Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/cfbd4dd5-2ee6-3403-b0ed-77f4dec740e8.roa
File:                     cfbd4dd5-2ee6-3403-b0ed-77f4dec740e8.roa (raw, json)
Hash identifier:          PkC2YFddDach+3MKh6hGozR9F6WJctRPJx151MmqPos=
Subject key identifier:   FB:56:05:46:75:1C:C1:63:C1:A7:15:98:46:A2:01:3C:22:DD:B5:46
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584AE903C5BC8637941D705CD000
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/cfbd4dd5-2ee6-3403-b0ed-77f4dec740e8.roa
Signing time:             Tue 19 Aug 2025 16:51:43 +0000
ROA not before:           Tue 19 Aug 2025 16:51:43 +0000
ROA not after:            Mon 17 Nov 2025 17:51:43 +0000
asID:                     7018
IP address blocks:        66.92.100.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e9:03:c5:bc:86:37:94:1d:70:5c:d0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Aug 19 16:51:43 2025 GMT
            Not After : Nov 17 17:51:43 2025 GMT
        Subject: CN=2999780c-0b3e-412b-9e74-e1fc356f0348
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:d6:eb:b1:61:5e:cb:09:f4:c5:b2:78:b1:e4:
                    77:1b:bd:5e:dc:01:37:c5:38:45:0d:a9:27:f1:23:
                    ac:e4:35:a6:16:f9:7e:51:9b:92:42:fb:8a:a9:57:
                    04:1c:52:a0:74:16:da:bc:e7:92:9d:93:84:33:77:
                    9c:a1:1e:17:d5:21:8d:37:94:c7:e8:39:19:3a:c4:
                    ee:f2:f5:e2:13:ed:80:4f:1e:31:3a:57:d8:f3:e2:
                    d4:65:5c:4b:47:83:32:e9:e9:10:b4:bf:be:f4:bf:
                    81:99:43:d2:0d:c3:31:16:98:8c:7d:eb:d1:a6:77:
                    7b:1c:df:f5:30:81:8a:6b:57:09:8d:40:14:c6:21:
                    62:ef:2d:8c:07:6d:a8:3c:de:87:07:c6:85:69:92:
                    41:c5:62:24:f0:7c:49:21:f9:10:df:2a:fa:cd:63:
                    e1:ba:57:74:df:47:13:f9:72:f5:ab:bc:b7:1b:aa:
                    f6:34:0a:a6:d9:3c:a4:14:87:fe:e5:b8:88:2b:b3:
                    0c:28:05:4f:19:3a:67:7a:e4:4e:dd:da:aa:3e:65:
                    d3:47:f1:69:7b:5f:6f:29:f6:4e:24:23:07:7c:69:
                    f0:0f:36:a4:0c:4e:27:b8:41:aa:3b:7f:a6:df:e9:
                    bd:6d:c3:eb:db:86:c5:59:63:90:f4:06:65:4a:d2:
                    c1:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:56:05:46:75:1C:C1:63:C1:A7:15:98:46:A2:01:3C:22:DD:B5:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/cfbd4dd5-2ee6-3403-b0ed-77f4dec740e8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.92.100.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:4a:4d:b5:51:80:a2:ca:40:4f:17:a1:ac:b9:0a:3d:cc:79:
         23:13:f3:38:98:ac:a5:af:3c:3c:7b:0b:ef:49:17:be:16:1b:
         20:cb:1f:12:01:19:da:52:20:8c:85:27:b1:46:97:2d:9a:79:
         bc:fe:e1:2e:66:1a:c2:a2:aa:69:5b:41:22:ba:6e:a6:cc:9a:
         96:63:67:46:51:92:49:05:5d:9d:b8:44:48:1f:11:86:26:2c:
         91:1e:94:9b:cd:10:64:c9:a9:c7:8e:8a:e1:4e:89:08:50:1c:
         e3:9b:9a:e5:8b:2d:1c:f9:af:10:52:d2:f3:1e:ca:a4:4d:f9:
         9a:46:9e:ee:34:37:1c:df:1b:0c:2e:7c:46:4a:d9:2e:e2:9d:
         aa:1e:d9:4b:f2:78:57:ce:2c:4a:5e:57:8d:fc:6f:f1:a8:aa:
         bf:65:a2:5a:3a:6c:90:77:8f:95:ec:4e:9d:ef:0e:5f:79:8c:
         5d:88:42:09:dc:eb:03:d3:7b:62:3e:59:96:2a:1e:3a:56:a9:
         b8:b5:3d:f6:68:98:a9:7b:b7:9a:fe:fb:70:a4:1b:a2:bb:dd:
         2a:02:c0:be:6b:7e:1f:be:17:57:1b:70:b5:f1:29:48:0e:85:
         9b:b7:e9:30:6c:b2:50:7f:27:f3:21:f2:48:79:e3:d3:63:75:
         8d:dd:b5:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:11:49 2025 by rpki-client