Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/0e09b17d-9d7a-3e44-81db-be04912f03df.roa
File:                     0e09b17d-9d7a-3e44-81db-be04912f03df.roa (raw, json)
Hash identifier:          lM9AjcSWwZLO0sFX1P8HmNjteGuiFPrFDDGYZN73Qns=
Subject key identifier:   23:85:9A:71:47:DC:20:E5:3D:D1:99:3A:90:40:EC:A3:07:EE:40:8F
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584B8FA2F4D4835A45C13A5B0E38
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/0e09b17d-9d7a-3e44-81db-be04912f03df.roa
Signing time:             Sat 18 Oct 2025 09:16:38 +0000
ROA not before:           Sat 18 Oct 2025 09:16:38 +0000
ROA not after:            Fri 16 Jan 2026 10:16:38 +0000
asID:                     205886
IP address blocks:        66.92.250.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:8f:a2:f4:d4:83:5a:45:c1:3a:5b:0e:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Oct 18 09:16:38 2025 GMT
            Not After : Jan 16 10:16:38 2026 GMT
        Subject: CN=3d8b1620-da52-47ec-b3df-c39df981050b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:b7:94:65:d5:05:1a:6c:d0:30:3f:15:0a:d9:
                    57:ad:38:ba:1b:c3:04:21:f9:c8:fc:08:6c:c2:7c:
                    10:51:1b:67:bf:e4:09:10:0b:55:0f:5e:98:bb:0b:
                    cc:50:36:0b:ba:ad:30:57:6c:d7:0b:6b:20:33:7e:
                    68:69:eb:74:66:1d:c3:d9:e9:3e:e2:53:af:36:3c:
                    ed:ae:f5:e3:f6:7c:c8:69:b0:f8:7f:46:11:c4:a5:
                    f2:37:25:8f:64:21:20:df:04:7e:2a:7d:fc:c9:bb:
                    2e:29:93:e9:42:22:fe:46:12:38:6d:cf:a9:2f:12:
                    3c:d8:c6:12:2f:89:5c:d4:dd:77:1a:b4:61:6f:9c:
                    77:a8:0f:ce:0e:2a:0f:2a:7d:9c:e2:d7:0b:7c:b3:
                    e9:8f:96:0b:f5:b7:9d:cc:d5:9c:2b:a2:ad:9c:b1:
                    a3:62:b3:27:1b:5d:1f:d4:d2:89:bc:cd:09:02:30:
                    9c:f8:86:fa:fe:17:f9:5a:8f:d4:a0:f3:a1:8a:92:
                    52:ad:d2:5d:55:37:88:02:22:8e:9e:18:09:68:2f:
                    1f:f8:85:69:5e:ee:d9:49:5c:e7:b9:8c:33:34:50:
                    1b:ba:d6:21:a7:35:79:ad:b9:cc:14:48:d8:8c:42:
                    cb:c9:70:81:dc:12:d8:c1:45:b1:d7:25:0e:85:0e:
                    fc:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:85:9A:71:47:DC:20:E5:3D:D1:99:3A:90:40:EC:A3:07:EE:40:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/0e09b17d-9d7a-3e44-81db-be04912f03df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.92.250.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:76:fd:31:2c:b4:6f:47:6d:d0:b1:0a:fe:c9:57:98:d1:eb:
         97:ea:35:86:26:e9:1f:ed:a8:b5:f7:95:f1:37:60:9d:25:21:
         75:e1:9b:4c:64:66:44:b8:af:a2:df:76:59:df:b2:7a:06:16:
         9e:0d:90:36:1f:be:d4:c0:30:33:f2:8b:5b:f8:da:49:93:34:
         43:a4:6c:7e:cd:cf:9f:93:96:c9:4a:df:cc:c3:06:5a:4e:4f:
         3e:36:5d:e5:7b:f0:18:b3:a3:44:71:5e:bd:b3:c3:87:0c:d3:
         c8:42:37:1a:c0:d8:19:f0:03:7e:b4:ba:01:c7:be:a9:60:10:
         91:84:e6:3c:f3:6b:f5:7a:32:5a:03:20:a7:df:d0:73:88:d8:
         8c:93:26:44:22:ba:0a:6b:de:1c:38:64:06:88:cb:81:50:76:
         4d:3f:bf:96:d3:a8:43:0c:b0:56:a0:f8:fc:38:9e:54:ac:82:
         28:2e:83:29:b6:ce:f2:06:04:71:5f:02:e4:d4:21:87:f2:00:
         26:45:d6:b4:a8:2f:94:b1:53:2b:6d:86:3b:59:12:32:45:2e:
         6b:ae:14:8a:cc:7b:64:c5:77:78:ac:fc:96:7c:71:90:95:a2:
         72:c3:67:95:5d:a9:92:05:7c:f5:9b:07:fa:7a:67:4f:13:1c:
         b6:a4:10:a7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuPovTUg1pFwTpbDjgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh
YWU3MB4XDTI1MTAxODA5MTYzOFoXDTI2MDExNjEwMTYzOFowLzEtMCsGA1UEAxMk
M2Q4YjE2MjAtZGE1Mi00N2VjLWIzZGYtYzM5ZGY5ODEwNTBiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoLeUZdUFGmzQMD8VCtlXrTi6G8MEIfnI/Ahs
wnwQURtnv+QJEAtVD16YuwvMUDYLuq0wV2zXC2sgM35oaet0Zh3D2ek+4lOvNjzt
rvXj9nzIabD4f0YRxKXyNyWPZCEg3wR+Kn38ybsuKZPpQiL+RhI4bc+pLxI82MYS
L4lc1N13GrRhb5x3qA/ODioPKn2c4tcLfLPpj5YL9bedzNWcK6KtnLGjYrMnG10f
1NKJvM0JAjCc+Ib6/hf5Wo/UoPOhipJSrdJdVTeIAiKOnhgJaC8f+IVpXu7ZSVzn
uYwzNFAbutYhpzV5rbnMFEjYjELLyXCB3BLYwUWx1yUOhQ78pQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCOFmnFH3CDlPdGZOpBA7KMH7kCPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3
MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMGUwOWIxN2QtOWQ3YS0z
ZTQ0LTgxZGItYmUwNDkxMmYwM2RmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0
YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj
YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw
OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQlz6MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHJ2/TEstG9HbdCxCv7JV5jR65fqNYYm6R/tqLX3lfE3YJ0lIXXhm0xk
ZkS4r6LfdlnfsnoGFp4NkDYfvtTAMDPyi1v42kmTNEOkbH7Nz5+TlslK38zDBlpO
Tz42XeV78Bizo0RxXr2zw4cM08hCNxrA2BnwA360ugHHvqlgEJGE5jzza/V6MloD
IKff0HOI2IyTJkQiugpr3hw4ZAaIy4FQdk0/v5bTqEMMsFag+Pw4nlSsgigugym2
zvIGBHFfAuTUIYfyACZF1rSoL5SxUytthjtZEjJFLmuuFIrMe2TFd3is/JZ8cZCV
onLDZ5VdqZIFfPWbB/p6Z08THLakEKc=
-----END CERTIFICATE-----
Generated at Mon Oct 20 03:14:49 2025 by rpki-client