Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/df2d0107-789c-3cdd-9ec5-f74fcbe8f621.roa
File:                     df2d0107-789c-3cdd-9ec5-f74fcbe8f621.roa (raw, json)
Hash identifier:          5KvO17Ypbr1bMlwZb5FiSdn1JQg7wYgmcPA1ckcr4Mc=
Subject key identifier:   E6:B7:AF:23:59:FB:00:B2:42:20:CD:15:2B:D2:E8:63:2A:94:FD:B2
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584F225D0518FD797733DFE197C0
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/df2d0107-789c-3cdd-9ec5-f74fcbe8f621.roa
Signing time:             Fri 11 Sep 2026 01:00:12 +0000
ROA not before:           Fri 11 Sep 2026 01:00:12 +0000
ROA not after:            Thu 10 Dec 2026 02:00:12 +0000
asID:                     834
IP address blocks:        66.93.140.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Sep 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:22:5d:05:18:fd:79:77:33:df:e1:97:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Sep 11 01:00:12 2026 GMT
            Not After : Dec 10 02:00:12 2026 GMT
        Subject: CN=04444957-b9ee-4a9d-b886-1a685192a573
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:19:84:9a:c4:fd:d8:1c:3d:5a:1d:32:96:7c:
                    33:99:a8:27:e8:b3:cb:91:29:71:42:f0:9f:8a:5c:
                    2c:8d:83:00:d2:b3:b4:7b:39:8e:b6:b3:90:01:89:
                    e8:08:aa:62:3b:00:9d:c2:ba:b0:0c:56:3a:e5:20:
                    be:ba:2d:5a:f0:f1:75:68:9d:f1:b9:cb:d1:a5:73:
                    be:d1:a7:c9:4c:ff:6b:b5:0e:5c:bc:03:e9:19:03:
                    1f:a1:f0:f6:28:3c:7f:6b:cd:b4:13:96:5f:57:ce:
                    23:e5:07:fb:e2:27:dd:c6:af:a5:9f:dc:69:12:12:
                    d3:ed:de:2e:49:50:92:e6:f4:4d:6b:1c:ba:7c:2d:
                    d5:81:53:dd:4e:be:f2:5e:2e:ea:a7:f2:32:0d:13:
                    64:d9:24:a5:16:1d:70:31:48:35:59:8b:dc:41:fb:
                    ca:46:fd:e2:49:9a:01:a0:98:7d:51:b8:f9:4c:90:
                    6f:2b:27:ff:82:0b:8b:0c:ba:2a:a0:b1:b9:93:e4:
                    d3:eb:a2:d3:20:be:b7:51:54:6c:39:99:f0:b1:4b:
                    fc:92:da:37:0c:90:67:a9:6f:93:5e:25:8a:d8:0e:
                    f0:74:e3:f2:4f:90:c1:43:d2:6d:53:41:a4:f3:e1:
                    08:fb:9e:70:58:b0:d1:6d:78:79:ce:89:df:f5:5a:
                    91:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:B7:AF:23:59:FB:00:B2:42:20:CD:15:2B:D2:E8:63:2A:94:FD:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/df2d0107-789c-3cdd-9ec5-f74fcbe8f621.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.93.140.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:bd:60:67:5f:76:54:2d:31:f0:25:67:c9:b1:48:86:03:41:
         e4:da:0d:ee:60:62:e6:e3:ae:95:16:cc:8b:32:af:2b:c0:aa:
         71:23:e7:62:64:6d:ca:6c:d7:61:fe:6e:6b:32:e0:31:53:c6:
         36:c3:c6:77:e1:be:30:eb:f7:11:52:e1:94:9b:9e:e6:65:b2:
         a5:d5:74:87:0b:00:12:70:f5:ca:f9:3d:52:cb:cc:8f:bd:6a:
         1c:d6:5d:7a:b2:98:58:62:15:fe:6d:6a:a2:1f:34:bb:dd:7a:
         84:38:58:ab:fc:40:7f:c1:f2:f5:22:da:7c:85:c7:1a:a4:1d:
         41:8b:55:01:91:c1:da:a8:81:20:4f:bd:92:32:91:f3:a1:c0:
         02:45:c6:ff:fe:d6:00:ce:82:eb:a1:0b:00:0c:b2:34:38:7e:
         8b:3a:04:49:f4:4f:63:75:6f:13:bb:af:7a:81:6e:27:87:9d:
         c5:a3:df:48:2d:67:bb:99:ef:35:33:77:c0:f1:74:cc:41:76:
         a5:a2:3e:9b:6d:13:d7:96:f9:7f:89:a0:2a:d3:cf:c3:c9:ee:
         49:3c:87:0a:12:b2:1f:19:ce:3c:1b:b5:fc:37:b7:b0:3d:03:
         4f:ea:31:d2:a6:fb:ef:7a:e6:67:a5:58:fa:61:09:b3:b7:90:
         60:8d:84:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 18:00:43 2026 by rpki-client