Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/2f5762a0-98c5-30a3-a2ec-fd8b0730d619.roa
File:                     2f5762a0-98c5-30a3-a2ec-fd8b0730d619.roa (raw, json)
Hash identifier:          Zd+TT+z1g/4XAOuxgnLKRQVIjq7/5L4a+ffZbGrN+7E=
Subject key identifier:   49:2B:B0:01:A1:B9:1C:EE:A3:E8:34:62:20:92:BE:89:9A:7E:60:10
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584A8BF3E2F9A98F93509A2A2400
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/2f5762a0-98c5-30a3-a2ec-fd8b0730d619.roa
Signing time:             Thu 17 Jul 2025 08:49:31 +0000
ROA not before:           Thu 17 Jul 2025 08:49:31 +0000
ROA not after:            Wed 15 Oct 2025 08:49:31 +0000
asID:                     984
IP address blocks:        66.92.202.0/24 maxlen: 24
                          66.92.203.0/24 maxlen: 24
                          66.92.206.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Jul 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:8b:f3:e2:f9:a9:8f:93:50:9a:2a:24:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Jul 17 08:49:31 2025 GMT
            Not After : Oct 15 08:49:31 2025 GMT
        Subject: CN=8b563acf-306c-4f89-9dcb-e375e08072a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:3e:b0:d0:ff:13:df:3b:0a:62:99:c7:6a:a7:
                    6a:b9:b6:e1:a1:c7:ac:41:cb:5c:de:a4:ef:7e:66:
                    02:be:29:3a:a7:18:71:2d:ba:f1:b4:c1:0b:9c:8c:
                    5d:48:bb:f0:98:08:31:80:ca:b1:1f:4e:23:aa:73:
                    1e:4c:a0:f8:0c:00:b6:26:b7:0f:fb:92:3f:74:9e:
                    e3:9c:c9:ea:91:49:a2:2a:8c:30:e7:19:84:03:94:
                    e4:8c:58:a3:18:af:1d:19:ea:27:47:16:0d:58:39:
                    a3:13:74:4b:fd:fc:a0:77:bb:26:26:71:de:d2:ab:
                    7c:b4:80:6d:4c:9a:8d:b9:66:10:56:f4:68:88:e0:
                    71:7e:05:75:63:16:ca:7e:42:d3:74:18:a6:48:fa:
                    65:a7:8c:03:7a:67:dc:b9:33:e5:84:4b:38:94:21:
                    28:47:e8:40:da:f4:dd:94:4f:08:09:79:f0:94:de:
                    0c:26:69:2c:8d:5d:fd:fa:b6:aa:99:dc:99:b0:a2:
                    77:48:6b:e1:f0:55:c4:d6:b3:cf:f5:7a:a4:2b:75:
                    8e:fe:c9:10:fd:ec:ea:82:84:51:b4:4e:89:e4:1f:
                    98:f6:60:40:4f:6f:9f:88:37:b3:0a:4d:5e:12:87:
                    44:28:44:9a:7c:47:0b:ea:b1:2c:7f:42:df:03:bb:
                    69:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:2B:B0:01:A1:B9:1C:EE:A3:E8:34:62:20:92:BE:89:9A:7E:60:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/2f5762a0-98c5-30a3-a2ec-fd8b0730d619.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.92.202.0/23
                  66.92.206.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:5f:41:0b:5f:76:bb:95:57:39:4b:aa:58:0e:53:c1:bf:b7:
         0a:1c:15:60:d8:80:cc:fb:a9:d6:77:fa:de:e6:4f:c6:26:07:
         34:0a:89:2d:79:4c:e2:3f:c0:4a:9e:2e:39:73:2d:8d:5c:22:
         f7:3b:08:7b:c9:28:ff:d8:a5:5d:8a:dc:d1:28:27:9e:7f:d7:
         22:32:45:01:dd:ef:73:8a:47:94:af:63:4f:37:06:81:24:f3:
         3d:b5:33:8f:4d:8d:9d:32:63:b2:50:27:e5:e2:f1:fb:5e:4c:
         83:d1:81:66:80:66:59:22:ec:13:f4:6d:9b:59:dd:f7:87:32:
         46:a4:84:ad:35:bd:7a:fe:5c:47:9a:6e:9a:fb:71:42:ae:72:
         f5:47:8d:a5:b0:54:1b:24:86:2e:95:89:fd:bc:18:e2:cb:6c:
         6a:f5:cd:24:bc:22:9f:25:dd:96:05:a4:0d:cd:93:f9:ed:95:
         10:f1:26:68:93:57:86:43:2a:c7:5d:79:b9:ef:85:b1:44:4a:
         a7:a1:7b:35:88:c4:e3:ab:55:78:fd:8c:6f:ba:17:1e:e1:85:
         d1:61:2d:bb:05:94:7a:de:61:6d:17:ec:d2:3e:87:3e:9c:43:
         46:aa:8a:bf:91:b8:be:2d:0a:a2:04:f6:f8:da:c6:e1:02:77:
         09:4c:60:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 18:13:59 2025 by rpki-client