Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/c0f7e605-71de-3874-b8ac-7085315fa7bc.roa
File:                     c0f7e605-71de-3874-b8ac-7085315fa7bc.roa (raw, json)
Hash identifier:          GPCPsCUp0rXG8kyhoItsclXqetVLIdpCbhTChMU/2fo=
Subject key identifier:   15:35:60:4D:8D:12:F0:1E:F1:10:D4:7E:6C:93:8A:4B:8E:77:21:4A
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584B6BC7761E2DE522D3931476A0
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/c0f7e605-71de-3874-b8ac-7085315fa7bc.roa
Signing time:             Sun 05 Oct 2025 13:00:40 +0000
ROA not before:           Sun 05 Oct 2025 13:00:40 +0000
ROA not after:            Sat 03 Jan 2026 14:00:40 +0000
asID:                     400202
IP address blocks:        66.92.209.0/24 maxlen: 24
                          66.92.210.0/24 maxlen: 24
                          66.92.211.0/24 maxlen: 24
                          66.92.212.0/24 maxlen: 24
                          66.92.217.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:6b:c7:76:1e:2d:e5:22:d3:93:14:76:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Oct  5 13:00:40 2025 GMT
            Not After : Jan  3 14:00:40 2026 GMT
        Subject: CN=09eb2952-8cda-44f5-b284-bd1e5889a9aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:e0:6d:4e:4d:d9:e5:76:63:22:4e:b0:90:d0:
                    b4:9b:8c:d6:25:37:a5:2a:8c:15:8e:09:9a:52:3c:
                    37:26:4d:cf:b0:e8:b7:06:18:4b:46:66:62:46:4b:
                    b4:16:99:36:2f:92:10:ea:fc:88:6a:5c:88:c6:12:
                    be:79:82:5d:c6:9d:9b:58:72:e8:ce:b4:66:b5:97:
                    58:43:ff:a2:74:f1:e2:57:14:4e:c7:89:c1:12:78:
                    82:a8:a8:cd:ca:ce:93:56:f6:0d:35:f6:50:5b:18:
                    63:b0:3a:3f:5b:9f:3a:ad:bd:10:0c:58:d1:13:25:
                    80:cd:ce:08:68:21:dc:36:fb:5e:f0:d8:2c:cb:3d:
                    fc:c9:d7:8b:50:80:a8:eb:71:b2:df:b4:c2:90:c0:
                    e6:76:e9:2a:6a:4e:e3:54:65:f5:83:c1:cb:33:a5:
                    90:ac:52:e8:4f:8e:27:c4:07:11:89:92:2a:4a:52:
                    6d:87:43:81:6b:99:ce:d9:12:fb:2b:3f:df:4d:e5:
                    b1:a0:82:fe:c8:ec:df:df:76:00:09:09:12:43:90:
                    eb:f3:5b:f5:0f:79:60:8b:65:c2:56:6c:c3:53:04:
                    ca:20:0c:ee:d5:44:4e:fe:85:ef:50:cb:35:77:29:
                    c0:11:7f:0e:ac:f2:b6:d0:bf:5c:86:65:49:ea:b5:
                    52:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:35:60:4D:8D:12:F0:1E:F1:10:D4:7E:6C:93:8A:4B:8E:77:21:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/c0f7e605-71de-3874-b8ac-7085315fa7bc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.92.209.0-66.92.212.255
                  66.92.217.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b5:6f:bf:d9:da:10:d2:1f:94:7e:6c:f6:57:cf:42:34:83:8b:
         89:0c:a9:e3:0b:53:14:7a:38:e1:b5:46:ba:81:ed:7a:99:15:
         6f:59:0f:07:eb:d1:6e:44:a8:d6:9e:bd:c4:0e:36:f0:ef:16:
         e5:48:4a:e7:98:cd:fb:cc:a9:96:00:10:9c:34:2f:9b:46:20:
         38:33:69:1b:6f:bc:6c:50:d3:6c:d2:61:53:27:a8:22:b1:2c:
         e3:2a:cd:46:23:3f:13:5b:c4:d8:fd:bd:7b:c5:2f:b4:55:b8:
         18:5b:d1:b2:0f:42:6f:6c:f6:33:4f:71:5d:c0:8b:29:a4:6d:
         0b:6c:62:37:ed:ba:66:31:d8:4f:c3:54:76:8e:66:d8:17:d6:
         d9:5d:37:ae:99:80:28:c3:49:29:b8:26:05:93:d0:a2:1d:5f:
         d0:53:0c:75:b2:11:32:1f:fb:bd:4b:c5:88:09:ad:11:43:61:
         4a:97:86:ec:a2:c9:89:d1:63:61:4a:f1:16:20:87:c5:22:f8:
         81:4f:4c:b3:6d:c3:68:dd:0d:bd:81:5d:1f:f5:74:97:70:ee:
         ad:06:f4:92:3b:c6:b7:ff:19:4a:97:0a:5e:06:c3:46:87:f0:
         ff:e3:6c:ce:f1:94:fb:e6:1f:f6:ae:ce:8a:b7:bd:93:e1:8a:
         6f:47:48:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 08:56:41 2025 by rpki-client