Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/f98974cf-d848-3b75-950c-6307aad1860b.roa
File:                     f98974cf-d848-3b75-950c-6307aad1860b.roa (raw, json)
Hash identifier:          srO7Slm33YANi1iGYtUZM20o7HgvM/8SZ48HO3kYORE=
Subject key identifier:   6E:09:5C:7A:68:14:6B:75:F1:C7:66:77:BF:43:14:DE:0B:AA:5B:8C
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584AC3E74FC2426114349E326A80
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/f98974cf-d848-3b75-950c-6307aad1860b.roa
Signing time:             Wed 06 Aug 2025 09:49:27 +0000
ROA not before:           Wed 06 Aug 2025 09:49:27 +0000
ROA not after:            Tue 04 Nov 2025 10:49:27 +0000
asID:                     21859
IP address blocks:        66.92.26.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c3:e7:4f:c2:42:61:14:34:9e:32:6a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Aug  6 09:49:27 2025 GMT
            Not After : Nov  4 10:49:27 2025 GMT
        Subject: CN=8deb8eae-f480-4cc5-8f80-662ffeb96ac6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:5e:62:6a:b8:f5:df:f2:f0:79:99:b9:c9:15:
                    95:e7:c4:6a:57:bc:79:b1:ab:a8:af:7c:20:9d:c2:
                    e1:23:09:44:31:7e:b7:f8:14:3c:f7:98:62:a5:60:
                    e0:13:1b:7d:9f:db:ef:fb:77:99:2f:bb:b3:60:68:
                    90:60:3b:26:7a:ae:4c:db:38:1d:45:d0:04:1a:81:
                    90:88:23:dc:ce:fb:f4:f1:12:be:89:b7:26:7c:46:
                    a3:23:36:86:4c:07:2e:53:39:52:68:e5:33:7d:78:
                    94:0d:a6:23:50:91:98:10:14:c4:79:be:62:76:4b:
                    42:f3:04:5c:1b:d0:86:9d:54:8b:19:ac:79:30:8f:
                    45:9a:b9:2d:fa:5c:92:15:d5:67:77:75:8a:86:8d:
                    c4:d8:1c:48:85:39:f6:b9:24:5a:7b:e5:ef:3a:99:
                    b4:31:e9:0d:c3:34:71:6e:61:1a:17:96:ab:76:b1:
                    c6:03:eb:b3:7c:d6:d7:0f:f7:62:21:e3:75:bd:8d:
                    fc:ef:a0:67:ea:30:d5:0f:8c:65:99:c7:a5:26:61:
                    ff:e6:bd:90:7b:93:3a:27:92:13:46:46:d1:18:13:
                    f0:a9:be:18:7c:68:6b:49:4f:7a:bc:48:8d:5b:f4:
                    09:3c:8d:82:ee:fa:9f:e2:3c:f7:5e:01:99:89:37:
                    de:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:09:5C:7A:68:14:6B:75:F1:C7:66:77:BF:43:14:DE:0B:AA:5B:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/f98974cf-d848-3b75-950c-6307aad1860b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.92.26.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:72:53:4c:95:4b:2b:85:ab:f4:fa:7b:6c:e4:b7:86:c8:4c:
         26:9e:44:cb:87:56:9f:4b:51:79:fc:92:ed:31:c5:61:f6:57:
         e3:d0:ad:03:9b:fb:52:b6:88:f0:82:24:78:97:99:fc:41:ff:
         84:49:3d:a1:ec:93:14:87:7a:f5:6a:04:0d:48:ee:02:d8:d4:
         1a:de:47:25:bc:e5:34:e5:b8:05:1b:58:36:57:cb:ad:5f:aa:
         70:96:5c:5f:4a:16:68:f2:14:bc:3d:e2:b8:12:ca:8e:8d:c7:
         63:7e:bb:d1:7c:ec:b0:22:eb:1b:e3:4f:f3:26:d1:ea:b0:27:
         d2:f8:18:7f:c6:d7:14:11:78:e6:49:d4:f6:d2:e1:73:af:05:
         05:06:5c:d0:1c:5a:50:03:c4:62:2f:ca:24:3f:e1:e0:26:5a:
         1e:10:b3:5f:ff:e2:d9:d2:82:91:24:24:6b:18:52:5d:1e:e2:
         43:d9:90:32:f1:d2:9c:bd:c7:56:b5:1b:ad:5a:c9:bc:17:9a:
         c9:9e:f4:f4:21:9c:df:09:40:97:08:e3:d2:3a:d4:10:ec:39:
         3a:60:11:13:1e:b0:14:fe:8b:01:1a:70:7f:d5:41:af:c4:9f:
         a0:08:3c:51:8e:2a:f8:f0:08:a6:2b:4c:2b:8a:a7:31:8a:11:
         46:0f:9b:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 05:29:20 2025 by rpki-client