Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/47b89d69-b927-39d2-bdab-4446cca83880.roa
File:                     47b89d69-b927-39d2-bdab-4446cca83880.roa (raw, json)
Hash identifier:          /UJsLV2cgP80+aAcR90Oa/dhE8TtREk7Ki+NaHrTMhs=
Subject key identifier:   65:BA:7A:48:C9:23:83:93:78:F1:4E:20:F9:7C:DB:21:C2:0F:24:35
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584E2AD4695D1CDDBC67A8638A40
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/47b89d69-b927-39d2-bdab-4446cca83880.roa
Signing time:             Sun 14 Jun 2026 09:00:11 +0000
ROA not before:           Sun 14 Jun 2026 09:00:11 +0000
ROA not after:            Sat 12 Sep 2026 09:00:11 +0000
asID:                     13444
IP address blocks:        66.92.1.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:2a:d4:69:5d:1c:dd:bc:67:a8:63:8a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Jun 14 09:00:11 2026 GMT
            Not After : Sep 12 09:00:11 2026 GMT
        Subject: CN=39b4cb32-d6bb-48c0-8a3a-f1b69fa19587
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:34:ab:ac:0d:8c:e4:8f:4c:26:18:c5:d6:dd:
                    39:40:97:f5:8f:f6:28:1a:ae:ed:15:7d:3c:89:22:
                    0b:b6:10:36:d5:3a:0c:29:d4:96:ff:8e:35:1b:c6:
                    7e:64:97:f9:0b:22:4e:9f:fb:c3:e4:7e:dd:d9:7d:
                    75:09:92:c4:14:d1:55:89:50:9f:60:80:a4:76:40:
                    0e:2e:0c:51:42:12:04:39:3b:83:da:45:d9:ce:2b:
                    42:9b:aa:aa:0e:ec:9d:13:a1:f0:27:1c:2c:62:91:
                    f2:cf:65:2d:70:5d:df:52:cc:77:13:e7:1d:b7:69:
                    21:80:55:e8:cb:5c:f3:f8:00:46:14:8b:2e:bd:2f:
                    08:48:e9:d1:64:92:cf:fe:66:fe:55:48:d9:24:c9:
                    2a:dd:80:6b:c9:da:f1:c0:cc:6f:bb:8b:e2:6a:ec:
                    81:53:ff:cb:61:58:f9:8e:3e:1a:b0:97:c2:12:9c:
                    a0:dd:3a:6a:ad:f4:c1:c3:dd:9e:96:fe:82:05:05:
                    64:91:45:c9:3f:66:8b:b6:bf:bc:89:d5:cc:47:1f:
                    53:cf:39:56:f5:fe:a5:4b:48:0d:f5:84:84:f6:1e:
                    bd:85:4f:58:94:91:4e:3a:7a:77:13:5e:c4:aa:a5:
                    b2:43:02:99:1d:e7:8a:16:ca:f4:b8:0e:49:40:0f:
                    87:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:BA:7A:48:C9:23:83:93:78:F1:4E:20:F9:7C:DB:21:C2:0F:24:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/47b89d69-b927-39d2-bdab-4446cca83880.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.92.1.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:c2:83:d9:f2:1e:e6:9b:8d:98:a3:fb:37:9d:2b:e1:82:85:
         34:a8:77:75:30:58:35:44:50:b3:40:c6:ba:50:1f:63:5e:a0:
         9c:35:de:99:64:f8:ee:1f:b3:28:05:10:6a:40:bd:46:02:e2:
         fb:42:51:b9:fc:d6:3d:53:66:a8:e0:fd:aa:48:75:b0:3d:af:
         6d:ec:1c:d9:e3:05:3a:51:17:85:b7:25:5e:de:5b:21:e5:a5:
         69:14:ba:bb:8e:fc:bf:74:90:2b:02:69:60:8b:49:00:76:cd:
         48:b2:21:25:70:05:a8:20:15:7b:90:3a:f1:6a:92:a5:ad:22:
         08:7b:a4:9c:1c:ab:d8:a6:5d:0a:16:17:6e:8d:18:72:88:ae:
         33:de:1b:1d:34:68:cf:fd:b6:a5:de:f2:1a:b5:37:e3:30:4c:
         cc:a4:5f:42:40:24:0d:3f:ad:52:3b:15:d4:f6:bd:35:b4:bc:
         22:69:64:95:50:02:d6:49:a3:81:bb:c5:25:8c:b3:1d:56:65:
         a8:17:06:79:3f:1c:20:e6:17:e9:ed:e0:9b:a7:c3:0a:7c:13:
         53:e7:f2:af:5c:55:65:a9:27:82:37:f6:dd:51:1d:1c:01:25:
         f5:8a:34:c4:71:a0:78:60:68:00:e0:dd:07:8c:90:ff:b0:59:
         10:5a:c2:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:02:21 2026 by rpki-client