Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/4c3b1ee8-cad3-32e7-bd60-46947cbb9147.roa
File:                     4c3b1ee8-cad3-32e7-bd60-46947cbb9147.roa (raw, json)
Hash identifier:          IPWIAPTXujw7UR5CJ4FjS8nGs1RxS0gBeku+N3no3Bw=
Subject key identifier:   2B:CE:1D:E8:B3:83:B6:14:9F:D8:B8:60:D4:3B:84:CE:39:4F:E2:4B
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584E9A7FE99484B34233B21E4F00
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/4c3b1ee8-cad3-32e7-bd60-46947cbb9147.roa
Signing time:             Fri 24 Jul 2026 09:00:12 +0000
ROA not before:           Fri 24 Jul 2026 09:00:12 +0000
ROA not after:            Thu 22 Oct 2026 09:00:12 +0000
asID:                     9009
IP address blocks:        66.93.160.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9a:7f:e9:94:84:b3:42:33:b2:1e:4f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Jul 24 09:00:12 2026 GMT
            Not After : Oct 22 09:00:12 2026 GMT
        Subject: CN=bb0148d6-d179-4032-8b31-fc3f332b859c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:91:bc:01:d5:3b:5e:b5:fb:81:60:14:16:10:
                    3b:e6:29:b1:63:d3:9c:49:f5:ef:0d:a5:3c:f1:45:
                    c9:6e:62:c6:19:b2:81:d1:6b:43:da:a6:37:5f:72:
                    33:3e:57:a0:9f:7c:53:1c:02:df:d0:14:c0:d5:b4:
                    97:29:78:5f:89:c4:39:13:52:4a:df:d9:14:2e:d0:
                    51:0c:fd:52:4b:aa:c1:bc:9f:96:9b:f9:5c:63:cf:
                    35:f9:ff:71:63:e2:2b:a6:9d:49:18:ab:1e:a1:77:
                    ee:87:29:27:ff:0f:f5:fa:33:02:e3:95:da:13:f3:
                    2e:d8:da:9a:1b:62:dc:e1:6b:e1:92:2a:34:26:f5:
                    79:aa:32:82:38:cb:bc:c5:91:de:3e:88:2b:29:83:
                    af:b3:14:94:f2:68:91:e8:70:e7:97:66:b4:d1:0e:
                    bc:08:68:a9:bf:35:bc:f3:18:2f:92:21:c4:59:9c:
                    e2:47:a3:be:09:06:5d:d9:60:9f:6f:47:89:3c:ba:
                    02:79:19:e5:56:a9:44:cb:e6:2b:6e:54:b0:29:7f:
                    09:e2:94:b3:b1:c3:f6:2c:02:98:24:b5:ab:1f:8a:
                    6a:0d:b9:05:48:e9:0e:d9:28:01:45:63:a6:de:d2:
                    7a:5d:f9:4d:c9:96:dd:9a:d0:4d:73:dd:64:ed:38:
                    76:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:CE:1D:E8:B3:83:B6:14:9F:D8:B8:60:D4:3B:84:CE:39:4F:E2:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/4c3b1ee8-cad3-32e7-bd60-46947cbb9147.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.93.160.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:b8:39:c8:f4:d3:ec:35:95:18:6b:c9:a3:08:97:28:0a:a2:
         cc:92:ab:41:a0:5e:ce:23:1f:15:48:9b:0f:0a:2b:ea:e8:b1:
         d5:7b:57:8c:40:34:c7:8f:47:dc:6c:4e:0f:da:a1:8c:78:63:
         49:03:d1:56:51:5a:02:0d:b7:c6:c4:cb:e3:d6:8d:1f:f9:d0:
         92:b8:63:d2:2a:bd:3b:07:d9:39:8f:4c:42:b9:bb:cd:51:53:
         a2:49:bf:6d:75:0c:25:0a:82:ea:9a:37:34:15:45:39:c8:90:
         6c:fc:1d:7a:dd:21:da:40:52:b2:41:bb:82:09:1a:aa:2c:30:
         a8:f5:36:b0:b2:1d:29:7d:d0:2a:8b:62:03:bf:2d:04:31:b8:
         1f:9d:e2:89:1e:bb:ee:05:db:bb:b2:20:a8:e8:f9:5f:24:9f:
         cb:31:21:d3:dc:9d:93:73:55:86:c9:bf:0a:97:1d:cf:38:95:
         99:47:9f:2f:b2:9a:82:3e:88:2b:da:cf:fb:00:0e:52:2e:b2:
         1f:bd:5d:be:26:88:f3:c3:34:26:cd:79:f3:f4:4f:90:e8:fd:
         6f:94:b6:08:f7:2d:d4:7d:0e:ac:db:70:fc:35:6e:af:27:b4:
         17:48:e1:1e:e3:ba:8d:94:9d:85:13:dc:9f:f8:8d:f9:c8:2a:
         64:05:47:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:22:21 2026 by rpki-client