Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/b7aa7163-9f73-39c1-8e97-7195755d8a33.roa
File:                     b7aa7163-9f73-39c1-8e97-7195755d8a33.roa (raw, json)
Hash identifier:          8+29009/Hz+y6uq01VrrhDrVfnAD5ltN6+VbMHsuUVs=
Subject key identifier:   CB:02:2C:19:50:17:75:DF:8C:1A:35:C0:17:95:BA:BF:D9:09:F8:A6
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584E8B250DF409D296D1ED319B00
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/b7aa7163-9f73-39c1-8e97-7195755d8a33.roa
Signing time:             Sat 18 Jul 2026 21:00:11 +0000
ROA not before:           Sat 18 Jul 2026 21:00:11 +0000
ROA not after:            Fri 16 Oct 2026 21:00:11 +0000
asID:                     834
IP address blocks:        66.92.252.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:8b:25:0d:f4:09:d2:96:d1:ed:31:9b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Jul 18 21:00:11 2026 GMT
            Not After : Oct 16 21:00:11 2026 GMT
        Subject: CN=d328ecef-baa8-4bbd-ad04-4ee9dd00ae2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:a5:90:9c:5e:44:2e:0c:05:a9:44:36:f0:ba:
                    aa:d4:96:b1:71:a6:78:5b:ed:6f:a7:57:78:cb:b9:
                    03:04:be:45:38:cb:46:66:40:66:e9:55:54:67:8c:
                    b7:ed:b0:f3:4b:53:76:72:bd:82:24:b8:28:fd:d8:
                    70:ae:f2:f8:98:5c:95:c3:b6:3c:f7:7d:97:f3:b0:
                    45:48:3c:f1:4a:2f:8d:40:d4:7b:07:71:e2:49:e8:
                    7d:e1:a8:1c:95:8b:80:7b:32:1b:83:20:76:2b:29:
                    aa:b9:1e:8b:a5:41:df:2e:51:0a:d3:88:a2:18:42:
                    aa:1c:f3:f4:08:45:e4:5c:31:ff:df:92:3d:4e:8a:
                    87:4d:cc:23:46:a8:d2:ee:c0:5d:0d:82:19:50:61:
                    62:fc:0c:b5:ef:f9:11:63:c7:f4:ee:19:73:e3:1f:
                    b2:05:58:55:d2:8a:4b:de:8f:cb:90:62:69:5b:92:
                    05:49:74:02:48:fd:f0:f0:b8:c8:95:62:49:0b:9f:
                    1b:81:81:ff:b8:da:04:0d:cc:0b:3d:96:09:ff:0d:
                    cf:4b:28:98:fc:d5:8d:de:1c:e4:f6:af:32:48:52:
                    51:97:20:15:29:61:4d:5c:d6:5d:df:68:17:ca:2e:
                    59:f8:9c:c1:32:7e:df:2e:a5:76:e7:d6:3d:3d:95:
                    ad:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:02:2C:19:50:17:75:DF:8C:1A:35:C0:17:95:BA:BF:D9:09:F8:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/b7aa7163-9f73-39c1-8e97-7195755d8a33.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.92.252.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bf:e0:2f:a3:d9:b1:48:b1:97:49:dc:4a:3f:37:c5:06:ff:c5:
         84:ac:d5:ac:8d:9c:e1:ac:04:4e:e3:6a:84:99:ca:42:40:f4:
         5c:22:7e:3b:e9:7d:a0:e4:80:a1:e6:5f:6b:42:17:e5:7a:e3:
         4b:e5:6f:12:7b:57:d9:44:3a:ce:ac:85:ab:97:69:fa:14:6c:
         49:a6:fd:24:e8:9c:c3:05:55:30:0c:84:30:0d:9f:be:33:65:
         11:a6:2e:6a:98:ee:1d:f5:95:57:d3:85:68:c2:9f:39:b5:18:
         5f:b4:7b:19:c1:bb:2b:f9:48:97:69:7a:04:b9:4a:fa:09:d5:
         25:27:40:74:00:65:e3:b7:1c:36:ec:78:7f:d0:aa:35:1b:84:
         a1:76:e8:80:6f:10:e1:c5:62:f0:8a:6d:18:6d:3e:91:71:c4:
         aa:5b:d4:7a:d5:dc:b2:ae:97:c1:76:b4:b2:a4:9a:45:a5:11:
         06:d2:47:5a:09:99:cb:d1:ee:26:fa:64:23:0c:0e:25:ca:a5:
         48:a6:c0:63:43:d4:dc:8b:61:10:b6:18:d7:83:32:be:cc:fe:
         bb:92:97:36:7d:04:a9:63:e0:cd:f3:f9:e5:41:aa:7a:87:1c:
         3b:3b:3f:44:42:1b:e4:be:8c:e3:dd:0a:da:13:d2:f3:d9:bb:
         b9:21:71:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:59:06 2026 by rpki-client