Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/f2bcd859-8c84-3b29-831d-71b200762524.roa
File:                     f2bcd859-8c84-3b29-831d-71b200762524.roa (raw, json)
Hash identifier:          DNyi3ZrT7yukENGEAH4WKe+vHA72GZ6RT2TMqXIUMgI=
Subject key identifier:   8A:E5:49:99:A4:CA:43:44:AF:99:ED:9B:21:F7:6F:DB:E2:99:0C:EE
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584D1C7F4CF7E126B5BDAF26AC20
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/f2bcd859-8c84-3b29-831d-71b200762524.roa
Signing time:             Mon 09 Mar 2026 13:00:40 +0000
ROA not before:           Mon 09 Mar 2026 13:00:40 +0000
ROA not after:            Sun 07 Jun 2026 13:00:40 +0000
asID:                     834
IP address blocks:        66.92.170.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1c:7f:4c:f7:e1:26:b5:bd:af:26:ac:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Mar  9 13:00:40 2026 GMT
            Not After : Jun  7 13:00:40 2026 GMT
        Subject: CN=f811bd38-e1da-4176-8154-87764d407fcd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:6e:8f:7d:fb:99:17:fc:db:8d:20:b3:76:a4:
                    b8:7f:a2:dc:3b:88:da:1d:b6:29:50:08:5c:94:60:
                    95:d7:70:41:0f:fd:7f:47:7b:1a:2a:79:93:d4:33:
                    bb:d6:e5:c4:14:a1:96:4f:5d:37:61:a8:d6:13:b5:
                    4b:7b:7f:af:b5:b0:95:c2:c2:e2:e8:81:d5:08:ca:
                    4e:61:7b:8e:f8:65:f6:b8:dd:4d:7b:a0:91:85:2e:
                    7c:eb:3a:81:8c:2f:0c:ae:82:a9:ee:41:4c:6b:1b:
                    36:39:da:f2:56:42:60:6d:a7:94:b2:d6:5c:c0:10:
                    3f:57:82:ce:28:15:b7:2b:de:d0:c9:f5:89:03:4f:
                    18:73:36:cf:02:76:9c:2c:79:aa:6a:b8:d4:d8:df:
                    0d:8a:1a:a3:82:29:fb:08:98:cf:ed:08:31:29:82:
                    50:b0:4e:d7:8e:be:b9:f4:5a:cf:93:68:d3:8c:55:
                    00:30:53:5f:8e:5f:38:bc:e3:da:5e:8f:a5:2f:f3:
                    88:84:ce:cb:6b:42:75:85:60:c7:84:ea:21:69:e1:
                    fb:cd:c7:28:8b:6a:92:af:a7:65:47:e8:8d:a3:05:
                    85:82:63:bb:fc:59:0d:59:b2:f8:36:fe:05:55:2f:
                    a4:51:84:d3:ca:d1:a8:f7:ee:08:2f:33:b1:0a:b0:
                    de:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:E5:49:99:A4:CA:43:44:AF:99:ED:9B:21:F7:6F:DB:E2:99:0C:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/f2bcd859-8c84-3b29-831d-71b200762524.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.92.170.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:e8:df:76:1f:f5:59:c5:28:d1:2c:04:b6:78:8f:30:90:ad:
         75:13:c2:a5:d8:2c:89:96:cc:f9:dd:de:38:84:84:2e:da:b8:
         36:4c:6c:a7:46:1e:d3:04:97:d7:e7:a8:19:19:03:7f:d0:b3:
         a2:83:f0:ba:5f:f0:eb:b6:6d:46:ba:20:52:ac:ac:28:10:7c:
         18:b3:6a:db:b3:ac:93:15:0f:b9:31:19:f8:75:8d:d9:1e:8b:
         a4:eb:f4:f5:9e:47:a7:33:e5:a2:48:24:63:86:38:e9:7d:e8:
         5e:78:8d:e2:09:e7:24:ab:b2:93:7e:8c:39:b7:1f:44:9e:fa:
         8f:97:e3:8f:25:11:0b:c4:22:c8:b1:b6:53:9e:5d:0a:a0:f2:
         34:f6:b2:8e:af:75:7d:ba:dc:0b:7e:a3:d0:e2:aa:e7:dc:41:
         fc:a0:e6:eb:8e:65:a2:f1:06:12:81:2b:46:89:68:05:f8:25:
         02:f2:0f:bf:17:5e:ee:6b:7a:b7:ba:c3:72:4f:fa:22:87:46:
         83:6f:13:e2:3c:ff:f6:b3:60:43:a6:12:68:b1:41:4c:a7:22:
         0a:76:a8:55:06:a4:cc:9c:2f:01:da:87:8c:d9:d9:02:5e:c6:
         ac:fd:0f:48:b9:bd:f2:69:f6:85:58:d5:1c:48:9e:4b:fa:62:
         0e:2b:b7:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:44:09 2026 by rpki-client