Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/76a8ba7b-59e3-33dd-851e-2cd24ac54f1f.roa
File:                     76a8ba7b-59e3-33dd-851e-2cd24ac54f1f.roa (raw, json)
Hash identifier:          dXojw+Lps4kwI54ZDGzsm+eeNdDYS9aVOWIni4qKmo4=
Subject key identifier:   E4:CB:9F:87:B7:A1:18:4F:0A:05:5C:73:F7:3F:6F:2F:EE:DE:3A:7F
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584F225D2175EE7932C9A2228480
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/76a8ba7b-59e3-33dd-851e-2cd24ac54f1f.roa
Signing time:             Fri 11 Sep 2026 01:00:12 +0000
ROA not before:           Fri 11 Sep 2026 01:00:12 +0000
ROA not after:            Thu 10 Dec 2026 02:00:12 +0000
asID:                     211192
IP address blocks:        66.92.138.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 07 Oct 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:22:5d:21:75:ee:79:32:c9:a2:22:84:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Sep 11 01:00:12 2026 GMT
            Not After : Dec 10 02:00:12 2026 GMT
        Subject: CN=29657f8f-e678-4d88-8113-afd44baff2e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:34:fa:14:d4:4c:af:43:80:52:aa:da:71:97:
                    93:a4:da:fa:55:cb:9b:c7:35:a8:1f:3a:db:1f:33:
                    92:df:b2:2a:d8:e1:c4:d9:8c:68:bb:00:92:70:ef:
                    5f:43:88:d5:d7:69:2a:a1:1c:9e:64:79:f2:87:c7:
                    30:64:f5:62:0d:2b:5b:38:ee:b1:26:5a:a3:8c:77:
                    e6:fd:f8:58:54:fb:82:27:23:4d:e2:76:b0:f8:1b:
                    fc:2a:ab:72:81:eb:2b:fe:e6:b3:2e:ea:93:9b:d7:
                    5f:91:8e:f1:18:a7:3b:50:2f:ae:a6:76:2c:cc:00:
                    dd:fe:8a:bd:27:22:8c:b1:ef:05:4e:fa:7b:da:d4:
                    18:9a:e2:9e:eb:a4:c4:af:b5:4a:e2:5c:36:42:50:
                    30:5c:97:ef:56:5f:4d:c4:ea:a4:64:6f:a2:23:eb:
                    27:f0:41:1d:42:d6:c1:fb:df:15:f9:74:cf:1e:a8:
                    fa:d7:6b:57:f2:e3:33:d7:27:16:13:b0:1c:d3:16:
                    2a:16:09:d8:4c:d0:56:1e:71:a9:ec:e8:ad:24:62:
                    21:73:b5:68:c5:9a:0f:a7:0c:2c:34:46:53:92:a6:
                    39:28:0a:5c:80:14:82:e9:74:e1:de:e6:65:9c:bc:
                    41:1e:c1:c7:5a:14:2e:15:dc:bc:39:3a:10:93:96:
                    ee:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:CB:9F:87:B7:A1:18:4F:0A:05:5C:73:F7:3F:6F:2F:EE:DE:3A:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/76a8ba7b-59e3-33dd-851e-2cd24ac54f1f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.92.138.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:b1:e3:61:e3:45:83:77:7f:ef:1e:09:d6:4a:84:9b:89:8a:
         7f:86:1b:a0:22:4c:07:21:01:a5:60:be:a4:fc:ed:b9:25:5f:
         74:5c:73:8c:c3:61:f1:37:97:66:fb:43:b0:df:bc:ce:d9:18:
         b0:7f:e0:10:53:99:76:10:f6:24:27:5c:43:44:f6:d7:43:67:
         bd:3a:67:56:28:36:f0:3f:36:dc:52:6f:17:b2:a0:e9:f4:63:
         79:6b:ec:44:fd:ec:41:72:35:19:be:7c:50:d2:a3:21:c3:94:
         a6:27:59:6f:5f:05:07:ca:c7:bf:c3:9b:09:87:02:98:f2:87:
         46:43:49:a8:a1:61:32:1e:fd:19:3e:cc:a3:b5:e1:95:d0:4e:
         31:c0:b1:2e:50:ff:e7:b8:bb:8f:40:c9:2e:e1:a4:d8:b9:97:
         6e:f1:f9:aa:75:60:43:ac:d0:7b:f6:1a:0c:51:df:61:ef:9c:
         bf:dc:f6:36:96:b7:a8:b9:74:0a:01:22:ba:77:6e:fe:90:dd:
         64:0c:1b:a5:da:14:d9:67:d3:62:fb:11:57:92:c7:78:52:c6:
         50:f3:01:5c:62:71:4b:ca:3a:76:0a:87:2c:68:de:31:3d:ec:
         78:18:dc:9e:ae:b2:3e:db:b7:1c:a4:7f:d0:93:fa:b1:77:13:
         85:7a:da:f6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8iXSF17nkyyaIihIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh
YWU3MB4XDTI2MDkxMTAxMDAxMloXDTI2MTIxMDAyMDAxMlowLzEtMCsGA1UEAxMk
Mjk2NTdmOGYtZTY3OC00ZDg4LTgxMTMtYWZkNDRiYWZmMmU5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsDT6FNRMr0OAUqracZeTpNr6VcubxzWoHzrb
HzOS37Iq2OHE2YxouwCScO9fQ4jV12kqoRyeZHnyh8cwZPViDStbOO6xJlqjjHfm
/fhYVPuCJyNN4naw+Bv8Kqtygesr/uazLuqTm9dfkY7xGKc7UC+upnYszADd/oq9
JyKMse8FTvp72tQYmuKe66TEr7VK4lw2QlAwXJfvVl9NxOqkZG+iI+sn8EEdQtbB
+98V+XTPHqj612tX8uMz1ycWE7Ac0xYqFgnYTNBWHnGp7OitJGIhc7VoxZoPpwws
NEZTkqY5KApcgBSC6XTh3uZlnLxBHsHHWhQuFdy8OToQk5buAwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOTLn4e3oRhPCgVcc/c/by/u3jp/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3
MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvNzZhOGJhN2ItNTllMy0z
M2RkLTg1MWUtMmNkMjRhYzU0ZjFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0
YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj
YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw
OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQlyKMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAD+x42HjRYN3f+8eCdZKhJuJin+GG6AiTAchAaVgvqT87bklX3Rcc4zD
YfE3l2b7Q7DfvM7ZGLB/4BBTmXYQ9iQnXENE9tdDZ706Z1YoNvA/NtxSbxeyoOn0
Y3lr7ET97EFyNRm+fFDSoyHDlKYnWW9fBQfKx7/DmwmHApjyh0ZDSaihYTIe/Rk+
zKO14ZXQTjHAsS5Q/+e4u49AyS7hpNi5l27x+ap1YEOs0Hv2GgxR32HvnL/c9jaW
t6i5dAoBIrp3bv6Q3WQMG6XaFNln02L7EVeSx3hSxlDzAVxicUvKOnYKhyxo3jE9
7HgY3J6usj7btxykf9CT+rF3E4V62vY=
-----END CERTIFICATE-----
Generated at Tue Oct 6 15:27:50 2026 by rpki-client