Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/a04c026a-2e54-3602-b907-d3bbe27c1651.roa
File:                     a04c026a-2e54-3602-b907-d3bbe27c1651.roa (raw, json)
Hash identifier:          Pa8NmSxCpbbHeDBQoiNKGo5g56JgVGGUT7T3tzR+EPU=
Subject key identifier:   6D:43:0C:A1:D1:71:8C:2D:AE:68:C1:95:95:76:B8:A6:45:96:13:9A
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584E0EE9768331923D097E34FF80
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/a04c026a-2e54-3602-b907-d3bbe27c1651.roa
Signing time:             Thu 04 Jun 2026 09:00:13 +0000
ROA not before:           Thu 04 Jun 2026 09:00:13 +0000
ROA not after:            Wed 02 Sep 2026 09:00:13 +0000
asID:                     834
IP address blocks:        66.92.197.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:0e:e9:76:83:31:92:3d:09:7e:34:ff:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Jun  4 09:00:13 2026 GMT
            Not After : Sep  2 09:00:13 2026 GMT
        Subject: CN=cea5de23-4463-4bba-adc6-ca8c410d6959
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:f7:3f:f6:01:36:5c:58:0d:5d:10:4e:b7:e8:
                    5f:84:d4:df:d7:ed:2a:c8:b7:a2:4f:c9:03:c0:9a:
                    5b:57:c7:9e:b0:50:95:99:93:d1:c4:41:16:e1:6d:
                    e2:c3:59:1c:4d:6d:01:3e:00:fc:bc:1f:89:67:4e:
                    c0:5b:03:36:1a:ef:8f:43:09:48:06:04:83:33:ee:
                    ec:92:9c:b4:1e:b4:6a:26:7c:15:70:3d:41:b2:9a:
                    dc:58:1b:ea:b9:7e:a2:5f:6b:c0:88:f1:07:74:3d:
                    03:5f:95:e2:54:6b:b2:33:2d:0b:51:a4:7f:46:4a:
                    dc:3d:61:d1:77:02:34:ad:18:9e:23:75:d6:c8:ac:
                    21:c3:c1:53:9e:d3:4a:ee:0f:1d:dd:7a:2b:f6:c1:
                    3d:e7:c1:ac:cb:6f:9a:89:02:58:97:10:e3:25:78:
                    34:2d:e6:66:88:08:2f:db:8d:04:85:36:f9:9a:b2:
                    7e:88:a1:0e:a9:ec:b4:74:17:83:c2:ef:36:ed:2e:
                    5d:25:61:0a:f8:50:3a:90:ff:ae:15:f0:2e:cb:31:
                    ce:48:41:9c:04:dc:80:40:1d:55:60:48:f4:2d:33:
                    ab:bc:4d:34:66:e1:2b:d5:56:d3:a0:2f:c8:bc:50:
                    b9:8a:7a:60:70:9f:85:7a:57:10:fd:92:b6:9f:9b:
                    94:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:43:0C:A1:D1:71:8C:2D:AE:68:C1:95:95:76:B8:A6:45:96:13:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/a04c026a-2e54-3602-b907-d3bbe27c1651.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.92.197.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:c0:44:41:2c:d3:62:fb:d6:08:32:e3:bb:dc:73:48:bf:0a:
         8b:3f:ac:64:bd:34:a2:fc:d4:b8:11:fc:dc:d3:18:ef:15:2b:
         73:2e:03:eb:2b:d3:34:31:69:98:ed:10:8e:08:a6:fa:3f:6d:
         a7:e8:e4:5f:d9:c3:bb:4c:e7:08:0e:93:65:97:c7:68:97:74:
         cb:b2:3a:56:09:7e:2f:d8:af:0e:99:6b:62:7f:14:65:44:d1:
         4e:3a:51:ad:72:4e:ad:26:84:c8:61:d6:77:7c:57:55:7f:45:
         07:0a:a8:b9:80:6d:45:1d:11:a0:a9:e2:fb:77:b1:38:10:43:
         25:e8:ad:27:94:9f:7d:fd:91:75:09:b0:45:64:c6:68:4f:63:
         52:d5:f9:f3:ad:d1:c4:3a:8f:2e:f5:d1:91:b5:aa:42:ea:1e:
         18:ad:71:98:65:4f:51:f8:74:49:c9:8a:1c:6d:fb:c0:95:2c:
         a3:cf:fa:c8:75:98:16:29:90:a1:1d:75:9c:09:ba:95:2d:f7:
         0b:71:f8:d3:75:1c:d3:42:8c:7c:0d:dc:a1:be:59:6f:97:e9:
         e7:20:67:b6:7f:cf:66:24:34:37:bd:14:a5:60:b4:21:3c:cd:
         a8:a0:0e:d5:b6:b7:1b:92:8b:ba:77:89:82:22:67:68:51:83:
         cd:0a:a8:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:07:58 2026 by rpki-client