Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/78625034-da1c-38d8-a2b4-b65541fd4f79.roa
File:                     78625034-da1c-38d8-a2b4-b65541fd4f79.roa (raw, json)
Hash identifier:          68YKJrvO8hiAlsv5pvRWm8WN+uYixlO1TwKI4tmvK/M=
Subject key identifier:   6F:AE:48:08:01:D9:69:E9:E5:52:3B:7E:5F:BD:A7:62:39:AF:33:38
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584B4324BE5C97D3801C07175540
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/78625034-da1c-38d8-a2b4-b65541fd4f79.roa
Signing time:             Sat 20 Sep 2025 23:40:54 +0000
ROA not before:           Sat 20 Sep 2025 23:40:54 +0000
ROA not after:            Sat 20 Dec 2025 00:40:54 +0000
asID:                     834
IP address blocks:        66.92.168.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:43:24:be:5c:97:d3:80:1c:07:17:55:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Sep 20 23:40:54 2025 GMT
            Not After : Dec 20 00:40:54 2025 GMT
        Subject: CN=6729c303-d8e9-43bd-8222-413012cd9347
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:2b:d4:68:9d:91:cf:f2:fd:59:80:21:8d:c6:
                    e5:15:a3:6c:c6:54:86:bc:6d:19:64:e3:cb:3b:c4:
                    87:b6:ae:ea:bd:ca:60:2e:84:4d:ff:d2:42:84:58:
                    b1:29:95:1d:6a:8c:03:9a:00:0f:7c:b8:b7:d2:c9:
                    f3:25:cd:df:ae:58:35:ae:55:51:6a:03:0a:36:81:
                    37:55:2c:8b:62:ff:bc:5b:08:1c:d3:4c:10:4f:15:
                    eb:dd:de:84:b0:a8:36:ab:8f:85:33:4e:9e:07:41:
                    dc:52:e1:7f:0a:db:8a:b7:97:e2:bb:56:73:22:32:
                    a0:b9:b8:38:6d:2d:33:0a:73:46:2e:04:16:e6:90:
                    a5:8b:13:29:ab:fb:88:97:5b:ba:13:75:91:1f:c2:
                    93:ab:c6:42:19:68:b6:6b:d3:aa:e5:ea:0b:71:c4:
                    78:79:8e:10:68:7e:1b:76:f0:14:61:27:34:5a:85:
                    26:7c:d6:d8:4a:34:86:c2:64:fa:54:5f:e7:6a:7e:
                    76:90:99:92:8b:b9:49:51:14:9c:fc:58:77:3f:25:
                    bc:bc:06:8d:2a:b3:10:3f:34:e8:0f:68:07:60:1e:
                    ef:db:ea:3e:c6:5d:57:b0:b6:f5:aa:ed:5d:41:9b:
                    77:83:18:e9:7f:49:30:1b:12:fe:55:e0:b0:14:18:
                    3a:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:AE:48:08:01:D9:69:E9:E5:52:3B:7E:5F:BD:A7:62:39:AF:33:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/78625034-da1c-38d8-a2b4-b65541fd4f79.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.92.168.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:33:4f:fe:34:30:21:e2:62:0f:bb:1b:c4:10:05:19:e2:6e:
         07:99:12:a0:a0:72:61:6a:6e:fa:47:31:2b:0f:b4:48:b3:0a:
         ee:b2:54:26:72:27:bc:3f:76:05:9b:42:9d:b9:bd:6e:41:bf:
         16:3f:ad:36:ed:f4:f7:0b:6f:03:d4:24:54:5c:fb:75:40:fa:
         ac:f3:00:ab:ba:ee:9d:b1:9c:c0:c6:21:1c:9f:b2:c4:e7:f9:
         b2:37:20:36:e3:19:6b:59:c6:d6:80:6e:5d:56:fa:af:ee:f8:
         ce:a9:59:9b:12:a8:f6:65:6c:d2:fe:cd:ba:dc:bb:e7:61:70:
         a6:e8:10:90:cc:68:c1:e5:d6:d7:9a:eb:a6:f8:50:bd:8e:b1:
         25:90:9e:e5:b1:f9:65:eb:45:44:ee:6c:95:b4:29:a2:a7:e4:
         5e:7d:8b:fa:91:b0:79:ad:cf:48:39:4b:e1:7b:32:0e:d2:21:
         f3:1e:2c:b8:de:8c:fd:74:a4:6c:b5:65:f9:7f:20:4c:cb:55:
         15:f7:a0:bf:79:2b:9d:cb:41:0e:02:2c:0b:ce:e5:48:5b:f7:
         1b:c8:c8:6f:0a:c9:34:25:86:87:00:7a:3f:e6:64:13:32:30:
         29:92:56:0b:d0:d4:9f:c7:d4:78:12:f0:6c:3e:f6:7d:53:af:
         38:68:f6:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 08:59:58 2025 by rpki-client