Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/954a9856-a4f6-3260-a499-1c28cf7acd72.roa
File:                     954a9856-a4f6-3260-a499-1c28cf7acd72.roa (raw, json)
Hash identifier:          sZCTLqsaMMN2RDmXJOLZ9jvmsABn+mOKAt9TepqtStM=
Subject key identifier:   84:8D:00:90:95:72:ED:0A:76:D8:C1:5E:2E:91:BC:77:6F:59:BE:FB
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584DAD90F5045211698974421680
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/954a9856-a4f6-3260-a499-1c28cf7acd72.roa
Signing time:             Thu 30 Apr 2026 12:08:29 +0000
ROA not before:           Thu 30 Apr 2026 12:08:29 +0000
ROA not after:            Wed 29 Jul 2026 12:08:29 +0000
asID:                     399955
IP address blocks:        66.92.240.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ad:90:f5:04:52:11:69:89:74:42:16:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Apr 30 12:08:29 2026 GMT
            Not After : Jul 29 12:08:29 2026 GMT
        Subject: CN=91eaa87c-c823-4bbf-8033-c9429bdff879
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:98:32:e3:cd:44:a2:5f:0c:94:94:b2:2f:f8:
                    34:c8:e3:b0:52:c7:9d:5a:b1:1e:91:aa:ee:7d:d2:
                    39:0f:17:fe:4d:46:f2:cb:cb:c6:55:0e:f4:a0:10:
                    19:dd:f0:38:d1:f1:e7:1f:94:51:f2:00:64:88:f3:
                    10:4f:a0:ad:23:70:34:2f:92:dd:29:2f:5a:84:d5:
                    54:2c:57:02:82:44:c0:25:4c:31:8e:34:36:a4:9b:
                    e7:4a:f0:a8:c0:5d:cf:14:b2:b8:f9:37:c3:41:5e:
                    bd:5c:f9:17:ba:8f:f0:09:37:a5:2d:23:33:d7:1a:
                    24:86:55:3a:e7:d8:d5:3d:c8:7f:59:fd:48:48:61:
                    f8:b8:0b:ac:85:e9:00:23:77:8e:60:dc:13:df:0b:
                    0f:0a:a5:d4:67:6c:0a:54:4f:0d:76:61:dd:b8:53:
                    59:27:44:b5:79:c4:d3:75:d7:53:d7:d0:17:7e:1f:
                    23:75:f0:4e:e6:25:06:7f:15:6a:3d:62:a6:be:f5:
                    89:53:d6:84:0d:bf:eb:d6:2b:94:69:15:c6:7e:93:
                    ab:b3:7a:74:b4:7a:18:44:ea:08:28:a0:e9:4d:23:
                    29:06:2f:59:2b:d7:8b:50:5e:4d:b1:e6:7e:04:17:
                    44:92:ca:8b:55:6b:61:ff:e9:ac:73:4e:7d:a6:32:
                    28:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:8D:00:90:95:72:ED:0A:76:D8:C1:5E:2E:91:BC:77:6F:59:BE:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/954a9856-a4f6-3260-a499-1c28cf7acd72.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.92.240.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:dd:e8:7d:8b:76:bf:ee:4b:a5:cf:34:cb:62:2f:bf:9a:56:
         de:fe:70:d6:8b:c9:6f:56:5d:04:4f:83:86:ed:aa:e7:6d:37:
         09:f7:50:30:18:3e:cf:fa:20:a5:ec:be:c7:54:69:07:ab:ac:
         74:20:58:f3:36:16:d7:5c:0d:dc:af:5d:4f:6d:f8:56:68:8e:
         4a:cf:7f:9a:fa:04:61:2f:93:6b:a1:fc:12:e8:1f:43:1c:cd:
         b6:b4:75:ee:90:9e:a4:4c:9c:8c:9a:2d:3f:a6:0c:04:4e:e7:
         b2:7d:f8:a6:bc:e0:1f:5d:5f:22:47:c9:e5:cf:0b:98:cd:16:
         84:83:a7:e1:99:c7:59:d1:75:33:bb:df:df:ad:d9:4e:91:ae:
         ea:72:38:14:e9:8b:8d:c7:2a:50:25:20:5b:3d:21:a1:f5:9e:
         b0:01:58:0f:9d:18:a3:b0:a6:3a:f9:11:63:39:8b:d1:19:04:
         5b:fd:fb:e3:ba:43:14:c8:08:29:d3:19:99:96:27:6d:c3:ae:
         4f:91:09:e5:36:29:d7:d0:f8:82:d1:20:5d:19:06:2e:36:99:
         97:3f:69:d8:3d:75:f3:33:17:a6:cd:9c:55:b1:35:98:4f:67:
         b3:3d:bf:66:d1:a6:b3:ad:70:ff:67:d1:2a:52:ab:61:32:1c:
         d5:ea:fd:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:10:26 2026 by rpki-client