Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/ff971885-7bcb-333a-88cf-2a63fe664d3a.roa
File:                     ff971885-7bcb-333a-88cf-2a63fe664d3a.roa (raw, json)
Hash identifier:          FOrvpIjrl3OE8zJRbbLmMBywzSksP6qrNxp+IYE8jKg=
Subject key identifier:   19:5B:B2:05:87:DE:99:A6:1F:B2:65:55:60:03:12:6C:F5:13:9F:40
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584D8695506620FDB9B57A7F4620
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/ff971885-7bcb-333a-88cf-2a63fe664d3a.roa
Signing time:             Thu 16 Apr 2026 13:00:31 +0000
ROA not before:           Thu 16 Apr 2026 13:00:31 +0000
ROA not after:            Wed 15 Jul 2026 13:00:31 +0000
asID:                     6079
IP address blocks:        66.92.120.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:86:95:50:66:20:fd:b9:b5:7a:7f:46:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Apr 16 13:00:31 2026 GMT
            Not After : Jul 15 13:00:31 2026 GMT
        Subject: CN=a5ed9edc-761a-4722-b7bc-704b5843b6d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:8f:82:ac:c5:17:77:e7:7a:0d:ce:5c:bf:e2:
                    81:aa:61:1d:6a:43:d6:d7:2f:1b:33:bf:c4:47:22:
                    3e:a7:af:41:60:10:2c:37:c7:1a:2a:78:26:82:8a:
                    88:ec:e7:49:bd:6f:27:f9:d9:68:f1:01:84:aa:0f:
                    45:cf:4b:a9:22:23:f8:e1:51:cf:62:53:06:fa:78:
                    b5:cc:4e:3d:02:5d:05:3d:a1:7f:85:29:94:8a:77:
                    be:75:43:78:56:c2:e2:21:48:40:15:1c:a2:b2:80:
                    d5:88:a0:88:80:45:2f:9a:b0:d1:74:c4:58:63:65:
                    a4:91:25:52:c7:95:54:35:4e:0d:0f:b9:e1:be:48:
                    42:e0:5d:62:b6:71:55:49:ac:cd:de:b0:f4:66:60:
                    94:54:ce:bd:9f:49:4a:da:15:48:d9:39:ef:24:fa:
                    99:33:15:7f:92:1d:34:37:5e:8c:75:a9:e0:2b:32:
                    1b:ef:e3:0f:83:2d:3b:d0:34:bc:c7:ae:04:49:62:
                    61:a3:55:c4:55:73:48:49:4a:eb:2f:56:29:71:1b:
                    c9:c2:cd:55:e7:6b:92:f6:96:82:35:4e:b6:9a:c6:
                    00:53:ec:20:b0:bd:d8:3d:ec:a2:2c:54:00:8d:ab:
                    7b:81:58:97:73:cc:55:0b:4e:22:f0:95:24:fb:76:
                    7f:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:5B:B2:05:87:DE:99:A6:1F:B2:65:55:60:03:12:6C:F5:13:9F:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/ff971885-7bcb-333a-88cf-2a63fe664d3a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.92.120.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:e8:86:b1:70:e7:23:eb:d2:6e:d4:d7:f5:df:da:b5:77:49:
         75:96:11:bd:87:c4:bb:30:ed:7b:13:5b:f8:e4:8f:f1:cd:05:
         80:cc:78:85:98:89:30:96:b1:30:36:b2:5f:fb:c1:ae:88:09:
         55:4a:5f:2f:a0:7e:df:52:62:06:52:e4:40:20:8b:14:6a:24:
         a3:3e:39:18:65:b4:e2:56:b5:34:db:c5:ec:a3:b5:17:f1:eb:
         2f:c2:c6:a9:46:81:a0:3a:6a:bd:81:6f:a3:fa:32:32:d3:98:
         34:21:6a:8e:20:e0:7c:3b:6c:6c:65:d1:9e:c1:1c:33:d4:7f:
         06:21:f2:35:34:0c:34:54:d9:3d:db:5a:f3:e6:12:49:0b:20:
         e9:a7:c2:6f:ef:b5:5f:70:44:a3:ae:0d:34:af:e5:27:f4:67:
         aa:2f:9e:32:9e:04:7e:64:5f:2e:68:7f:d2:f2:c7:7e:28:72:
         ee:5b:b3:54:d1:7c:31:0b:85:07:e0:6e:74:8c:7e:b5:ba:85:
         35:fc:00:b1:00:2d:aa:00:d7:b5:c0:88:4d:16:a0:10:8a:f5:
         82:01:c8:0f:d5:89:ab:c7:25:5f:0d:db:8c:dd:7c:95:a6:c5:
         20:74:25:0a:31:ea:97:d5:d1:16:e6:b8:86:20:e2:42:52:67:
         ba:62:cf:ee
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2GlVBmIP25tXp/RiAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh
YWU3MB4XDTI2MDQxNjEzMDAzMVoXDTI2MDcxNTEzMDAzMVowLzEtMCsGA1UEAxMk
YTVlZDllZGMtNzYxYS00NzIyLWI3YmMtNzA0YjU4NDNiNmQ4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkY+CrMUXd+d6Dc5cv+KBqmEdakPW1y8bM7/E
RyI+p69BYBAsN8caKngmgoqI7OdJvW8n+dlo8QGEqg9Fz0upIiP44VHPYlMG+ni1
zE49Al0FPaF/hSmUine+dUN4VsLiIUhAFRyisoDViKCIgEUvmrDRdMRYY2WkkSVS
x5VUNU4ND7nhvkhC4F1itnFVSazN3rD0ZmCUVM69n0lK2hVI2TnvJPqZMxV/kh00
N16MdangKzIb7+MPgy070DS8x64ESWJho1XEVXNISUrrL1YpcRvJws1V52uS9paC
NU62msYAU+wgsL3YPeyiLFQAjat7gViXc8xVC04i8JUk+3Z/zQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBlbsgWH3pmmH7JlVWADEmz1E59AMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3
MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvZmY5NzE4ODUtN2JjYi0z
MzNhLTg4Y2YtMmE2M2ZlNjY0ZDNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0
YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj
YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw
OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQlx4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC3ohrFw5yPr0m7U1/Xf2rV3SXWWEb2HxLsw7XsTW/jkj/HNBYDMeIWY
iTCWsTA2sl/7wa6ICVVKXy+gft9SYgZS5EAgixRqJKM+ORhltOJWtTTbxeyjtRfx
6y/CxqlGgaA6ar2Bb6P6MjLTmDQhao4g4Hw7bGxl0Z7BHDPUfwYh8jU0DDRU2T3b
WvPmEkkLIOmnwm/vtV9wRKOuDTSv5Sf0Z6ovnjKeBH5kXy5of9Lyx34ocu5bs1TR
fDELhQfgbnSMfrW6hTX8ALEALaoA17XAiE0WoBCK9YIByA/ViavHJV8N24zdfJWm
xSB0JQox6pfV0RbmuIYg4kJSZ7piz+4=
-----END CERTIFICATE-----
Generated at Fri Apr 17 22:46:25 2026 by rpki-client