Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/be1fbb6d-42e5-30c2-952e-ab1aa8363279.roa
File:                     be1fbb6d-42e5-30c2-952e-ab1aa8363279.roa (raw, json)
Hash identifier:          s96QZLT4GgNOU6AF/6aBxl4UvQK9HohOzJgG+L12kJ0=
Subject key identifier:   8C:CA:CD:F9:43:C7:61:F7:14:7A:05:D6:95:C9:01:30:C2:98:0A:72
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584B636751209C865158162B7080
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/be1fbb6d-42e5-30c2-952e-ab1aa8363279.roa
Signing time:             Thu 02 Oct 2025 13:00:40 +0000
ROA not before:           Thu 02 Oct 2025 13:00:40 +0000
ROA not after:            Wed 31 Dec 2025 14:00:40 +0000
asID:                     152672
IP address blocks:        66.92.223.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:63:67:51:20:9c:86:51:58:16:2b:70:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Oct  2 13:00:40 2025 GMT
            Not After : Dec 31 14:00:40 2025 GMT
        Subject: CN=ef4802c7-a1cc-4f2e-b64a-1fe479c811c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:21:fc:38:40:e3:d1:78:a1:72:3a:e9:43:25:
                    3e:91:55:13:fa:f1:ee:71:b6:86:51:89:29:ad:60:
                    5f:17:3b:89:ad:d2:f8:0b:92:70:a5:05:9a:5b:35:
                    e8:10:b8:66:91:11:bf:88:18:9a:36:d1:50:75:42:
                    17:6e:17:7d:81:06:24:78:23:2b:96:c9:28:ca:86:
                    cb:c0:2a:c1:b7:4c:24:4c:f0:43:40:e2:b0:5c:b6:
                    37:c9:0e:28:22:a6:c8:c5:78:c2:d3:75:a7:eb:51:
                    f4:dd:26:7e:8e:20:51:db:b3:20:fc:82:89:32:2a:
                    c0:13:bd:e0:55:d4:39:10:83:ea:1d:19:cc:01:c7:
                    5e:9a:ba:fc:4b:7e:8f:f6:fc:d9:fb:8f:01:8e:a7:
                    5a:ca:3a:66:d6:b6:e3:47:67:33:d0:df:a3:83:57:
                    70:e3:aa:35:52:e6:0d:34:69:9a:f3:ca:1f:eb:5b:
                    24:9f:7e:5f:d3:d6:e6:20:12:b3:cf:5c:4e:47:85:
                    85:d0:11:2e:c5:bf:e8:83:dc:18:7b:69:bf:64:24:
                    6c:ea:a3:84:f7:c7:34:18:2d:cf:47:94:4e:a2:cc:
                    34:18:bb:04:cf:48:25:81:4b:ce:12:bf:25:9b:57:
                    f9:80:e1:aa:05:b2:99:0e:05:6f:b0:c5:c7:7b:20:
                    d8:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:CA:CD:F9:43:C7:61:F7:14:7A:05:D6:95:C9:01:30:C2:98:0A:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/be1fbb6d-42e5-30c2-952e-ab1aa8363279.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.92.223.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:43:f1:73:b0:98:9d:fd:00:a0:67:6f:04:66:90:1b:0e:fe:
         11:90:0b:23:41:fd:60:0c:d6:ac:97:a5:e1:1c:68:ea:1d:78:
         72:48:b1:f8:79:e1:17:17:0f:f7:b7:31:4a:35:97:8d:ab:90:
         c1:5b:c3:4e:3b:e1:ec:80:fc:ee:cb:5f:38:ef:47:e2:5e:c3:
         2f:d7:4a:b9:13:c4:42:b8:9e:32:cc:e6:fa:ed:0b:42:f0:e2:
         c5:2e:b9:40:1a:fe:3d:8a:9a:2d:df:74:f4:af:b7:13:f4:70:
         ba:41:bd:5a:31:83:2e:a1:cc:7e:dd:83:b1:a1:a5:63:40:6b:
         da:6f:2d:d3:d2:dd:25:02:b0:fc:58:2f:a9:d5:37:55:43:ea:
         b4:97:ac:df:03:f8:93:e7:a1:7a:43:32:fa:e3:a3:f7:2e:3b:
         ae:a1:0c:37:b2:cf:17:6c:35:94:d2:ff:ac:0b:b0:ac:d2:ce:
         be:81:8d:28:84:55:cd:32:22:b2:e2:69:6b:b3:2e:0b:9d:00:
         f7:bf:19:56:ac:05:b4:70:9a:ae:c8:2a:be:87:45:34:f7:ef:
         4e:a6:ee:89:7f:c3:5a:fd:11:5f:aa:ba:69:af:4e:ec:10:f9:
         f0:a6:9d:29:da:7a:f0:9c:4e:9f:03:6c:1c:14:4f:e6:e2:93:
         95:53:29:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 08:54:17 2025 by rpki-client