Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/437a50b7-3f98-39d5-b61f-e58fdb154aef.roa
File:                     437a50b7-3f98-39d5-b61f-e58fdb154aef.roa (raw, json)
Hash identifier:          LNjypZM6AmFi6TiBiRI4YhladS7hpvS0nvcou79O5S0=
Subject key identifier:   12:07:48:8D:EB:D9:CF:45:17:28:E0:6C:C1:43:C6:BD:4B:15:48:52
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584B52233C9B41E9AA68C3C362C0
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/437a50b7-3f98-39d5-b61f-e58fdb154aef.roa
Signing time:             Fri 26 Sep 2025 08:34:59 +0000
ROA not before:           Fri 26 Sep 2025 08:34:59 +0000
ROA not after:            Thu 25 Dec 2025 09:34:59 +0000
asID:                     36530
IP address blocks:        66.92.167.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:52:23:3c:9b:41:e9:aa:68:c3:c3:62:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Sep 26 08:34:59 2025 GMT
            Not After : Dec 25 09:34:59 2025 GMT
        Subject: CN=251f112b-a698-4cc3-81fb-9c1e81dc0511
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:b2:20:6e:46:db:a9:a8:ed:8a:4f:83:51:c0:
                    15:99:eb:ee:b5:e4:e1:f1:6d:ac:6a:3e:de:2f:d5:
                    55:09:4d:d8:be:f2:b1:a5:08:aa:02:33:52:4a:7e:
                    d8:c6:d1:8a:8b:e3:b1:09:77:6f:16:3d:da:64:25:
                    b3:3f:98:25:e0:4e:34:c0:18:bb:de:69:c5:54:c2:
                    89:3e:0c:05:d8:2a:95:ae:8a:6f:22:cd:69:a4:a9:
                    e7:0c:df:7a:3a:d1:44:6c:c2:bc:73:1a:cf:2a:c6:
                    00:06:96:87:89:c5:8c:68:88:28:ff:fa:0d:4a:87:
                    80:8e:ce:bd:df:b9:fa:0b:14:b8:3e:7d:a2:01:92:
                    97:07:88:09:9c:0c:9c:c2:8b:a3:00:03:53:1d:46:
                    f8:5c:df:b1:0e:a1:4d:61:b5:d4:99:23:f0:9a:6a:
                    41:1b:eb:92:d3:c7:7d:ac:08:87:3b:af:8a:12:bc:
                    57:ac:ad:87:e0:5a:de:42:73:68:46:e6:3c:06:43:
                    b6:6f:9a:fc:3f:c8:50:19:da:c9:b6:3b:3c:53:e9:
                    69:07:ee:6e:00:9b:52:5a:fb:e4:ed:e2:e2:22:8c:
                    13:fe:87:21:77:b1:cd:b0:b9:36:0a:76:b8:00:10:
                    c5:00:cf:2f:90:3d:9b:e0:26:5f:9a:90:67:4f:b4:
                    71:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:07:48:8D:EB:D9:CF:45:17:28:E0:6C:C1:43:C6:BD:4B:15:48:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/437a50b7-3f98-39d5-b61f-e58fdb154aef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.92.167.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b7:4d:de:71:7d:50:61:3e:c0:58:2e:69:ab:b2:55:73:48:26:
         68:d3:46:6e:4e:75:10:b6:1e:84:9b:0f:44:19:ba:d3:c4:fe:
         0d:4f:35:dd:a4:83:7d:95:e8:55:92:c9:64:a4:d4:66:0b:9b:
         cb:d6:36:7e:5e:28:ab:8c:13:e5:0c:00:46:5b:c3:cf:ff:67:
         5c:42:13:e7:36:9d:35:c1:fa:6b:32:ba:1d:cc:ee:0f:21:6b:
         2b:46:83:a4:65:85:f6:78:7f:f5:2c:6c:e8:70:53:bc:ce:98:
         88:fb:43:91:c7:07:63:a3:3d:a3:f8:9f:6c:8b:0e:68:34:4d:
         01:30:72:79:26:ef:a7:b3:ce:0d:6a:4b:f1:ee:43:18:de:7e:
         ec:3e:5f:bc:91:9f:c6:e6:86:59:cb:da:b2:a1:9f:34:68:af:
         66:0d:e4:68:de:e2:df:9f:b7:92:a6:b2:37:f5:0a:11:29:3f:
         07:0a:bc:02:7f:68:05:7b:6f:a7:4d:0e:1f:f2:02:ea:40:63:
         5b:cf:1c:dc:69:9d:60:d7:19:60:c4:94:2d:35:c2:9c:60:c9:
         37:4f:4e:bf:8b:62:f2:65:26:e9:d1:97:b8:b2:5d:78:d1:6f:
         4b:df:92:a6:93:55:e0:07:db:d6:03:e0:41:2a:c1:b6:59:bd:
         df:ac:fc:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 09:01:10 2025 by rpki-client