Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/cea9b7fa-19b3-34ac-b18b-21f5d67df614.roa
File:                     cea9b7fa-19b3-34ac-b18b-21f5d67df614.roa (raw, json)
Hash identifier:          Okipu92rxxpyZwioxt17CW5tXtwpw07tsWo2dxp/zgw=
Subject key identifier:   DA:E1:A4:C5:24:ED:92:54:75:44:C7:A1:BA:76:29:71:BF:13:71:F2
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584F1E97B26CA01484B6C2E02C80
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/cea9b7fa-19b3-34ac-b18b-21f5d67df614.roa
Signing time:             Wed 09 Sep 2026 16:35:21 +0000
ROA not before:           Wed 09 Sep 2026 16:35:21 +0000
ROA not after:            Tue 08 Dec 2026 17:35:21 +0000
asID:                     7029
IP address blocks:        66.92.250.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:1e:97:b2:6c:a0:14:84:b6:c2:e0:2c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Sep  9 16:35:21 2026 GMT
            Not After : Dec  8 17:35:21 2026 GMT
        Subject: CN=ee290566-d395-4dee-9287-280d991161d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:91:41:4a:0d:ae:c2:76:c3:b7:a6:6e:f8:61:
                    71:e6:06:13:cb:71:26:a4:6b:1e:d3:38:5f:c2:5b:
                    f8:6b:d3:dc:e2:76:71:39:42:c9:88:57:37:11:5f:
                    c3:0c:f5:8a:42:44:6a:91:4f:c3:60:4d:a1:c2:51:
                    a1:25:28:e9:5a:fb:5d:ba:d9:1c:37:f7:e2:df:90:
                    e2:31:36:cc:77:63:a8:8c:2b:19:33:18:2b:52:5c:
                    af:93:1d:77:28:de:6b:87:13:ff:97:30:28:e8:a7:
                    fb:81:e0:c3:3c:87:e6:95:11:de:e3:b4:8c:2c:53:
                    78:05:90:69:f3:19:22:b3:cc:77:e3:ae:10:5b:a4:
                    44:b7:73:8a:10:5c:ce:d1:3e:ee:a1:23:bc:09:40:
                    b2:00:6a:75:7e:ba:63:be:7f:81:9d:17:27:f7:b6:
                    fb:e9:ce:38:4e:51:7b:0e:7b:d5:be:16:ba:57:fa:
                    52:f2:db:d5:4f:9f:27:2f:de:0d:c8:37:65:72:2e:
                    e8:bc:8e:1c:59:f9:55:41:69:fe:09:72:ca:18:94:
                    07:fa:28:79:37:e4:7c:47:42:85:0b:4a:b1:96:ce:
                    c5:16:61:3f:7d:ab:3f:95:82:9a:b4:b1:00:cb:79:
                    d9:f6:26:48:db:dc:81:72:bb:0c:26:fa:22:b6:ef:
                    9a:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:E1:A4:C5:24:ED:92:54:75:44:C7:A1:BA:76:29:71:BF:13:71:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/cea9b7fa-19b3-34ac-b18b-21f5d67df614.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.92.250.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:db:3e:74:5b:ff:a6:a0:4e:3f:0e:b4:8a:ff:96:a6:52:08:
         93:d1:5e:2a:74:63:43:32:45:06:37:97:dc:45:8e:aa:83:f4:
         ac:87:9a:32:bd:46:47:c6:4a:41:fe:e7:09:c4:33:81:cd:d2:
         1b:15:c8:42:c0:8f:73:ed:6b:b6:34:01:41:ef:00:df:c7:09:
         3b:6f:5c:58:d4:28:e1:bb:4c:64:c2:de:02:04:22:88:46:4c:
         cf:ac:4f:36:93:de:f2:80:e9:d7:27:55:dd:5f:58:dc:fd:22:
         d3:9a:cb:34:38:45:f3:02:d6:6d:ae:d4:5a:90:37:2a:01:f4:
         01:01:af:b3:a0:3d:8c:c8:9f:24:87:33:42:9d:9d:ed:e4:4e:
         d8:ec:de:d4:0e:cf:89:3d:dd:f8:98:a5:b1:2c:81:31:ba:a3:
         34:ed:db:a0:c5:bf:03:f6:ef:79:5d:8e:cf:af:54:4f:2b:28:
         f7:8c:68:42:fb:d8:86:65:cb:72:51:5f:16:0c:8d:35:d8:5a:
         80:0f:a0:75:5c:bd:2f:3c:69:a3:85:c3:d1:e7:da:a3:b3:73:
         87:e1:74:ca:18:ea:16:01:0d:c5:8a:9c:e9:59:88:c8:24:d2:
         05:d1:35:8e:4d:a5:3b:06:3d:0c:10:3c:bb:25:15:46:dc:92:
         a6:33:0f:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 20:37:30 2026 by rpki-client