Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/10dea555-e10b-3fe5-95f1-6a68952b75e8.roa
File:                     10dea555-e10b-3fe5-95f1-6a68952b75e8.roa (raw, json)
Hash identifier:          ggkImsOq8jZUcD3iZyctCmXA2GcelAQBFiJVWa1iWM0=
Subject key identifier:   D5:63:DB:1E:F4:DE:F5:33:A8:65:41:27:F9:EF:29:DA:7E:6F:A8:6C
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584B70BD3856E6690E9436C5E800
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/10dea555-e10b-3fe5-95f1-6a68952b75e8.roa
Signing time:             Tue 07 Oct 2025 07:39:29 +0000
ROA not before:           Tue 07 Oct 2025 07:39:29 +0000
ROA not after:            Mon 05 Jan 2026 08:39:29 +0000
asID:                     7922
IP address blocks:        66.93.47.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:70:bd:38:56:e6:69:0e:94:36:c5:e8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Oct  7 07:39:29 2025 GMT
            Not After : Jan  5 08:39:29 2026 GMT
        Subject: CN=ea1ca90f-2499-41a1-8e09-f14314b6a4ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:98:c0:0a:6c:3d:4b:2c:df:6a:87:fc:80:8e:
                    07:18:ff:a4:b0:52:8c:8a:60:c5:50:31:16:cb:83:
                    52:ab:f8:ff:6a:94:86:a8:a1:4c:50:9c:88:14:09:
                    10:e2:52:11:9e:28:a1:59:5e:2e:c0:36:03:54:5a:
                    77:34:fe:38:65:d3:56:d8:86:09:bb:eb:52:e2:f7:
                    cd:0c:6f:3e:e1:1a:14:fa:84:4a:1d:fe:3a:b4:2a:
                    19:92:96:ba:92:06:3b:9b:3c:75:49:45:cb:16:d8:
                    88:b0:c1:2a:48:f8:1d:ae:3b:ad:07:7f:05:d8:cd:
                    6e:d7:57:6a:28:f0:9d:b6:ca:9b:f9:2c:76:67:bc:
                    0f:7b:cd:d0:f2:9a:be:bc:37:e0:95:e4:c7:d9:77:
                    05:cb:ab:a0:f1:69:3f:90:f5:63:68:53:12:e1:6d:
                    ea:ea:ec:ed:04:19:63:e7:92:1b:e0:58:9b:6d:1b:
                    72:ec:ac:6c:d0:5d:6b:36:76:93:3c:d3:7a:5a:5e:
                    12:d7:34:c8:85:54:cf:9b:ee:54:38:7f:66:45:1b:
                    46:08:24:f6:28:16:20:1c:03:31:ff:96:40:c0:5b:
                    6b:04:fb:cd:6a:4f:c4:0e:5f:d9:31:61:80:86:5e:
                    a0:5b:a9:2e:28:ce:e1:59:7b:cb:d3:50:0d:37:de:
                    a4:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:63:DB:1E:F4:DE:F5:33:A8:65:41:27:F9:EF:29:DA:7E:6F:A8:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/10dea555-e10b-3fe5-95f1-6a68952b75e8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.93.47.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bb:bc:e9:2c:13:45:56:85:0b:48:f8:3d:91:9b:81:2f:27:c4:
         30:48:19:ac:f1:58:84:9d:d9:24:89:40:6e:ed:2a:af:f8:1a:
         88:9c:2e:8f:e0:ea:d0:14:ba:1f:e4:9f:3a:eb:31:53:3b:03:
         24:42:a3:88:f5:a3:a1:b1:a5:bd:12:5c:8b:e6:31:63:98:e8:
         b7:df:6c:ec:70:a2:ef:a9:99:4d:77:e6:f3:2a:e6:a3:d9:e6:
         36:73:f6:44:18:6c:e6:c8:6e:0b:13:73:bb:9c:83:d5:47:f4:
         11:0e:a3:cd:ed:b3:b7:02:d6:79:1e:b1:7c:f9:67:34:b2:7d:
         38:6d:02:8a:9f:69:ef:eb:7a:51:91:27:19:bf:98:63:e4:ba:
         c4:6a:d3:78:a9:d6:db:a5:09:eb:f2:1c:3d:b7:2a:64:b1:61:
         7d:f0:7a:12:e2:09:a4:bb:1e:c9:20:f2:a8:2e:89:89:39:65:
         79:d0:32:e7:ff:61:46:4b:21:f5:46:ea:00:63:de:e1:82:59:
         be:76:a9:f9:af:74:21:53:92:56:e8:68:71:cc:52:2a:ad:8c:
         20:2b:e4:41:ff:f4:f7:e7:19:67:c1:d7:87:de:66:2e:c7:ed:
         da:78:a2:cc:06:20:36:10:36:a2:bc:d6:e6:6c:39:8a:25:5a:
         af:fa:20:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 01:18:46 2025 by rpki-client