Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/4ad362e2-92b6-39b9-a873-dfd1a96091da.roa
File:                     4ad362e2-92b6-39b9-a873-dfd1a96091da.roa (raw, json)
Hash identifier:          43QKP2S9V89aURh6q20LoLSgHdwvczpkT+rK89JUFBQ=
Subject key identifier:   13:14:2E:18:13:B4:4A:18:A1:3E:8C:DC:E4:46:50:31:7B:BE:3D:D6
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584AE903B29BBB02433EE24A3A80
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/4ad362e2-92b6-39b9-a873-dfd1a96091da.roa
Signing time:             Tue 19 Aug 2025 16:51:33 +0000
ROA not before:           Tue 19 Aug 2025 16:51:33 +0000
ROA not after:            Mon 17 Nov 2025 17:51:33 +0000
asID:                     7018
IP address blocks:        66.92.116.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e9:03:b2:9b:bb:02:43:3e:e2:4a:3a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Aug 19 16:51:33 2025 GMT
            Not After : Nov 17 17:51:33 2025 GMT
        Subject: CN=4430a6be-7b32-4a50-b2ca-a3af8154c2cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:fa:26:cf:4e:f0:34:7a:f5:5f:e3:82:2c:6a:
                    78:c6:e1:09:e9:43:a6:07:8d:31:ae:17:64:96:5a:
                    fb:16:c5:69:b8:e4:1e:42:cb:11:1e:d0:64:29:09:
                    c3:9e:08:90:9e:92:ef:9f:6f:77:9a:28:d0:45:98:
                    98:b2:ca:ae:39:69:0c:bd:c3:34:d7:e8:6a:66:2d:
                    b4:d4:ec:f2:f5:11:86:93:d8:ad:0a:6d:f2:a0:2f:
                    ed:72:0b:ab:19:67:29:2c:6c:a9:f9:5c:a6:da:67:
                    aa:34:36:fc:5d:96:b0:2a:61:9f:a0:ba:88:ad:df:
                    14:d9:11:d5:05:94:3c:d1:e3:87:f9:c2:cd:66:18:
                    53:12:04:1d:4d:48:bf:06:4a:18:c0:36:7e:c7:d9:
                    23:4c:e3:86:a0:02:cb:f3:a5:ba:2d:e8:3c:9b:ab:
                    5e:4c:80:0b:18:e4:18:2d:91:a6:7f:51:86:0d:7b:
                    22:bd:66:bc:74:4b:3b:66:9e:f6:65:ec:c4:37:d6:
                    64:4b:0e:95:2f:cc:24:e5:65:3c:4a:86:a5:ca:3f:
                    81:ee:90:ad:c6:f1:60:84:b0:dc:4a:8a:f3:f9:53:
                    fd:00:cc:cb:f9:93:2f:69:92:80:40:5c:10:76:59:
                    53:ca:f1:12:79:87:85:a2:5f:80:4c:63:a2:d6:8c:
                    17:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:14:2E:18:13:B4:4A:18:A1:3E:8C:DC:E4:46:50:31:7B:BE:3D:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/4ad362e2-92b6-39b9-a873-dfd1a96091da.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.92.116.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:b3:ce:f0:87:2c:bd:d9:dc:d5:a6:45:4a:73:76:5f:bb:0c:
         c5:d3:82:31:27:ae:4a:a4:df:bf:5b:6e:6b:8e:7f:f6:be:1b:
         4f:04:35:56:1d:f0:91:af:59:f1:e5:10:52:16:61:82:62:45:
         4a:a2:a8:68:99:95:31:be:60:15:d2:52:80:8e:85:46:bf:76:
         dd:b4:ee:b8:1f:01:be:8d:a7:43:1e:01:0a:cd:33:9e:73:ae:
         6f:9f:8c:87:48:fc:fa:76:71:d0:25:cb:81:06:a0:23:50:5b:
         a2:78:1b:5a:b7:86:7b:f6:88:a4:89:69:5d:7b:94:95:f6:40:
         ae:2e:85:4d:bb:68:e9:0c:09:3f:4e:6f:e4:8e:ea:eb:73:26:
         67:ed:5b:8b:9c:33:21:7c:7c:c2:f8:33:de:48:6f:35:35:00:
         54:a7:d3:2b:5f:a1:c9:61:72:87:33:46:27:64:ba:1d:68:04:
         ee:4d:96:e1:e6:24:a5:17:78:e7:82:63:1a:a6:57:7d:b1:ce:
         60:1d:2e:24:cc:39:c4:13:e1:6d:92:b5:ea:8d:a3:84:ee:f0:
         fb:d4:54:9d:74:6b:a2:76:76:1b:32:af:84:5a:88:31:f7:1c:
         1a:8f:8b:9c:d5:98:cf:e7:68:a3:74:7e:69:7d:f8:92:8b:71:
         a6:55:31:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 06:54:56 2025 by rpki-client