Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/8587d207-ea34-370b-bf51-d4661e42eef7.roa
File:                     8587d207-ea34-370b-bf51-d4661e42eef7.roa (raw, json)
Hash identifier:          qqN8sqtz1TBzfmi0IfJQpSEKXucn5F3voNSkVgS3waw=
Subject key identifier:   D5:57:57:40:CB:63:D7:2F:8E:41:76:4D:AB:48:6A:57:20:99:41:49
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584B5DD2BB1F477A3EDAFD691180
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/8587d207-ea34-370b-bf51-d4661e42eef7.roa
Signing time:             Tue 30 Sep 2025 13:02:28 +0000
ROA not before:           Tue 30 Sep 2025 13:02:28 +0000
ROA not after:            Mon 29 Dec 2025 14:02:28 +0000
asID:                     19318
IP address blocks:        66.92.56.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5d:d2:bb:1f:47:7a:3e:da:fd:69:11:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Sep 30 13:02:28 2025 GMT
            Not After : Dec 29 14:02:28 2025 GMT
        Subject: CN=77a33af5-66f3-4c12-8569-ae063d99862e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:e9:6d:a7:6d:fd:dc:e2:d5:93:df:4c:80:8b:
                    bc:da:8a:3d:cc:ad:c6:cd:b5:cb:97:5a:90:37:45:
                    d3:41:f3:09:ca:9a:79:14:72:44:fa:9c:c9:ed:38:
                    7c:38:dc:10:f7:d1:81:67:eb:35:9d:08:d3:f8:da:
                    5d:70:97:b3:da:59:14:fe:a1:07:73:9f:7e:63:43:
                    ab:17:47:52:37:fd:cc:ad:d8:7e:ea:f6:47:bd:bf:
                    21:8c:d2:f3:5d:8d:f4:2d:7f:b2:a5:e0:1f:a5:a7:
                    be:40:7e:34:4d:bd:61:3b:3a:ed:d7:b6:c2:b5:b0:
                    6e:fa:ec:94:51:97:ab:34:03:00:9a:7c:d1:3c:50:
                    86:9b:77:29:68:b0:c9:6f:8e:d2:e0:48:e2:bf:c5:
                    27:e6:f2:ed:57:fc:c6:56:bf:45:3e:23:d4:cf:f5:
                    9e:47:86:7e:51:cb:59:48:e9:14:2d:de:ce:7c:f6:
                    6a:9b:bb:48:4f:5d:46:ac:2f:f9:69:17:ba:e9:0b:
                    64:64:7e:95:0b:f4:4b:f8:cb:de:28:7e:a9:45:8a:
                    25:12:32:3f:40:7c:f3:5d:af:a8:c8:a0:61:13:90:
                    ec:00:6a:06:9e:98:38:76:1e:da:f3:78:7b:f3:a8:
                    09:45:c0:b9:45:0c:e8:47:9d:8b:c8:91:db:93:c3:
                    c0:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:57:57:40:CB:63:D7:2F:8E:41:76:4D:AB:48:6A:57:20:99:41:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/8587d207-ea34-370b-bf51-d4661e42eef7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.92.56.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b4:bd:ea:c6:b6:5e:09:f8:a8:36:ff:5c:b2:d9:1c:68:56:66:
         2b:ba:49:bc:a4:60:13:78:28:f6:0d:83:ca:91:b3:48:0f:9c:
         0c:83:9e:3d:52:ab:9b:3c:f3:2f:40:11:f7:37:6a:a4:f4:a5:
         2f:9e:e1:22:16:90:45:1e:5d:f9:e0:8e:b2:98:f8:c4:f2:b5:
         a1:fc:2f:82:3b:66:8b:27:ef:d4:4f:62:9f:d9:85:66:13:f5:
         2b:33:23:d3:b8:f0:ff:f7:36:f4:9c:57:5b:76:74:34:8c:3d:
         35:5a:27:bb:df:98:c8:00:10:c2:dd:7e:21:fb:4b:49:06:7f:
         a5:14:18:99:e4:81:5e:78:60:cb:40:dc:ab:22:52:af:82:c1:
         87:d1:fb:a3:58:00:95:f5:e8:98:56:00:89:85:21:71:60:40:
         ac:4e:db:0a:20:9b:82:8a:af:6b:dc:6a:44:13:59:d0:23:e5:
         5e:bd:7c:49:bc:a4:0e:ac:77:26:ad:38:7d:13:9b:10:9d:8d:
         ee:24:0d:f3:d4:b6:f4:87:d7:cf:16:3f:3e:b5:4e:98:07:1e:
         3b:de:9d:d5:54:fd:15:73:56:b1:03:58:7c:e7:01:8a:c0:bf:
         2c:a0:6c:97:4e:32:ac:46:e2:8c:1a:87:ce:30:16:66:81:e9:
         24:24:bb:21
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtd0rsfR3o+2v1pEYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh
YWU3MB4XDTI1MDkzMDEzMDIyOFoXDTI1MTIyOTE0MDIyOFowLzEtMCsGA1UEAxMk
NzdhMzNhZjUtNjZmMy00YzEyLTg1NjktYWUwNjNkOTk4NjJlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAneltp2393OLVk99MgIu82oo9zK3GzbXLl1qQ
N0XTQfMJypp5FHJE+pzJ7Th8ONwQ99GBZ+s1nQjT+NpdcJez2lkU/qEHc59+Y0Or
F0dSN/3Mrdh+6vZHvb8hjNLzXY30LX+ypeAfpae+QH40Tb1hOzrt17bCtbBu+uyU
UZerNAMAmnzRPFCGm3cpaLDJb47S4Ejiv8Un5vLtV/zGVr9FPiPUz/WeR4Z+UctZ
SOkULd7OfPZqm7tIT11GrC/5aRe66QtkZH6VC/RL+MveKH6pRYolEjI/QHzzXa+o
yKBhE5DsAGoGnpg4dh7a83h786gJRcC5RQzoR52LyJHbk8PAhwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNVXV0DLY9cvjkF2TatIalcgmUFJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3
MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvODU4N2QyMDctZWEzNC0z
NzBiLWJmNTEtZDQ2NjFlNDJlZWY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0
YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj
YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw
OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQlw4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALS96sa2Xgn4qDb/XLLZHGhWZiu6SbykYBN4KPYNg8qRs0gPnAyDnj1S
q5s88y9AEfc3aqT0pS+e4SIWkEUeXfngjrKY+MTytaH8L4I7Zosn79RPYp/ZhWYT
9SszI9O48P/3NvScV1t2dDSMPTVaJ7vfmMgAEMLdfiH7S0kGf6UUGJnkgV54YMtA
3KsiUq+CwYfR+6NYAJX16JhWAImFIXFgQKxO2wogm4KKr2vcakQTWdAj5V69fEm8
pA6sdyatOH0TmxCdje4kDfPUtvSH188WPz61TpgHHjvendVU/RVzVrEDWHznAYrA
vyygbJdOMqxG4owah84wFmaB6SQkuyE=
-----END CERTIFICATE-----
Generated at Sat Oct 11 08:59:51 2025 by rpki-client