Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/91287eed-c60f-3f54-9077-91e579bd38be.roa
File:                     91287eed-c60f-3f54-9077-91e579bd38be.roa (raw, json)
Hash identifier:          dbcLBOaIPDtGZqrwUywfDscanIaaMvF1qzwcKUsMKck=
Subject key identifier:   26:C1:82:9F:B0:5B:B4:F8:F3:01:8E:FE:E9:9A:62:CD:33:97:99:10
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584CF15769AAB4AB702A93AB4B40
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/91287eed-c60f-3f54-9077-91e579bd38be.roa
Signing time:             Sun 22 Feb 2026 02:00:32 +0000
ROA not before:           Sun 22 Feb 2026 02:00:32 +0000
ROA not after:            Sat 23 May 2026 01:00:32 +0000
asID:                     215607
IP address blocks:        66.93.147.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:f1:57:69:aa:b4:ab:70:2a:93:ab:4b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Feb 22 02:00:32 2026 GMT
            Not After : May 23 01:00:32 2026 GMT
        Subject: CN=b73bddda-b12d-4830-94d7-e20bc273c047
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:d3:99:ff:be:22:50:d1:d2:8a:94:39:45:7b:
                    d5:e5:c9:87:1e:e4:be:7c:f4:19:73:a4:07:38:d7:
                    21:1c:61:32:15:75:c6:fb:90:07:1a:78:a3:79:62:
                    07:f3:b1:8b:62:9d:e2:1b:06:bd:52:c5:c9:70:0a:
                    52:30:a8:df:64:08:fe:dd:0e:8a:aa:d5:aa:ae:1f:
                    3c:5b:9d:b5:af:25:6c:b1:3d:99:ed:be:46:00:2d:
                    e3:05:78:a7:27:c2:cd:a7:46:3c:e8:d2:fd:ba:11:
                    c4:a2:c8:67:64:71:92:4b:44:53:62:5b:c7:5b:12:
                    2b:6b:95:26:a0:34:c9:96:bc:1d:44:11:9d:36:b7:
                    9a:33:3c:16:c0:1a:7b:72:7a:00:e9:5c:57:1e:66:
                    f5:3c:74:a8:57:5a:1f:77:45:cf:e7:4c:3b:8a:e0:
                    80:f8:2f:59:fc:cb:92:f3:7d:6b:00:cc:2d:f7:94:
                    39:2b:e7:66:b9:02:4f:3a:8b:0b:8d:55:d4:10:c8:
                    ed:ef:a9:5b:d9:42:29:3f:78:01:70:33:7a:73:45:
                    d1:89:19:c7:4f:75:dd:41:3e:9a:fb:b8:c0:d8:ab:
                    08:b0:56:96:ec:52:3d:95:d7:0c:97:36:35:ba:98:
                    a6:4a:42:a8:87:af:cb:d2:7d:11:c4:5f:6d:92:79:
                    dc:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:C1:82:9F:B0:5B:B4:F8:F3:01:8E:FE:E9:9A:62:CD:33:97:99:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/91287eed-c60f-3f54-9077-91e579bd38be.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.93.147.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:b6:d1:08:09:ff:4a:04:10:f3:f7:50:96:05:68:f7:5f:90:
         aa:aa:93:0a:aa:ea:44:e8:99:74:a7:13:2f:58:12:d2:98:3d:
         fb:f5:5a:4b:71:0c:c7:e2:af:96:05:55:92:1b:09:c1:7b:a5:
         4a:80:23:b8:f8:c8:09:36:c5:61:0e:0b:11:d3:be:eb:8b:c2:
         09:c8:38:2f:34:9a:4b:e2:57:cd:3a:a0:52:e4:fd:0a:88:e2:
         36:91:e0:b1:18:c1:c7:d9:9a:43:7b:75:f2:50:78:ae:7b:01:
         80:06:fc:8f:8e:f2:99:30:5e:33:2c:3f:60:67:58:4e:6d:03:
         c0:da:11:59:05:8b:ed:d8:fb:9f:55:a5:eb:52:1a:39:5c:cd:
         60:12:ef:e2:64:4a:26:8a:d7:ee:58:e9:e3:3c:8b:36:8a:d2:
         ca:aa:86:e3:b7:33:3c:f5:ef:56:b6:57:5a:b3:8e:96:cf:52:
         9e:e5:bb:5f:8e:95:5a:1d:8c:f0:a5:2c:2b:e8:5a:de:ee:4f:
         bc:9d:d3:ba:65:2f:21:0e:a7:8d:e4:8f:ea:d9:0a:c7:2a:40:
         4c:79:c6:76:83:dc:e8:ce:da:60:52:8a:8e:2a:51:db:ba:62:
         2d:23:8b:e2:ba:8b:28:ed:8f:81:b9:e1:42:52:a7:cd:85:51:
         ec:b8:6c:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:41:00 2026 by rpki-client