68:71:73:58:32:4d:15:84:a8:83:f6:84:7b:
                    0d:72:73:e1:56:b4:b0:ca:76:d6:ec:9b:90:27:3c:
                    25:8e:e2:9e:ab:4e:d1:bb:3d:93:90:b8:e7:fd:a4:
                    10:36:19:96:84:99:2d:cc:86:1e:82:ac:f7:d5:fc:
                    cb:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:E3:5B:9E:80:3A:0E:35:EA:C8:71:BB:31:D9:9F:31:1D:33:1E:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/6f5f1b4f-0920-339d-98c7-c8541646c618.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.92.88.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:a9:0a:27:96:8b:1f:3e:e6:de:f4:cf:54:9a:a0:18:23:30:
         30:8f:c2:ef:44:4f:8a:25:7f:b2:34:b7:18:bb:c7:36:4b:3d:
         dc:46:ab:e4:03:86:3b:9d:ee:8f:c9:57:79:5f:d1:24:79:11:
         72:4c:dc:58:7f:9a:25:24:da:b2:d1:3a:8d:3b:23:6f:ec:47:
         b9:a2:43:db:a3:55:09:a8:a0:80:b1:2f:09:0b:d7:f9:fc:9f:
         82:21:0c:80:eb:9c:b7:5e:87:22:44:c4:f4:8d:3e:12:53:95:
         5c:9a:dd:ed:d4:89:3e:a0:77:2b:c3:12:d2:8d:38:b4:a4:f8:
         64:16:55:bd:f6:1b:69:56:bc:90:36:26:04:60:c0:ee:7f:9a:
         62:f9:a3:43:23:ac:09:5f:4c:c8:50:f9:1f:54:66:73:62:75:
         10:bd:0b:cc:67:ce:47:1b:a4:b6:d1:a3:ba:c0:73:aa:fc:1b:
         e3:d1:37:14:25:56:19:4d:c4:38:ce:d0:c0:99:24:71:bc:de:
         d1:cc:35:eb:2a:76:d4:5d:b5:bb:45:ac:f2:62:e6:cf:12:a5:
         a0:b5:18:5c:ce:7f:5e:5e:d3:e8:e1:dc:e3:a7:5d:18:8f:d1:
         9a:d6:fc:e8:e2:c5:ae:62:2e:05:62:9c:d6:12:a3:0b:49:b2:
         3e:5c:71:ea
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8NbPyFIS5VJMFQT4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh
YWU3MB4XDTI2MDkwMzEzMDAxMloXDTI2MTIwMjE0MDAxMlowLzEtMCsGA1UEAxMk
MWFjMjAxODUtYmM3NS00MWQ0LWFlYWQtOWFmMDU3MGY2M2RjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl0cw/wqfqk9ZUDz6awtIYrkuE8+UY+G1WMu3
+sE1sYTHpa2lzQT0Rw9nyS7Z8/3WKaxCIans2vu7paNyF6GsBm0WE5ztWyMqAQg5
8nB+C/QBMAsAdj9f4dOoeRErz4/q2uH+ktYjr4AfabTb9z2UtldqeRlu30DG2fUf
ywBE0EiWdLmz+5dfkA46MUvwglvZBxRrpn7iMeh6R6pRZOohGeRZhEqwsC0VxjZr
18+7IDycjFlwTZkoOKUYaIRshps5xqyee2hxc1gyTRWEqIP2hHsNcnPhVrSwynbW
7JuQJzwljuKeq07Ruz2TkLjn/aQQNhmWhJktzIYegqz31fzLfQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFL7jW56AOg416shxuzHZnzEdMx4bMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3
MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvNmY1ZjFiNGYtMDkyMC0z
MzlkLTk4YzctYzg1NDE2NDZjNjE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0
YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj
YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw
OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQlxYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKKpCieWix8+5t70z1SaoBgjMDCPwu9ET4olf7I0txi7xzZLPdxGq+QD
hjud7o/JV3lf0SR5EXJM3Fh/miUk2rLROo07I2/sR7miQ9ujVQmooICxLwkL1/n8
n4IhDIDrnLdehyJExPSNPhJTlVya3e3UiT6gdyvDEtKNOLSk+GQWVb32G2lWvJA2
JgRgwO5/mmL5o0MjrAlfTMhQ+R9UZnNidRC9C8xnzkcbpLbRo7rAc6r8G+PRNxQl
VhlNxDjO0MCZJHG83tHMNesqdtRdtbtFrPJi5s8SpaC1GFzOf15e0+jh3OOnXRiP
0ZrW/Ojixa5iLgVinNYSowtJsj5cceo=
-----END CERTIFICATE-----
Generated at Sun Sep 20 11:00:38 2026 by rpki-client