Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/efb226c2-2d28-3b9c-bfce-f7d0d354f99a.roa
File:                     efb226c2-2d28-3b9c-bfce-f7d0d354f99a.roa (raw, json)
Hash identifier:          UxVaW3pqnRE/j+JzRLw0ErmVoyYDLQG5DnYG0DmYjMM=
Subject key identifier:   A8:BE:3D:DF:DA:E7:DA:E8:7A:8F:A7:9F:CD:3E:CB:FA:44:F5:93:51
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584B87B21662B8933236C1192380
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/efb226c2-2d28-3b9c-bfce-f7d0d354f99a.roa
Signing time:             Wed 15 Oct 2025 13:00:38 +0000
ROA not before:           Wed 15 Oct 2025 13:00:38 +0000
ROA not after:            Tue 13 Jan 2026 14:00:38 +0000
asID:                     199527
IP address blocks:        66.227.64.0/22 maxlen: 24
                          66.227.72.0/22 maxlen: 24
                          66.227.77.0/24 maxlen: 24
                          66.227.78.0/23 maxlen: 24
                          66.227.88.0/22 maxlen: 24
                          66.227.92.0/23 maxlen: 24
                          66.227.95.0/24 maxlen: 24
                          66.227.108.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:87:b2:16:62:b8:93:32:36:c1:19:23:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Oct 15 13:00:38 2025 GMT
            Not After : Jan 13 14:00:38 2026 GMT
        Subject: CN=a3b80a85-bce7-412e-91fe-9d6afb2fd347
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:91:52:91:59:52:8b:c4:53:6b:d0:a1:a4:99:
                    ed:af:86:30:84:14:2e:e3:fb:88:c6:76:72:a6:77:
                    ca:19:14:3f:9c:16:52:83:d1:82:7c:70:97:64:d1:
                    bf:c6:0f:b6:7a:76:01:5a:35:5c:27:f6:3f:d0:ab:
                    d6:4b:cc:6d:83:56:d2:96:90:bb:12:d4:be:71:20:
                    b0:c8:af:2e:b1:3d:c8:d5:0f:80:b5:5e:9d:22:fc:
                    71:f3:c6:19:0f:7f:03:8b:9d:8d:f5:1f:f8:a4:fd:
                    36:1a:2a:ce:2d:d0:33:79:55:c7:79:1e:52:11:ad:
                    e5:37:48:ee:4f:d2:a8:e2:40:4f:8f:64:62:05:86:
                    9a:69:36:f1:b3:5d:ab:89:10:f3:ad:76:b4:5b:f8:
                    da:74:3b:53:13:85:d6:58:22:0f:43:ec:9a:f0:39:
                    cb:b0:3d:2e:b5:6c:97:09:81:cb:ba:a6:ff:76:e8:
                    a6:a6:c4:cf:9e:f9:c3:d9:c8:34:cc:0e:73:db:eb:
                    6d:e0:a4:5b:d5:49:fb:31:ec:78:3a:1b:6f:21:54:
                    e2:ff:47:fb:37:7c:50:38:fd:2d:b9:c6:98:d3:fe:
                    87:40:70:15:18:3d:7a:78:de:08:75:3a:df:13:53:
                    dc:6e:ca:0c:14:c6:94:66:fd:e9:15:19:04:bd:2e:
                    40:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:BE:3D:DF:DA:E7:DA:E8:7A:8F:A7:9F:CD:3E:CB:FA:44:F5:93:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/efb226c2-2d28-3b9c-bfce-f7d0d354f99a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.227.64.0/22
                  66.227.72.0/22
                  66.227.77.0-66.227.79.255
                  66.227.88.0-66.227.93.255
                  66.227.95.0/24
                  66.227.108.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:5d:f9:2e:7a:6b:4c:ef:c0:92:60:37:1b:9a:07:cb:56:81:
         8f:6c:a9:07:15:03:0d:7c:26:51:eb:32:1a:7e:4c:48:a4:f3:
         cb:c1:f8:e4:a2:f2:d9:fa:25:24:9a:52:d5:87:ce:bf:2e:2e:
         c1:82:27:33:cb:2f:78:a3:60:c0:91:d7:5b:18:b4:ba:86:38:
         fa:fb:44:4a:5b:0a:ef:7c:23:7a:12:04:7e:60:e7:c1:69:20:
         c0:88:5d:37:81:75:16:75:41:c6:e2:b1:2e:0f:8c:2d:a3:2c:
         1d:e2:b8:39:f6:eb:24:f5:ff:76:8d:cd:4f:26:fe:89:e6:40:
         e6:0d:d0:91:42:86:bf:e0:3c:af:43:cf:0a:67:77:93:ad:8b:
         68:bd:77:56:ad:ed:f6:bd:c9:30:b9:92:99:6f:48:0b:06:01:
         07:c9:16:77:43:1e:d8:34:d3:14:49:a6:75:a0:f9:30:35:e8:
         1a:3d:d9:dd:d3:2a:ef:bf:8b:58:17:7a:f1:ec:3b:20:26:d5:
         23:ab:51:f2:0d:2f:c7:87:7b:08:94:79:19:f9:a6:7d:b3:ab:
         cc:b1:c2:3c:46:05:9c:15:ad:89:a5:d2:c5:d0:4e:24:c2:83:
         60:01:6e:4e:a7:fe:21:d4:18:c6:fd:36:e5:40:1d:71:ab:47:
         53:5d:8c:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:16:48 2025 by rpki-client