Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/d0209141-2b18-3a60-9878-09b1c27972bd.roa
File:                     d0209141-2b18-3a60-9878-09b1c27972bd.roa (raw, json)
Hash identifier:          oZoCYY1K9ivgRdQDotrEHbjauodlCUu6xQ/m7FolP3I=
Subject key identifier:   86:FE:2A:5B:E4:71:02:98:88:7A:5B:C3:93:50:34:F5:8C:5D:AC:61
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584F49732B17DE575DD4F8FB3780
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/d0209141-2b18-3a60-9878-09b1c27972bd.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     212238
IP address blocks:        66.93.164.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 Oct 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:2b:17:de:57:5d:d4:f8:fb:37:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=111d370f-008d-40d2-85ed-03773203073b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:f1:c2:f4:b0:64:0b:47:62:e9:bc:6a:1e:3f:
                    6d:da:1f:13:79:ac:8c:a3:ee:69:d8:36:e7:3d:2d:
                    2f:01:fd:9f:21:3d:52:79:0b:dc:7a:d4:67:d1:07:
                    bb:95:e9:42:52:fe:08:43:af:f9:c7:d5:a8:7e:17:
                    85:82:11:b9:ac:04:c7:ce:99:74:3d:4c:be:d7:1e:
                    b8:5b:e5:83:aa:5b:25:31:02:a7:83:c4:89:f7:fb:
                    ed:37:34:a2:ea:a5:c7:e8:1b:13:07:02:4d:77:57:
                    db:52:bf:9d:8b:d3:49:e1:a9:9d:0e:4b:8d:52:97:
                    ad:e1:c6:ce:4b:f0:45:1e:ae:6d:17:ca:e7:e3:75:
                    a9:b7:b4:58:29:4f:36:1b:3b:3f:d0:4c:17:19:20:
                    2b:53:6d:62:e7:65:25:fb:99:3e:83:b8:65:a6:f4:
                    bc:91:17:de:2a:4a:2f:53:5c:b3:dc:4f:c1:2c:ac:
                    9e:aa:57:04:32:c2:d5:8c:3a:89:01:c9:71:1d:03:
                    f1:08:19:7d:c4:f0:3e:0a:06:14:9f:fb:c6:00:00:
                    86:b0:d8:3a:02:63:ad:b1:e1:07:64:d7:7f:8c:a3:
                    da:7c:6d:f1:ca:54:a3:af:14:7f:ef:e7:07:0f:c7:
                    c4:57:5c:10:00:7d:85:7a:f0:39:9b:1c:64:4e:e5:
                    79:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:FE:2A:5B:E4:71:02:98:88:7A:5B:C3:93:50:34:F5:8C:5D:AC:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/d0209141-2b18-3a60-9878-09b1c27972bd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.93.164.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:65:fa:9a:c5:bf:de:0c:b5:92:4b:ce:5b:05:e1:7a:dd:6b:
         8b:57:b7:13:3e:09:22:8e:29:1b:2a:14:21:69:e4:84:26:b5:
         85:1c:de:b6:5d:50:69:b3:09:cf:d2:89:b9:b9:ae:07:92:46:
         95:9f:85:85:41:53:5e:01:f1:6f:6d:fa:ef:04:74:1f:81:79:
         67:7c:e1:3f:d8:34:e1:be:78:ce:c9:b9:d2:19:cd:48:c1:e6:
         33:f0:1d:3c:fd:86:7e:74:7c:24:01:59:bc:eb:bc:86:31:96:
         2a:c6:30:2a:60:c6:d3:fa:96:e1:7a:42:ba:f1:f7:93:73:c4:
         e2:f4:b5:8f:57:d0:7e:14:e9:46:9d:bb:e0:40:df:b2:9f:fa:
         65:75:75:6b:78:86:c1:ce:25:1c:9f:3d:9e:42:9b:3f:cb:4a:
         21:2f:09:f2:0a:7b:08:83:74:a8:80:28:e8:95:52:14:05:a4:
         fe:0e:f8:5b:26:b6:e3:9d:c1:aa:c1:22:84:6d:4b:15:84:d2:
         13:f6:b4:98:3e:3b:ca:55:5d:f7:c7:c5:4d:44:17:95:9b:92:
         fd:83:a5:03:a0:ca:5d:1d:e2:29:56:c2:3b:6a:8a:ef:5a:e4:
         d2:9b:43:b3:da:87:ce:49:df:4c:cf:3d:55:73:e5:6e:59:38:
         35:a9:cf:24
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JcysX3ldd1Pj7N4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh
YWU3MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
MTExZDM3MGYtMDA4ZC00MGQyLTg1ZWQtMDM3NzMyMDMwNzNiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlvHC9LBkC0di6bxqHj9t2h8TeayMo+5p2Dbn
PS0vAf2fIT1SeQvcetRn0Qe7lelCUv4IQ6/5x9WofheFghG5rATHzpl0PUy+1x64
W+WDqlslMQKng8SJ9/vtNzSi6qXH6BsTBwJNd1fbUr+di9NJ4amdDkuNUpet4cbO
S/BFHq5tF8rn43Wpt7RYKU82Gzs/0EwXGSArU21i52Ul+5k+g7hlpvS8kRfeKkov
U1yz3E/BLKyeqlcEMsLVjDqJAclxHQPxCBl9xPA+CgYUn/vGAACGsNg6AmOtseEH
ZNd/jKPafG3xylSjrxR/7+cHD8fEV1wQAH2FevA5mxxkTuV50QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIb+KlvkcQKYiHpbw5NQNPWMXaxhMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3
MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvZDAyMDkxNDEtMmIxOC0z
YTYwLTk4NzgtMDliMWMyNzk3MmJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0
YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj
YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw
OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQl2kMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJJl+prFv94MtZJLzlsF4Xrda4tXtxM+CSKOKRsqFCFp5IQmtYUc3rZd
UGmzCc/Sibm5rgeSRpWfhYVBU14B8W9t+u8EdB+BeWd84T/YNOG+eM7JudIZzUjB
5jPwHTz9hn50fCQBWbzrvIYxlirGMCpgxtP6luF6Qrrx95NzxOL0tY9X0H4U6Uad
u+BA37Kf+mV1dWt4hsHOJRyfPZ5Cmz/LSiEvCfIKewiDdKiAKOiVUhQFpP4O+Fsm
tuOdwarBIoRtSxWE0hP2tJg+O8pVXffHxU1EF5Wbkv2DpQOgyl0d4ilWwjtqiu9a
5NKbQ7Pah85J30zPPVVz5W5ZODWpzyQ=
-----END CERTIFICATE-----
Generated at Sat Oct 10 16:26:32 2026 by rpki-client