Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/f67d3bed-52f5-3f5c-9c33-bc10ce6243a5.roa
File:                     f67d3bed-52f5-3f5c-9c33-bc10ce6243a5.roa (raw, json)
Hash identifier:          uFIVC1X6JHmGrPUXFq+wHWWaDANmsb4Uz+QPqLnCbxQ=
Subject key identifier:   70:04:D5:F5:2B:41:8A:58:CE:0A:D7:97:EE:87:B1:03:BE:42:55:42
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584F225D2099D329E6183ED63680
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/f67d3bed-52f5-3f5c-9c33-bc10ce6243a5.roa
Signing time:             Fri 11 Sep 2026 01:00:12 +0000
ROA not before:           Fri 11 Sep 2026 01:00:12 +0000
ROA not after:            Thu 10 Dec 2026 02:00:12 +0000
asID:                     211192
IP address blocks:        66.92.142.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 07 Oct 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:22:5d:20:99:d3:29:e6:18:3e:d6:36:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Sep 11 01:00:12 2026 GMT
            Not After : Dec 10 02:00:12 2026 GMT
        Subject: CN=ba3cd319-2fd5-44e4-8e8f-8abd1e57f522
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:e1:72:23:29:6a:13:9c:03:98:f2:f3:cf:aa:
                    43:76:6b:ee:3d:73:2d:2e:97:7f:80:6f:76:a3:a3:
                    90:dd:45:2b:5c:fb:44:36:18:3b:1c:8a:2b:37:d6:
                    ff:b1:4b:76:a2:66:b6:79:ec:1f:a2:77:2d:37:2e:
                    e7:2d:e5:67:dc:cb:dc:ec:b0:bf:48:43:a9:95:9b:
                    7a:22:c4:9f:23:aa:6b:55:ab:b3:db:55:16:fc:85:
                    e4:58:15:2d:c4:65:52:5b:b1:2d:41:5b:c2:c9:63:
                    57:81:cb:77:6a:ec:80:b1:5e:a3:c1:09:9f:4e:d8:
                    5c:4c:38:e6:37:b3:6f:63:42:dd:6b:4e:e2:4d:07:
                    48:da:01:76:70:5c:3b:6b:31:27:36:1f:46:3b:a5:
                    ae:68:06:2a:9c:5f:c3:7e:28:6f:31:83:b9:57:92:
                    5b:c9:0c:9b:e7:63:7c:e6:c5:79:f5:ca:ef:72:44:
                    c4:e6:58:bd:cc:52:74:50:45:fa:75:72:3b:24:95:
                    42:06:17:64:28:93:79:46:92:e7:ec:3e:a2:00:fd:
                    9d:d4:b9:b5:1f:ef:a3:90:28:47:50:fd:a4:73:81:
                    8c:26:3d:ba:ec:e6:6e:bc:c5:0d:bb:6d:da:a4:90:
                    5c:61:59:52:75:10:90:d5:75:4a:20:36:dc:66:13:
                    e0:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:04:D5:F5:2B:41:8A:58:CE:0A:D7:97:EE:87:B1:03:BE:42:55:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/f67d3bed-52f5-3f5c-9c33-bc10ce6243a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.92.142.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c8:b0:c9:f5:40:f6:8a:f3:a2:a5:21:47:ba:63:6f:00:13:f0:
         3c:ea:74:e6:d3:85:4a:49:ec:b7:5c:0f:2f:f8:b3:64:57:d3:
         58:a8:ef:10:16:91:f1:88:a3:d7:a4:7f:a7:0f:b3:b1:5d:91:
         e7:38:15:8c:e1:a9:f4:db:9d:e2:0d:e5:4f:9c:88:ae:4e:8c:
         d0:e8:8b:34:91:6e:0a:8a:ab:cd:e3:23:9b:c1:f9:81:a2:0f:
         5a:a9:8d:16:0e:5b:2a:0e:27:0d:01:82:f1:be:26:1d:15:f5:
         d7:41:f9:d4:d2:2a:58:8c:78:ad:58:2b:7c:4c:62:41:2b:c3:
         30:92:91:a0:f4:55:d8:c6:ca:47:f1:07:ab:53:95:f0:c0:6e:
         4e:92:1f:33:40:7d:61:70:b7:3e:cf:f2:c6:8f:a2:56:7e:1c:
         b1:07:27:5c:62:fd:f7:78:91:dd:c4:64:dd:43:60:b0:09:fa:
         06:a4:ef:dd:ea:e2:d2:37:61:05:77:c4:d4:1e:c6:87:01:b1:
         51:27:78:e5:bc:41:a5:f4:5e:b8:14:d8:d0:8e:6b:e6:0f:dd:
         c4:20:11:e0:aa:aa:b6:5b:67:59:a0:00:a2:95:f6:d3:59:e0:
         ad:17:80:df:fa:76:9e:58:0a:10:11:2d:31:78:68:ce:1d:18:
         3b:52:5d:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 01:18:44 2026 by rpki-client