Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/866c65ab-ea72-3100-81da-e068708b53df.roa
File:                     866c65ab-ea72-3100-81da-e068708b53df.roa (raw, json)
Hash identifier:          YOgPPdZKKHR6Vs8VzyHTycOu4ACUYWotzUiCr7elp7Q=
Subject key identifier:   FA:5C:BA:7F:B8:88:0B:73:5E:5F:C4:14:FB:09:36:B0:8F:C3:4F:34
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584D7F9A8065ED4F4F88D2D26B00
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/866c65ab-ea72-3100-81da-e068708b53df.roa
Signing time:             Tue 14 Apr 2026 01:00:24 +0000
ROA not before:           Tue 14 Apr 2026 01:00:24 +0000
ROA not after:            Mon 13 Jul 2026 01:00:24 +0000
asID:                     834
IP address blocks:        66.92.16.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:7f:9a:80:65:ed:4f:4f:88:d2:d2:6b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Apr 14 01:00:24 2026 GMT
            Not After : Jul 13 01:00:24 2026 GMT
        Subject: CN=d651a3a9-e950-473b-b812-6b02302f2b7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:fb:e6:7d:0c:9f:ac:34:c5:75:ba:70:31:60:
                    15:46:c5:34:35:5e:59:b3:40:0b:3a:72:b6:82:88:
                    82:73:fe:e7:60:71:4d:e5:3d:01:ae:fe:fd:d2:04:
                    27:35:06:df:ec:84:51:fc:3c:fc:79:b3:a6:96:c8:
                    0c:6a:05:40:e9:4a:e6:da:84:cf:c4:16:22:12:f5:
                    37:60:36:fd:91:10:06:1e:53:ec:4e:31:66:9f:5a:
                    5a:fd:01:e8:7e:0c:51:e0:4d:fd:53:83:83:22:44:
                    68:be:73:55:59:25:c1:e9:ea:77:43:e6:5c:20:38:
                    45:fb:06:c3:68:36:0b:f7:23:b0:af:42:2e:60:74:
                    2a:68:6d:21:d1:1b:57:b0:aa:51:85:0d:0b:f9:29:
                    85:7b:3a:22:12:e4:f2:4c:16:c7:65:a6:f2:52:e0:
                    b4:2c:2d:82:72:68:a6:52:24:72:8a:23:58:74:22:
                    fb:2e:dd:c1:c2:bc:f6:c3:62:a0:05:33:ef:2e:4c:
                    86:cc:e5:7f:5f:e2:02:ce:dd:ed:97:a9:51:97:65:
                    c8:f5:10:70:17:52:35:b1:e6:7a:9b:0a:5c:c2:74:
                    c4:63:22:ac:95:1a:d1:c8:a9:1c:2e:37:22:f0:b2:
                    60:45:11:b5:2b:50:5d:1a:30:fb:ba:5c:ff:1d:10:
                    16:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:5C:BA:7F:B8:88:0B:73:5E:5F:C4:14:FB:09:36:B0:8F:C3:4F:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/866c65ab-ea72-3100-81da-e068708b53df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.92.16.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:a4:42:22:78:c9:37:76:f6:76:97:43:21:23:60:98:1b:0d:
         cc:b4:bc:e1:37:56:09:81:b0:37:80:51:10:ea:b4:d8:1c:f1:
         a4:7d:65:a4:fe:9c:08:2f:23:b2:ee:fb:c5:f3:d4:dc:d0:d4:
         aa:1b:3e:7f:ae:f1:24:ab:0c:d9:e9:69:31:39:3c:a2:27:bb:
         f8:20:1f:dd:07:50:6e:c5:a1:3c:36:0f:81:3d:60:d5:95:72:
         0d:f4:5e:cb:6d:09:87:f6:9e:24:67:2b:e0:76:e6:fa:d2:a3:
         6a:70:5d:e4:29:8c:bc:7d:4b:76:83:bf:78:db:a5:34:da:b5:
         00:c2:70:11:7c:77:1d:c7:2a:4c:cc:ff:32:11:64:14:b2:f1:
         76:3a:f7:05:d2:bb:f8:ca:af:06:44:13:dd:9f:75:3e:28:3c:
         51:7c:31:b9:6b:a6:0e:56:52:8d:18:e2:56:3d:6e:97:69:93:
         af:c3:a6:eb:50:82:5a:d9:fe:e5:de:0a:92:a4:38:e1:24:6a:
         1a:02:2e:b1:a7:05:07:f3:e8:8d:24:62:6c:3c:39:a9:48:07:
         a4:cf:29:8d:58:b7:b0:0d:a4:64:05:f1:c2:d8:27:e4:3a:fd:
         b9:92:1e:0d:e4:ff:2a:c4:0e:df:c5:55:cc:13:eb:24:88:ab:
         cb:99:d4:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:23:50 2026 by rpki-client