Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/fe7889e8-52af-36b3-8123-40426001d66c.roa
File:                     fe7889e8-52af-36b3-8123-40426001d66c.roa (raw, json)
Hash identifier:          nLznXSzU6HtwgFZNE6FpYXxH2CGwNwZgSVMx7k0y5NY=
Subject key identifier:   08:9B:00:91:D5:69:53:64:8D:22:B9:FB:7A:2F:E0:97:D1:EE:F8:06
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584DA54AC0952AE14A71E47EBC80
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/fe7889e8-52af-36b3-8123-40426001d66c.roa
Signing time:             Mon 27 Apr 2026 13:00:30 +0000
ROA not before:           Mon 27 Apr 2026 13:00:30 +0000
ROA not after:            Sun 26 Jul 2026 13:00:30 +0000
asID:                     9009
IP address blocks:        66.92.191.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:a5:4a:c0:95:2a:e1:4a:71:e4:7e:bc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Apr 27 13:00:30 2026 GMT
            Not After : Jul 26 13:00:30 2026 GMT
        Subject: CN=46e928d5-be18-438d-9623-1dbde1b6d140
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:87:e0:5a:21:a8:0d:1f:0c:af:9a:6c:c8:32:
                    05:be:f0:40:0d:1b:68:33:e5:fd:da:b7:ec:b0:28:
                    b7:fd:79:af:0a:d5:24:84:93:fa:ff:fa:0f:cd:10:
                    ba:1b:25:39:e6:92:ae:c1:fe:0f:c8:09:64:70:7e:
                    1a:12:33:eb:52:53:38:7d:43:8f:40:a2:a5:b0:79:
                    39:de:61:12:06:6a:e1:09:74:5a:26:40:6a:b4:14:
                    7c:40:9e:d8:7e:16:e3:58:e5:cc:12:ef:e3:a9:a5:
                    f5:a3:d0:05:34:71:c1:d1:b0:7d:f3:7a:48:a5:6a:
                    2f:f0:28:11:54:fd:d9:fe:27:27:37:e5:cf:ac:4f:
                    62:cc:71:85:7b:9e:46:4d:32:58:e1:ca:9c:6c:ec:
                    75:89:92:0c:58:14:54:60:e7:bb:2c:79:8d:58:e9:
                    c4:6b:68:3a:39:68:54:ff:5b:d0:34:13:7b:1c:7c:
                    59:27:5d:f4:ba:56:c5:55:75:35:ad:47:98:36:f4:
                    a1:a0:2b:97:f9:5b:32:b2:2c:58:81:60:30:74:4a:
                    a2:a4:32:4a:5f:2d:2c:07:c4:eb:55:16:38:61:52:
                    9d:02:35:87:7e:c9:7e:f3:ed:05:9c:90:d3:b3:33:
                    9d:18:86:c1:6a:e7:de:22:52:c2:2b:55:84:31:7e:
                    bc:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:9B:00:91:D5:69:53:64:8D:22:B9:FB:7A:2F:E0:97:D1:EE:F8:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/fe7889e8-52af-36b3-8123-40426001d66c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.92.191.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ba:96:dc:d7:f8:0d:75:e5:a3:b6:4a:9c:a1:6c:92:ca:7e:3e:
         19:f3:f0:c7:b1:4d:95:f3:f2:de:36:cb:9f:d0:f0:8c:12:20:
         eb:c0:0b:3d:67:68:52:2e:c8:af:7d:fa:2b:be:66:d6:d7:2b:
         6a:cc:8b:65:64:d2:7a:1e:b9:f1:f5:b9:85:49:35:50:f1:9e:
         60:bf:d9:40:19:77:08:7e:21:d9:3f:1c:11:d4:55:eb:71:c6:
         fb:26:66:19:02:b1:db:e7:d5:ad:1e:b4:99:39:0d:da:00:e4:
         a3:f9:16:ba:d3:31:e8:f9:0a:c1:86:4a:cf:ea:78:4d:bc:47:
         8f:c4:10:37:fe:b9:1e:74:dc:41:99:d7:c9:29:37:2a:38:ca:
         e3:6e:7f:b3:5f:d2:19:05:41:24:e5:60:96:9e:0d:f5:fb:fe:
         41:23:09:14:c2:28:8b:7d:3f:ee:95:54:c3:59:72:b6:8f:6c:
         b1:bc:d3:ba:28:c3:48:61:8f:3f:25:e4:e7:80:88:95:67:3b:
         e1:c1:1f:d0:bb:3f:72:15:29:fe:4b:60:73:1f:5c:ed:09:e4:
         43:7e:8c:4c:ec:12:7f:90:d0:68:c5:69:1a:36:13:19:05:4e:
         5d:aa:dd:b5:38:fe:ae:df:b6:17:1d:87:09:ed:13:23:a0:e5:
         cf:f4:e0:d8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2lSsCVKuFKceR+vIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh
YWU3MB4XDTI2MDQyNzEzMDAzMFoXDTI2MDcyNjEzMDAzMFowLzEtMCsGA1UEAxMk
NDZlOTI4ZDUtYmUxOC00MzhkLTk2MjMtMWRiZGUxYjZkMTQwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA44fgWiGoDR8Mr5psyDIFvvBADRtoM+X92rfs
sCi3/XmvCtUkhJP6//oPzRC6GyU55pKuwf4PyAlkcH4aEjPrUlM4fUOPQKKlsHk5
3mESBmrhCXRaJkBqtBR8QJ7YfhbjWOXMEu/jqaX1o9AFNHHB0bB983pIpWov8CgR
VP3Z/icnN+XPrE9izHGFe55GTTJY4cqcbOx1iZIMWBRUYOe7LHmNWOnEa2g6OWhU
/1vQNBN7HHxZJ130ulbFVXU1rUeYNvShoCuX+VsysixYgWAwdEqipDJKXy0sB8Tr
VRY4YVKdAjWHfsl+8+0FnJDTszOdGIbBaufeIlLCK1WEMX68uwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAibAJHVaVNkjSK5+3ov4JfR7vgGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3
MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvZmU3ODg5ZTgtNTJhZi0z
NmIzLTgxMjMtNDA0MjYwMDFkNjZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0
YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj
YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw
OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQly/MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALqW3Nf4DXXlo7ZKnKFsksp+Phnz8MexTZXz8t42y5/Q8IwSIOvACz1n
aFIuyK99+iu+ZtbXK2rMi2Vk0noeufH1uYVJNVDxnmC/2UAZdwh+Idk/HBHUVetx
xvsmZhkCsdvn1a0etJk5DdoA5KP5FrrTMej5CsGGSs/qeE28R4/EEDf+uR503EGZ
18kpNyo4yuNuf7Nf0hkFQSTlYJaeDfX7/kEjCRTCKIt9P+6VVMNZcraPbLG807oo
w0hhjz8l5OeAiJVnO+HBH9C7P3IVKf5LYHMfXO0J5EN+jEzsEn+Q0GjFaRo2ExkF
Tl2q3bU4/q7fthcdhwntEyOg5c/04Ng=
-----END CERTIFICATE-----
Generated at Wed May 13 15:08:15 2026 by rpki-client