Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/b4529e93-42b9-3497-8ecc-85a1edb69913.roa
File:                     b4529e93-42b9-3497-8ecc-85a1edb69913.roa (raw, json)
Hash identifier:          RzPsIsMEiEj2f+w9BkFpVsBcOGPT/MunXw9BfYu6FMY=
Subject key identifier:   EC:A3:44:3A:F7:04:FE:F1:3F:25:B5:3E:9E:2D:98:72:E7:61:3E:75
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584B6A6202A2043003AA2D48B12E
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/b4529e93-42b9-3497-8ecc-85a1edb69913.roa
Signing time:             Sun 05 Oct 2025 01:00:32 +0000
ROA not before:           Sun 05 Oct 2025 01:00:32 +0000
ROA not after:            Sat 03 Jan 2026 02:00:32 +0000
asID:                     149513
IP address blocks:        66.92.207.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:6a:62:02:a2:04:30:03:aa:2d:48:b1:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Oct  5 01:00:32 2025 GMT
            Not After : Jan  3 02:00:32 2026 GMT
        Subject: CN=b4e15f37-74a9-4a73-9fde-e471365e3338
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:7a:4e:b3:a2:c8:b0:db:44:e3:fb:c6:ff:96:
                    f0:1e:09:be:30:e8:78:fc:51:6b:4c:45:04:4f:46:
                    5e:ce:6a:e1:37:0d:bb:9a:d3:65:b3:29:38:46:9b:
                    f4:da:66:ab:0e:29:31:55:ab:4b:df:ba:03:e7:6c:
                    79:d1:6c:c4:36:87:71:bb:5a:2b:d8:36:1b:a5:1d:
                    97:9b:13:d8:90:54:4e:4f:56:4a:1a:8b:f6:8b:c8:
                    80:12:85:a0:a3:9a:f8:22:0d:08:a8:e1:d4:db:c1:
                    67:7f:9e:10:ad:8c:1f:f0:de:03:c6:d6:b5:8c:b0:
                    0c:dc:2d:e1:4b:a8:d1:b0:9a:14:66:26:97:1b:10:
                    89:cf:f3:44:cc:69:39:2b:64:c7:10:b8:87:e6:5c:
                    66:cc:21:34:05:b6:ee:d0:c5:8f:9a:4e:5b:9f:59:
                    03:9a:49:0d:f7:c3:cc:41:9c:01:d1:2b:3a:d1:70:
                    0e:90:37:26:12:53:f4:ec:ab:81:78:af:e2:38:13:
                    ad:77:3d:7f:30:a4:e0:59:32:bd:c5:e9:fc:69:92:
                    08:cb:f7:1c:3b:54:a5:5e:41:eb:64:6f:79:e0:25:
                    ef:fb:5d:b0:23:78:c5:81:55:22:be:b2:3a:29:85:
                    6d:51:c2:9b:7e:29:37:01:3b:4d:df:09:0d:71:08:
                    17:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:A3:44:3A:F7:04:FE:F1:3F:25:B5:3E:9E:2D:98:72:E7:61:3E:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/b4529e93-42b9-3497-8ecc-85a1edb69913.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.92.207.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:98:1c:c1:35:39:3b:ce:e4:3c:32:b7:d2:72:31:1f:68:87:
         0e:72:44:b0:97:88:7d:bb:4a:b2:8d:70:da:8e:43:47:8c:2e:
         8b:da:1e:8e:52:a1:f6:8e:57:f6:c3:2e:fb:aa:c8:07:bd:26:
         0e:fa:66:1a:cc:bc:61:0c:24:ba:5d:a6:df:06:47:23:2a:10:
         41:ff:cb:69:5f:f6:f4:2a:2f:cf:51:57:df:88:ed:83:75:53:
         3f:4f:50:f8:f9:e7:04:a7:19:72:b8:0e:26:46:f8:54:0e:a1:
         68:e1:8a:2f:36:1e:b0:48:48:98:d7:63:d0:f7:8e:17:6b:ac:
         bc:8e:aa:65:71:c4:95:fd:e4:a5:b0:6a:96:31:01:80:d3:db:
         8e:fa:b8:79:4d:52:3f:02:89:dc:72:5c:70:5a:5d:45:65:42:
         cf:0c:02:7c:4d:8d:6f:bd:0f:34:c6:e0:a6:fe:1d:7e:05:c0:
         5c:16:7d:72:27:50:bb:0a:52:36:38:5a:e9:8f:ca:cd:cc:38:
         27:ae:12:a4:43:5f:80:99:d5:72:79:58:af:fa:56:b9:ba:ad:
         14:ed:4b:1f:f0:ba:89:41:e1:e5:52:24:32:e2:e8:b9:cc:2e:
         ee:c9:52:f1:8c:9a:1e:a7:92:6a:b0:dd:d2:6b:05:83:b9:14:
         b4:f7:2e:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:48:56 2025 by rpki-client