Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/5fa02bc8-b788-3aec-9545-019b3a9de2ef.roa
File:                     5fa02bc8-b788-3aec-9545-019b3a9de2ef.roa (raw, json)
Hash identifier:          ki7GDfDKLiS7rxujznEdGaWrraMEZMQdBLo7N/byoNM=
Subject key identifier:   31:C4:6E:E1:56:36:3E:03:72:A2:F9:A7:2A:F4:CD:25:3E:A7:0E:EF
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584D48014DE9B907451849FBA640
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/5fa02bc8-b788-3aec-9545-019b3a9de2ef.roa
Signing time:             Wed 25 Mar 2026 03:02:24 +0000
ROA not before:           Wed 25 Mar 2026 03:02:24 +0000
ROA not after:            Tue 23 Jun 2026 03:02:24 +0000
asID:                     834
IP address blocks:        66.93.150.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:48:01:4d:e9:b9:07:45:18:49:fb:a6:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Mar 25 03:02:24 2026 GMT
            Not After : Jun 23 03:02:24 2026 GMT
        Subject: CN=39bd4d71-2a4f-4f79-a10d-0f7050ab7922
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:c1:1c:51:8f:a8:93:49:75:44:93:fb:96:0a:
                    a4:d8:95:62:26:52:7b:e4:bb:bb:a7:fc:11:9c:c1:
                    b2:dd:7c:73:fb:2f:84:43:f7:e7:a0:c9:09:9a:b3:
                    ca:ec:af:75:ee:0c:b6:c6:b3:a9:75:9e:09:9c:1e:
                    2e:ce:4a:a4:df:52:81:2f:e0:eb:3b:16:d7:d6:dd:
                    6d:85:50:73:53:17:8f:b6:07:17:70:91:95:e0:87:
                    ec:8c:31:3c:6c:43:65:ae:4d:45:8b:cc:0c:64:5c:
                    1e:dd:2d:c5:7b:12:a4:f7:a2:04:ae:0e:fe:41:51:
                    7e:5e:1f:0b:63:5b:cb:81:54:07:4d:ce:4b:c2:b6:
                    d1:a4:89:2f:32:4c:0f:da:49:5e:6c:c0:08:74:25:
                    15:78:89:61:ca:eb:84:02:f6:08:09:17:77:6e:ec:
                    29:aa:1c:8f:f5:bc:9a:41:53:6f:38:46:06:a5:07:
                    cf:5c:5e:7a:35:fb:14:6a:6e:92:6a:5a:42:a3:79:
                    3d:a3:0e:f0:6f:7e:68:37:8e:94:28:5a:cd:91:64:
                    12:da:59:9e:73:b5:ba:61:5c:3f:08:ec:5c:d6:3f:
                    d1:3f:89:b4:cb:1a:e2:0b:13:6a:ed:d5:4d:8e:4e:
                    b0:85:a7:fc:e2:cc:1d:cc:88:d8:6e:09:44:d0:6a:
                    18:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:C4:6E:E1:56:36:3E:03:72:A2:F9:A7:2A:F4:CD:25:3E:A7:0E:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/5fa02bc8-b788-3aec-9545-019b3a9de2ef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.93.150.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:18:6f:87:79:bb:51:73:24:3b:d9:19:d9:3b:f7:e8:e8:00:
         c7:7b:4d:90:f7:d6:90:c8:e4:36:87:60:e1:a7:bb:d4:f3:a1:
         a1:45:bd:e8:57:0c:21:0b:d1:48:d9:ea:68:f4:6a:04:86:c5:
         10:b1:a9:70:3c:ab:f1:e0:d3:11:8f:cd:29:3f:11:bb:e4:2b:
         b7:60:59:08:3b:11:18:2c:cf:2d:b9:7d:55:02:0b:2d:7b:70:
         fe:c0:15:d1:36:d2:99:2f:68:00:53:f7:96:57:ae:84:ca:ec:
         98:a5:ca:86:a9:c8:55:c9:bb:55:1f:1f:be:42:22:41:23:1c:
         0f:6f:00:c1:e7:ed:07:3f:98:fa:ce:c9:15:ea:72:70:03:7d:
         84:94:84:96:5a:8f:30:88:59:6c:47:11:0f:88:b5:d3:f8:05:
         1c:31:dd:83:b2:e4:00:9e:5c:4f:74:61:a2:86:6c:ee:b9:c9:
         d0:21:fd:2d:d6:87:18:5d:88:86:3e:bf:23:76:54:d3:45:6e:
         bb:83:ec:0b:c1:3f:11:f9:68:23:2c:48:d0:bf:f5:bb:20:35:
         60:d5:df:bb:6b:c5:39:81:52:4d:74:23:ca:7e:9e:b4:53:e4:
         f0:c0:1c:6e:6c:ca:e9:7d:c2:40:51:6b:11:1b:d1:36:b6:c1:
         a6:f0:ef:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:46:46 2026 by rpki-client