Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/18b6b352-eb3a-3bb3-afae-89f45369f24c.roa
File:                     18b6b352-eb3a-3bb3-afae-89f45369f24c.roa (raw, json)
Hash identifier:          fxFhFTngsX9lDSIztxilBKpen9pWxMdWYPnxQIs27Ow=
Subject key identifier:   90:2D:19:A8:4A:FF:97:BC:F7:60:5A:99:2C:0F:46:DA:F6:D3:E4:62
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584B3F13479B7E739187B13A8F00
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/18b6b352-eb3a-3bb3-afae-89f45369f24c.roa
Signing time:             Fri 19 Sep 2025 12:42:28 +0000
ROA not before:           Fri 19 Sep 2025 12:42:28 +0000
ROA not after:            Thu 18 Dec 2025 13:42:28 +0000
asID:                     212238
IP address blocks:        66.93.52.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3f:13:47:9b:7e:73:91:87:b1:3a:8f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Sep 19 12:42:28 2025 GMT
            Not After : Dec 18 13:42:28 2025 GMT
        Subject: CN=e0a61f55-e459-43b2-a95a-7a1acd5765bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:13:fc:df:27:60:cf:e2:ea:96:ed:1c:47:d8:
                    94:3e:c6:5e:29:aa:37:db:e6:ea:4c:b7:19:91:f5:
                    33:9e:7f:20:49:c6:77:91:8d:3c:36:52:c8:a9:85:
                    ed:a5:73:b2:ba:43:45:11:7a:07:e7:82:c8:d3:d4:
                    fc:90:d5:e5:92:ef:fd:e5:3f:0f:e2:86:c3:08:9c:
                    ae:b5:d3:c9:51:8e:48:3c:0c:a9:cc:b6:4c:63:b2:
                    e4:e1:26:f8:22:8e:e4:f8:74:32:89:71:6d:fe:d0:
                    e7:3a:c7:4b:b1:33:86:bc:09:fd:12:8a:01:5f:6b:
                    95:7c:6b:4a:66:4b:f7:97:10:c8:48:d7:a3:cd:60:
                    42:43:7f:fb:1a:d5:8e:45:4f:2d:f6:05:da:a7:0a:
                    2f:70:55:64:dc:2b:9e:b9:46:cf:70:fa:35:9b:27:
                    30:df:8d:ce:6a:b8:d8:3a:d3:af:25:79:9d:08:ea:
                    80:58:2b:57:b7:08:63:30:d5:5a:06:7c:b1:a2:8a:
                    79:af:83:c8:28:8a:ba:6d:0a:39:6e:21:97:33:28:
                    3c:5b:a7:c4:b7:d4:10:e3:65:c1:29:64:16:a9:98:
                    86:27:96:ed:01:c3:91:67:2b:90:23:66:1f:ef:85:
                    2f:bc:12:75:0d:f5:62:e0:94:64:34:e9:6c:1c:81:
                    1b:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:2D:19:A8:4A:FF:97:BC:F7:60:5A:99:2C:0F:46:DA:F6:D3:E4:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/18b6b352-eb3a-3bb3-afae-89f45369f24c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.93.52.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:e0:fd:0d:32:59:5c:2d:30:0a:83:8a:a7:3c:62:ba:9f:a6:
         cc:1a:73:61:e3:ce:95:38:00:6a:f7:ff:f9:d3:e4:d6:86:35:
         c4:c3:09:5b:b2:f9:3a:89:df:f7:95:26:78:e9:34:83:3c:ec:
         7e:53:2d:a2:bf:60:37:62:35:6a:ce:54:3b:64:45:67:a5:9f:
         59:32:5b:a6:fb:63:86:de:7d:71:ab:35:ae:f3:ba:d0:79:09:
         a3:75:dc:0e:51:d8:97:55:00:58:96:45:e2:d6:25:b7:4c:3a:
         7a:34:3c:05:dd:07:4d:01:05:78:e8:18:e0:59:2e:e7:a1:9c:
         dd:f0:39:da:6d:ab:81:e2:ea:f6:fa:f5:0c:5b:c1:aa:8f:61:
         3c:b5:d7:e8:71:4b:87:40:c9:e8:44:17:4b:e1:54:3b:1e:ce:
         a4:b8:86:eb:0a:42:0d:a8:be:8d:15:fc:31:db:51:75:68:23:
         71:6a:56:d0:60:fa:d1:00:1d:94:04:e8:79:1a:73:69:bc:7e:
         9f:17:ff:bf:24:5a:a6:79:98:5f:3e:67:6f:d2:2b:ee:4e:77:
         f4:05:e9:ac:7f:fc:14:8b:bb:c7:a3:25:24:34:58:2d:9b:6e:
         a3:30:7d:bc:db:0c:92:09:d2:15:9e:3e:00:d0:9c:29:4e:83:
         28:85:49:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 09:01:13 2025 by rpki-client