Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/b41b31f7-ad6b-3465-8392-3b7e13791bba.roa
File:                     b41b31f7-ad6b-3465-8392-3b7e13791bba.roa (raw, json)
Hash identifier:          POoxIjGc5+HOOTSgerwam8/lwN9OQgvHPNB59npGEiw=
Subject key identifier:   17:F0:6B:BF:82:60:84:67:72:BE:34:2E:9F:55:A5:FE:20:90:33:A4
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584AEE8F0E4A16577BC6CA1EC180
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/b41b31f7-ad6b-3465-8392-3b7e13791bba.roa
Signing time:             Thu 21 Aug 2025 16:31:23 +0000
ROA not before:           Thu 21 Aug 2025 16:31:23 +0000
ROA not after:            Wed 19 Nov 2025 17:31:23 +0000
asID:                     5650
IP address blocks:        66.92.108.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ee:8f:0e:4a:16:57:7b:c6:ca:1e:c1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Aug 21 16:31:23 2025 GMT
            Not After : Nov 19 17:31:23 2025 GMT
        Subject: CN=d7188ccb-1452-4282-82b5-4434869fff65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:a9:ba:db:3a:b8:df:94:4a:b1:3f:fd:3a:a4:
                    eb:97:47:98:d1:48:3a:8d:12:ad:6e:25:3e:b5:37:
                    1f:57:00:bb:8c:ed:03:5c:7f:9b:64:bb:5b:1f:00:
                    60:e4:56:1b:10:f9:66:68:19:ab:cf:9b:ef:86:79:
                    b0:61:50:fa:b9:98:5d:ba:8a:b2:55:e2:c0:c4:72:
                    7b:0c:46:9c:98:e8:1f:1b:e3:29:9d:b7:e3:bf:a4:
                    22:37:1c:72:bc:a6:81:de:80:c1:63:a4:ce:ad:77:
                    e8:99:2b:86:a5:37:5e:e9:aa:49:be:4b:77:b5:b9:
                    89:11:40:d6:e0:3d:77:8e:73:4f:7a:0b:e6:b5:e3:
                    52:7a:5a:db:99:fc:29:22:e8:b8:33:db:08:65:fc:
                    85:12:8e:99:a1:66:b7:9c:80:48:fc:1c:d2:f9:e4:
                    20:63:e0:1b:42:9b:1a:be:f4:4f:29:64:16:36:95:
                    47:7a:f6:eb:fe:d7:e8:ec:93:70:4f:02:3a:96:a6:
                    d2:a1:47:c9:3f:cf:0f:0f:04:63:85:38:ac:22:6d:
                    60:3e:50:e4:1d:5b:8a:c3:67:14:de:1d:2f:5f:4f:
                    8c:47:88:f9:b7:e5:bb:95:d0:d7:31:4a:d8:51:54:
                    e9:6d:c0:eb:a1:91:bf:01:a5:91:32:6a:72:8d:29:
                    8d:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:F0:6B:BF:82:60:84:67:72:BE:34:2E:9F:55:A5:FE:20:90:33:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/b41b31f7-ad6b-3465-8392-3b7e13791bba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.92.108.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:cc:9c:17:3a:0d:4d:e0:c5:3d:32:b9:35:2d:2b:84:3a:ee:
         ce:d3:e0:5b:b5:bb:ee:f3:34:85:f6:3e:ef:18:82:03:c2:a8:
         2b:19:8c:8e:88:98:ca:5f:11:7c:f6:1e:bf:56:93:4f:9c:87:
         13:d7:3b:06:06:31:87:0a:0b:7c:76:54:aa:d9:2c:8f:23:d9:
         81:c9:10:0b:fe:43:d2:e9:54:b7:63:bb:d4:5b:46:15:b5:f8:
         1d:11:70:6c:35:db:3e:73:15:b4:1a:bb:be:37:d8:c6:d7:d4:
         ec:8b:8e:2b:02:fa:a4:db:71:34:61:b7:6f:7a:ff:da:94:f2:
         73:93:11:ca:2a:8d:39:a2:91:96:ac:9d:ff:40:ce:74:c1:2e:
         4f:82:36:f0:23:a1:a0:3d:9b:75:d5:2a:6d:d8:c6:a9:7b:d4:
         d8:77:b1:cb:84:db:1e:3d:1f:5f:fc:18:19:f2:80:c7:68:f8:
         08:aa:d7:57:23:b5:31:9f:fe:2a:0b:3e:c2:0c:61:d7:49:63:
         10:26:4b:98:c3:21:60:e7:1e:a0:4a:18:2c:ea:6d:c0:16:92:
         55:23:52:db:2b:aa:93:e1:4e:74:f8:7b:4b:6c:b2:f1:bc:dd:
         28:9d:c9:f0:df:0f:f3:2e:18:2a:4a:5c:63:78:3e:c4:e4:6f:
         90:e3:91:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:19:58 2025 by rpki-client