Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/b696d54d-afc7-3150-83e6-dc6d74f2b934.roa
File:                     b696d54d-afc7-3150-83e6-dc6d74f2b934.roa (raw, json)
Hash identifier:          4alordYRWoMu0vi/3vX2kB3isBQUVMuUCX8PARyK0nU=
Subject key identifier:   51:B6:71:B9:D2:C5:C9:06:8B:C7:AA:25:61:99:22:35:B4:6C:4C:17
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584CCE71EC75BF2C51D865DD1F80
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/b696d54d-afc7-3150-83e6-dc6d74f2b934.roa
Signing time:             Mon 09 Feb 2026 14:00:39 +0000
ROA not before:           Mon 09 Feb 2026 14:00:39 +0000
ROA not after:            Sun 10 May 2026 13:00:39 +0000
asID:                     212238
IP address blocks:        66.93.162.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ce:71:ec:75:bf:2c:51:d8:65:dd:1f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Feb  9 14:00:39 2026 GMT
            Not After : May 10 13:00:39 2026 GMT
        Subject: CN=d3d198a8-bd40-4b30-910b-8777921d2fa2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:4f:85:ef:87:50:02:d0:35:88:cf:31:0b:65:
                    ad:82:29:6c:b7:a3:4e:87:68:6c:fb:8f:ea:a3:69:
                    62:b8:db:0d:7b:eb:1f:f6:4f:52:1f:0f:0d:01:45:
                    b7:37:bb:94:44:a0:5f:b6:10:04:e0:b1:28:a8:62:
                    7c:5b:fa:4b:7d:41:86:31:c4:0f:eb:2d:8d:be:2e:
                    b9:36:6d:d8:1f:18:8e:98:84:51:a7:e0:06:1a:4b:
                    a0:bd:23:ad:9f:62:2a:74:3a:20:b7:19:37:28:02:
                    ea:35:fb:fd:1a:45:76:47:c9:3b:8c:20:4f:d3:71:
                    44:8e:7b:a7:44:b7:60:d4:e2:88:c2:30:7e:01:b3:
                    3f:41:1f:dd:97:96:9e:8b:6b:d2:f1:6e:19:58:a3:
                    bc:b4:f6:87:1f:1b:1d:75:ea:97:cc:81:9d:2a:71:
                    20:6a:90:5b:74:16:8c:f4:94:84:a7:86:47:b8:ea:
                    84:1b:97:cb:73:08:a0:6c:3e:3f:8e:a6:02:bd:db:
                    df:b4:bc:41:d1:80:a4:78:d6:69:3e:64:cf:fd:3e:
                    08:be:23:22:7f:45:93:5d:7c:b3:b4:9e:77:a7:de:
                    fa:51:1e:fa:0a:65:dc:2e:ac:9f:dc:49:d3:25:e9:
                    e1:b7:3e:40:67:88:63:4c:96:14:b1:67:af:68:8d:
                    e5:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:B6:71:B9:D2:C5:C9:06:8B:C7:AA:25:61:99:22:35:B4:6C:4C:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/b696d54d-afc7-3150-83e6-dc6d74f2b934.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.93.162.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:7c:51:eb:3a:87:94:8a:8b:45:6b:b6:95:60:52:3e:02:53:
         32:cb:57:e2:22:f1:21:0c:48:7d:ca:b1:a0:ea:ec:12:9d:c9:
         55:ec:ec:42:c3:2e:6d:a5:da:70:9d:69:78:3b:c9:d1:38:0f:
         0f:6b:8f:1b:eb:29:9c:dc:bd:54:4d:fe:55:e2:15:e6:ea:1c:
         7e:8b:28:8b:cb:08:71:36:4c:0e:8e:b7:0e:c2:dd:8e:43:0c:
         bd:a8:af:38:00:7e:6a:af:58:39:55:3d:64:b1:27:34:a9:8f:
         e5:5e:d9:88:03:c0:fd:6b:c9:8e:d1:c8:91:f5:cf:f7:bb:91:
         21:03:14:94:5f:bd:a4:e3:91:cb:77:8e:aa:0e:e4:46:1e:7d:
         87:7b:91:24:1d:11:22:6c:52:43:7e:30:5e:66:7d:92:08:0b:
         b2:10:ec:d3:3b:3c:42:4e:cd:15:d1:4b:ae:01:a3:3b:8a:e6:
         7f:dd:76:d8:b8:54:24:6c:9b:6b:ab:76:7d:6b:3c:f7:2b:d3:
         5a:af:69:4f:ab:8d:8b:af:5f:88:e5:88:8a:a3:35:d7:d7:06:
         5d:11:2a:a3:bc:48:0a:e9:bd:54:36:8e:12:45:e8:f7:b2:11:
         ee:82:59:a2:1a:6b:51:0e:e9:9c:ca:85:4a:4f:b8:27:f7:15:
         fd:ef:f1:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:17:35 2026 by rpki-client