Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/76f81270-839d-3c95-9d6a-8c61650a1bca.roa
File:                     76f81270-839d-3c95-9d6a-8c61650a1bca.roa (raw, json)
Hash identifier:          41vv40381rD0nq31WVMmrGqR0UofIxDL9u9VC6CNR74=
Subject key identifier:   F6:B4:81:1E:37:EC:94:F8:B7:78:7A:1A:6B:10:13:24:3E:75:7C:11
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584D9CCAECEF18BD9D362165F280
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/76f81270-839d-3c95-9d6a-8c61650a1bca.roa
Signing time:             Fri 24 Apr 2026 11:56:33 +0000
ROA not before:           Fri 24 Apr 2026 11:56:33 +0000
ROA not after:            Thu 23 Jul 2026 11:56:33 +0000
asID:                     6079
IP address blocks:        66.92.88.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:9c:ca:ec:ef:18:bd:9d:36:21:65:f2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Apr 24 11:56:33 2026 GMT
            Not After : Jul 23 11:56:33 2026 GMT
        Subject: CN=c36a9ee3-af42-4f9c-a165-cabfd5bb1e17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:b5:e6:5c:6b:2c:3e:1d:dd:2d:09:6c:eb:5f:
                    40:a8:06:0d:35:47:d5:5d:1c:06:c2:c0:22:66:7f:
                    00:0d:a9:d9:97:59:3a:85:23:97:57:98:bb:45:de:
                    cc:eb:a0:d1:c6:5e:b8:bc:16:fd:17:c7:2b:05:14:
                    15:33:ef:cc:74:69:39:39:5d:dc:15:e7:ea:9b:cf:
                    66:b4:0c:fe:f7:72:f9:8d:26:3d:b5:56:f9:36:d8:
                    f9:b9:47:b7:34:ae:b5:32:37:44:6a:7a:0c:0e:4d:
                    8c:b7:6a:85:8e:99:0b:ba:4a:e3:bc:50:b5:bc:e3:
                    28:43:4f:49:f7:5e:d4:75:cc:56:12:6f:06:d3:aa:
                    0f:77:aa:f9:96:54:e1:6b:08:e7:a8:65:00:83:c0:
                    72:40:71:aa:f4:f5:c9:2e:c4:fc:30:8d:99:38:db:
                    de:b5:28:89:d8:ca:90:91:89:cb:b4:68:96:92:11:
                    b8:0e:5f:ad:19:e9:85:ec:3f:f2:17:3f:56:79:2e:
                    24:14:c5:ba:59:82:21:bf:45:01:7b:99:0b:20:9d:
                    f5:d6:47:98:bb:46:2f:1d:a0:48:47:30:7f:98:5e:
                    b7:ab:dd:ba:dd:c1:0a:7e:78:09:0c:17:47:23:9f:
                    cc:e8:0f:5d:1b:b7:aa:9b:f4:2f:c0:ee:2b:62:6e:
                    4c:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:B4:81:1E:37:EC:94:F8:B7:78:7A:1A:6B:10:13:24:3E:75:7C:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/76f81270-839d-3c95-9d6a-8c61650a1bca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.92.88.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:67:36:07:32:09:f6:7a:55:81:04:df:9b:41:ed:1f:78:6e:
         0c:7d:d7:31:12:e0:78:50:2b:d4:d0:76:4a:c7:89:d4:16:55:
         43:ca:2a:0e:36:ae:5c:61:c6:af:b1:be:ad:9b:95:95:4f:c9:
         c7:69:a7:fc:af:55:62:1f:ab:81:13:33:89:82:bf:a6:2d:e9:
         e2:a6:0a:57:18:15:28:41:6c:d2:c9:75:d2:16:18:be:88:06:
         fc:e1:b1:d1:1b:57:38:b6:52:fb:86:c7:74:d2:6f:c5:82:08:
         f8:3e:28:41:9a:46:8f:34:fa:39:5a:e1:64:4f:c2:5e:f9:56:
         b5:99:a7:6c:21:5f:3b:c3:ce:a7:bb:53:b7:af:b6:1e:ca:3b:
         71:60:04:05:59:87:51:61:e5:c9:83:43:ea:dd:11:a3:f2:e0:
         bf:3c:b0:49:19:49:07:3a:b5:7d:d7:44:e2:ac:d5:c9:6c:03:
         e7:71:d7:52:11:d1:dc:51:85:d3:ea:e1:b9:eb:57:52:59:e3:
         55:4e:cc:fa:81:bf:ce:00:3a:ff:ba:ca:6a:92:b6:87:f5:6b:
         16:1b:0c:e3:b4:99:b9:7e:5d:0d:d3:0b:7b:76:94:03:07:a8:
         9c:f1:37:c6:fc:da:ea:16:32:e8:19:a0:e3:d8:c9:d8:7e:f0:
         b6:6a:3b:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:03:17 2026 by rpki-client