Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/fc7b799e-32bc-34a6-9212-e1296107b896.roa
File:                     fc7b799e-32bc-34a6-9212-e1296107b896.roa (raw, json)
Hash identifier:          q1DFvIrRZA8De3G1F9ocfv4BmkEqoBBCny80O8SFSzg=
Subject key identifier:   E4:28:62:B3:71:F4:1B:37:E9:02:39:99:1D:2C:1C:6B:FD:26:44:E7
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584CBF171ED8DE6A4075B9D28980
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/fc7b799e-32bc-34a6-9212-e1296107b896.roa
Signing time:             Wed 04 Feb 2026 02:00:31 +0000
ROA not before:           Wed 04 Feb 2026 02:00:31 +0000
ROA not after:            Tue 05 May 2026 01:00:31 +0000
asID:                     211192
IP address blocks:        66.92.143.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:bf:17:1e:d8:de:6a:40:75:b9:d2:89:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Feb  4 02:00:31 2026 GMT
            Not After : May  5 01:00:31 2026 GMT
        Subject: CN=1cc4ead0-09d4-4e6f-a1bf-16bf7e033fcf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:9c:3f:66:88:4a:c1:0e:3b:4f:1d:c1:71:28:
                    0c:e7:cd:a5:9d:7a:c9:ec:ca:3d:fe:b5:eb:2f:27:
                    e7:5d:2c:cb:33:13:45:ae:26:ec:99:90:fb:b8:ac:
                    ea:29:5d:1e:ee:6d:cb:47:bf:4c:1c:7d:14:d3:0a:
                    30:6c:51:51:f7:a4:07:c1:73:ab:e1:e5:c1:ab:4e:
                    94:86:68:79:62:f4:5c:1c:d1:2c:43:f5:c0:f6:15:
                    b0:24:2e:02:41:8a:ce:06:54:4e:78:34:2e:d1:36:
                    dc:65:66:34:74:3d:ae:4d:e7:70:e5:15:fc:c5:ac:
                    dc:91:61:37:4f:e9:8f:20:7b:20:72:ec:d7:34:08:
                    d6:a2:59:5f:09:01:4f:02:9f:e4:35:a9:14:b3:9e:
                    9a:7b:26:a8:46:a0:58:33:c4:84:45:48:2a:fd:e2:
                    67:65:08:d6:d3:a5:30:c0:1e:cf:59:82:45:6e:77:
                    1b:ba:0c:59:77:7c:e2:6a:38:8b:d8:62:3a:c2:2c:
                    6f:7a:f6:56:90:f0:21:5d:d6:35:af:cd:cd:5d:b5:
                    af:fb:91:74:46:75:f5:08:85:61:c9:5c:65:cd:a8:
                    f5:0e:2e:25:19:19:fe:1c:da:2b:fa:27:da:f6:a3:
                    d0:ae:e1:82:7d:c4:f9:93:7d:93:eb:11:9e:5a:68:
                    80:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:28:62:B3:71:F4:1B:37:E9:02:39:99:1D:2C:1C:6B:FD:26:44:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/fc7b799e-32bc-34a6-9212-e1296107b896.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.92.143.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:7b:fe:5a:2b:59:c0:d4:32:08:c4:a8:37:b2:21:bd:9d:ae:
         80:75:84:05:fd:77:9a:fe:a1:e2:66:e3:47:9c:4e:6e:ec:e7:
         28:c7:23:75:ab:f0:6e:ce:de:77:ad:07:92:3e:91:4b:1d:90:
         41:2c:3b:20:f3:e1:99:aa:0f:7f:2d:9b:31:05:64:38:ee:07:
         7f:89:af:5d:cb:30:fb:6c:e4:4e:cb:c0:0c:59:15:dd:9a:94:
         59:61:f0:2e:fa:a5:b0:80:0f:e3:ff:b3:7f:3a:5e:a8:f2:13:
         ed:09:96:e4:24:f0:74:c5:06:4f:db:61:e3:0d:e2:7e:45:c2:
         26:fb:af:41:70:c7:00:8a:ed:87:8b:da:16:3b:38:3e:4b:b1:
         e7:7e:2f:b3:32:ab:82:91:7d:28:69:97:8e:ee:ac:a4:e7:b5:
         25:5b:63:17:e1:b1:00:86:50:f7:bb:f4:0b:4e:fa:d3:45:26:
         aa:76:2f:b1:e9:96:ee:c5:31:fa:4d:cc:9e:83:e2:38:87:bd:
         13:ad:4a:5b:b2:06:93:08:c3:aa:82:34:98:df:ea:74:63:6f:
         b1:f9:64:72:a3:23:97:e7:c8:21:31:e0:72:52:aa:d9:43:e7:
         8f:ed:3a:4b:90:25:59:0a:e6:3c:26:74:81:6f:6f:9f:82:c9:
         4f:18:cc:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:39:48 2026 by rpki-client