Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/1977f185-dd17-3c35-916e-8c37e0bb9908.roa
File:                     1977f185-dd17-3c35-916e-8c37e0bb9908.roa (raw, json)
Hash identifier:          rCFyjKD8faypVDOft/6qSIuercEFizPRng2yhmmSgTI=
Subject key identifier:   B5:E0:C6:0F:66:7F:6D:FA:41:12:37:51:AF:E5:B8:52:BB:89:35:75
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584AE67AE95B08B54F3192AE5D40
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/1977f185-dd17-3c35-916e-8c37e0bb9908.roa
Signing time:             Mon 18 Aug 2025 19:04:20 +0000
ROA not before:           Mon 18 Aug 2025 19:04:20 +0000
ROA not after:            Sun 16 Nov 2025 20:04:20 +0000
asID:                     20115
IP address blocks:        66.92.240.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e6:7a:e9:5b:08:b5:4f:31:92:ae:5d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Aug 18 19:04:20 2025 GMT
            Not After : Nov 16 20:04:20 2025 GMT
        Subject: CN=e9da2f03-efae-4234-88f6-8db4fcaf41d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:01:06:2c:ef:b5:ac:a9:8a:83:f3:08:06:61:
                    dd:f0:37:5c:71:bb:c6:2a:1a:90:5a:10:fe:09:90:
                    0f:a3:41:f7:5b:04:49:2e:75:71:c8:04:fe:3f:8e:
                    3f:40:6d:4b:3c:a3:35:f1:09:3a:2a:a1:81:11:70:
                    15:45:70:9d:01:99:c7:d7:6c:ad:42:96:dc:16:1d:
                    98:c8:b4:92:7e:b0:ac:ca:b4:9c:fa:c3:a1:f5:56:
                    8b:a9:82:70:7c:67:c2:b7:24:dc:33:46:af:e1:9e:
                    96:df:fd:a0:f8:bf:36:64:85:a4:d9:49:c7:64:10:
                    79:60:c4:d6:e5:17:e8:4f:07:bc:3f:61:8c:42:db:
                    7b:a3:c9:e7:85:c0:d9:e4:ad:72:73:cd:14:2f:a3:
                    60:23:38:9c:29:3a:d1:f3:af:40:e3:86:62:9c:be:
                    a3:ce:e2:68:11:6d:43:1f:04:81:73:6f:a9:49:d1:
                    81:5a:fc:87:c5:4b:e1:8d:c8:70:34:59:d8:6c:4b:
                    3c:ea:23:94:48:ca:5f:1b:19:78:8d:f3:d9:56:76:
                    2b:d7:ee:10:48:52:09:94:ee:37:ea:de:11:ee:38:
                    0e:fb:16:68:85:39:b7:9c:13:0b:e9:1d:78:c2:1f:
                    d0:5c:ef:d6:52:03:94:6b:76:d4:c7:c1:41:79:1f:
                    42:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:E0:C6:0F:66:7F:6D:FA:41:12:37:51:AF:E5:B8:52:BB:89:35:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/1977f185-dd17-3c35-916e-8c37e0bb9908.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.92.240.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:c4:40:88:ad:84:14:99:69:58:1c:fe:df:51:d8:2d:07:ef:
         99:32:f2:43:23:6f:ab:a7:1e:3b:f0:96:e4:ae:b4:dc:6a:f7:
         18:61:53:15:c0:20:0b:75:2d:81:3d:ed:5e:55:d1:66:13:54:
         e8:23:f8:92:ca:f8:59:88:f2:eb:dd:54:5e:ca:4f:df:d4:eb:
         09:3e:04:2a:f8:b2:67:82:88:ae:22:49:52:c6:ae:a8:f0:6a:
         3f:ee:85:14:75:4e:bb:a5:7a:39:45:3d:44:69:57:ea:ef:11:
         18:1f:c3:67:ef:1a:4e:c9:01:a5:05:2e:33:70:35:44:80:33:
         22:5e:c6:17:5d:92:74:c6:5b:f6:d4:b9:27:fa:07:98:f3:e5:
         e0:5e:2c:2a:99:55:b7:b1:ba:45:f5:22:eb:2a:dc:8c:17:b1:
         03:a9:9c:97:a0:a1:fc:40:d6:09:fb:21:05:60:06:4c:88:0b:
         ed:4d:da:a4:77:0b:38:99:7d:a1:1f:37:52:91:6e:f6:37:bc:
         6d:c1:32:ac:9b:bf:46:7c:aa:0f:63:5f:e1:ed:a8:42:7c:32:
         33:7d:d1:e7:d2:c5:b1:14:a1:0f:68:a4:6b:e2:aa:9b:27:27:
         d3:d9:dd:8e:37:96:c5:a9:fc:b0:a2:b5:bb:e4:a0:f6:12:95:
         c6:04:1b:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:15:00 2025 by rpki-client