Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/7229e0e4-9c85-35b4-a242-b41c43af57fd.roa
File:                     7229e0e4-9c85-35b4-a242-b41c43af57fd.roa (raw, json)
Hash identifier:          fapy5agRuOxqNeaQRX+otn12UrX1wnUb1Bbk6jbCQlg=
Subject key identifier:   5B:47:81:AD:F6:32:59:D8:73:BE:C2:31:1B:B5:56:22:38:F7:6C:6D
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584F093D167D5B2071CD6ABBD3D0
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/7229e0e4-9c85-35b4-a242-b41c43af57fd.roa
Signing time:             Wed 02 Sep 2026 01:00:12 +0000
ROA not before:           Wed 02 Sep 2026 01:00:12 +0000
ROA not after:            Tue 01 Dec 2026 02:00:12 +0000
asID:                     7029
IP address blocks:        66.92.240.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 Oct 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:09:3d:16:7d:5b:20:71:cd:6a:bb:d3:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Sep  2 01:00:12 2026 GMT
            Not After : Dec  1 02:00:12 2026 GMT
        Subject: CN=e665215e-2b79-43a8-9c86-bfcd6bfde572
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:a9:92:06:53:ac:a0:cf:dc:ac:af:b7:c5:0c:
                    07:c2:dd:d9:43:13:71:ad:e1:e0:8f:cc:5d:63:37:
                    ba:c5:35:25:93:bb:14:4f:f9:7b:92:46:fa:f3:a2:
                    7d:d9:ca:ac:bf:dd:37:42:98:b8:20:b0:f9:8b:12:
                    6d:f2:d3:8c:46:e5:33:5b:12:4c:3a:5a:f4:9f:a2:
                    d8:dc:c7:36:14:9c:9f:a8:ac:8f:58:f4:4b:d6:29:
                    6c:d9:7c:89:82:52:70:8e:ae:bc:02:44:d4:5b:e0:
                    44:8d:e8:6f:01:e4:76:7f:aa:d7:13:cd:84:f1:e0:
                    a3:f2:32:47:1d:09:55:00:e7:09:27:70:6b:d4:c6:
                    b7:ee:47:d1:dc:25:e1:8b:a8:16:c4:3c:1b:68:49:
                    e7:cb:01:64:62:92:d7:49:d4:c8:46:c6:f1:22:6a:
                    fe:9c:d9:49:5e:06:44:1a:ff:50:04:d4:a5:d7:e5:
                    29:f9:af:f1:69:59:dd:c8:68:ac:d6:a6:13:bc:6a:
                    91:28:66:86:8a:74:ec:e9:67:e7:f0:db:63:3e:43:
                    b1:44:b4:c2:08:f1:fd:54:1b:f8:16:de:6a:d4:f4:
                    e8:93:b5:e8:dc:8e:c0:18:18:28:87:91:d4:f4:35:
                    b4:e4:c4:a5:f3:c3:7c:39:dd:fd:7c:49:cf:79:b7:
                    4f:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:47:81:AD:F6:32:59:D8:73:BE:C2:31:1B:B5:56:22:38:F7:6C:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/7229e0e4-9c85-35b4-a242-b41c43af57fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.92.240.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:06:2c:b9:e7:c7:51:29:5c:cc:ce:c3:b6:65:86:c9:23:6f:
         f2:0d:a3:4d:e6:74:ae:11:b8:27:25:2b:96:25:3d:b3:d1:d7:
         dc:39:10:2e:80:f2:e1:19:ce:12:0a:be:1c:f9:7d:a9:7f:75:
         30:31:45:21:50:a2:ae:75:39:35:e8:43:2c:8c:01:23:9b:9d:
         41:20:36:c9:cb:01:19:c1:96:6d:f2:15:63:df:e9:71:b4:f5:
         9f:6f:9a:09:bd:3d:2e:0a:40:3e:eb:22:7b:65:b8:05:0c:a5:
         29:88:07:fd:eb:c4:b3:26:ab:2e:63:c6:ef:4e:4b:64:9a:2f:
         44:ab:c1:f3:98:a2:46:e7:b8:ea:a6:53:63:90:7b:a5:c3:f3:
         d4:2a:ff:cf:ed:9e:9b:bc:40:f6:45:f5:5b:1a:6f:c4:73:c2:
         f5:b5:2f:44:92:ea:d4:22:cd:d0:6d:31:ba:51:bc:32:1f:82:
         8d:94:06:8c:23:56:61:86:ff:a7:08:a4:44:d2:4a:a8:9f:26:
         b7:96:d8:b6:6d:5c:d9:57:85:6a:de:ca:fe:65:4a:31:53:0e:
         fe:3e:e8:59:0b:bc:80:b3:be:fa:eb:e7:63:7b:b6:0b:fb:56:
         31:cb:21:91:23:1b:54:ab:d6:81:67:da:aa:37:72:5e:31:7a:
         1a:3a:b8:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 20:48:59 2026 by rpki-client