Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/a3611429-69b7-3017-b81b-10a880cb8785.roa
File:                     a3611429-69b7-3017-b81b-10a880cb8785.roa (raw, json)
Hash identifier:          ww+nhR6RhgpM6ph+LZiEOEDpgvoM2d18qOvJwsJaOwU=
Subject key identifier:   73:22:68:3D:2A:86:CB:46:00:04:36:5C:2D:BF:01:AC:0A:66:02:95
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584AE67B1113C3D716EAF0B95C80
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/a3611429-69b7-3017-b81b-10a880cb8785.roa
Signing time:             Mon 18 Aug 2025 19:04:39 +0000
ROA not before:           Mon 18 Aug 2025 19:04:39 +0000
ROA not after:            Sun 16 Nov 2025 20:04:39 +0000
asID:                     20115
IP address blocks:        66.92.120.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e6:7b:11:13:c3:d7:16:ea:f0:b9:5c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Aug 18 19:04:39 2025 GMT
            Not After : Nov 16 20:04:39 2025 GMT
        Subject: CN=13ed19b2-51d2-4582-8265-7b673a1582ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:1b:c5:b2:0b:25:a9:44:2f:3d:1b:c1:c1:10:
                    16:b4:25:07:9f:05:a7:cf:03:78:95:48:10:33:61:
                    93:a4:7e:49:ac:1e:93:2a:4b:b5:69:6e:0f:04:b0:
                    a0:2e:c0:19:73:ff:8b:9d:18:38:b5:20:e4:65:85:
                    f9:c2:15:e9:24:e0:0a:4b:5f:0a:01:13:77:6c:b2:
                    e3:1c:1f:70:7f:a3:e3:b2:80:88:dc:bf:91:7d:9b:
                    bf:87:88:3f:e3:88:98:f8:56:61:af:dd:fa:6c:9e:
                    7c:38:e4:04:50:1a:56:c9:6a:bc:c8:c5:07:cd:35:
                    63:63:d6:54:a5:98:e4:c6:31:39:fc:94:91:e2:86:
                    65:35:87:55:57:06:63:af:b9:45:3a:ae:a3:13:70:
                    39:10:99:c2:34:10:d7:31:a2:7a:3c:df:ea:5d:79:
                    7e:be:82:1e:1c:8d:94:74:74:76:a6:c2:31:8c:a7:
                    29:3f:cb:3e:fd:6f:ef:b1:27:ab:ec:db:10:40:fe:
                    5c:33:f6:15:fd:b2:cb:33:00:04:59:ed:33:9c:2b:
                    ff:3e:49:f0:63:a5:5e:ed:82:68:71:69:12:13:d2:
                    9e:d8:a7:fb:3d:d8:15:e6:8f:31:a2:bb:65:27:08:
                    23:20:71:6d:a9:6b:f9:2c:b1:ea:c6:7d:7a:3f:03:
                    c0:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:22:68:3D:2A:86:CB:46:00:04:36:5C:2D:BF:01:AC:0A:66:02:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/a3611429-69b7-3017-b81b-10a880cb8785.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.92.120.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:79:05:45:43:52:d5:44:3e:6f:bd:16:86:a3:41:50:c1:84:
         92:6c:d2:37:95:87:56:4d:83:7d:d7:ff:75:a3:be:e5:90:02:
         a4:0d:77:42:a5:53:d8:8a:a4:2c:e4:09:c7:26:3e:13:94:8f:
         20:9c:7d:46:da:ef:c9:0c:17:fb:1a:db:f6:30:d4:34:1a:fd:
         00:0d:1a:ea:74:4c:d6:70:cf:28:f0:3a:2d:af:e5:70:c3:46:
         82:12:e4:e0:2e:9b:be:ae:88:ed:96:2b:36:1e:e8:f2:56:2d:
         b6:f6:3a:72:3a:b3:c9:ac:f7:52:83:78:02:04:de:56:31:98:
         8a:bd:6d:9c:48:ab:22:be:da:19:d4:9a:28:63:e2:dc:20:4c:
         b4:b4:be:2e:4b:65:51:90:c8:32:17:cc:95:b1:62:43:0e:d7:
         87:f5:fb:ae:01:33:24:6e:32:90:67:07:3d:1c:8b:2e:55:43:
         3b:36:29:26:ee:40:d5:ac:86:f3:99:8a:03:7c:83:c8:d9:b2:
         50:88:dd:dd:c3:07:ab:da:f9:80:65:1d:40:a8:5f:5c:b4:55:
         6e:23:06:14:9f:6d:0e:d5:6e:c4:88:5b:8b:08:ea:ff:df:43:
         13:65:b2:00:fa:16:f1:69:87:2d:45:50:59:e0:6c:76:06:a1:
         f2:95:d1:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:33:24 2025 by rpki-client