Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/057dc9f8-f534-3a0d-ad22-51d09117643f.roa
File:                     057dc9f8-f534-3a0d-ad22-51d09117643f.roa (raw, json)
Hash identifier:          0msgheTRxNcSg9AKEcKlu4RSaUH7Vg9k6QOigAhfSEo=
Subject key identifier:   45:F2:9C:D3:5A:9A:D6:2B:EF:56:A5:A5:E9:AF:30:0A:05:55:2B:72
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584DE84B5F0426D3AE604CE8CF20
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/057dc9f8-f534-3a0d-ad22-51d09117643f.roa
Signing time:             Thu 21 May 2026 13:00:32 +0000
ROA not before:           Thu 21 May 2026 13:00:32 +0000
ROA not after:            Wed 19 Aug 2026 13:00:32 +0000
asID:                     393427
IP address blocks:        66.93.188.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e8:4b:5f:04:26:d3:ae:60:4c:e8:cf:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: May 21 13:00:32 2026 GMT
            Not After : Aug 19 13:00:32 2026 GMT
        Subject: CN=ddd6b9a7-e0ed-4e82-9278-59555166c057
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:5d:32:4a:aa:86:93:d7:a6:02:a9:d1:d5:7f:
                    e2:ec:95:20:50:5b:a5:72:07:ae:9c:00:2d:38:0d:
                    26:98:68:d4:aa:51:1a:36:92:67:72:4d:dd:a4:b9:
                    fe:f8:f2:98:a0:16:51:2c:61:51:f7:bf:b4:95:60:
                    04:e9:09:f3:97:a8:31:89:c9:a8:46:b4:a0:ac:5e:
                    dc:fc:a7:8a:6d:cb:8c:72:86:cc:e0:4f:d4:f3:1c:
                    2e:b3:6a:ee:f2:42:6b:43:28:01:50:7d:97:2c:91:
                    11:66:d2:63:bd:7f:e6:78:6b:6b:56:d8:3f:17:d9:
                    d8:fc:2c:67:f2:62:9f:58:42:b0:73:da:4b:03:37:
                    dd:4f:4a:54:08:1d:70:13:8a:92:44:95:aa:e4:ba:
                    80:73:e7:80:9d:6a:02:9b:db:4a:7e:68:7b:93:08:
                    8b:50:1c:96:65:e1:00:5a:0c:6e:1c:7f:8d:d7:31:
                    ba:f4:82:2f:f1:ca:87:d6:e4:05:c3:a4:63:a7:8f:
                    3b:c4:d1:7d:ce:03:11:45:bc:6d:10:f4:d3:2b:04:
                    16:90:42:79:9d:21:ac:d4:de:f0:f1:97:c7:ae:0c:
                    a9:7b:6c:fd:38:51:4d:e8:f7:66:d2:c2:96:d6:9e:
                    bb:6a:55:80:0c:d7:c2:2c:85:f6:09:e5:ce:07:e0:
                    15:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:F2:9C:D3:5A:9A:D6:2B:EF:56:A5:A5:E9:AF:30:0A:05:55:2B:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/057dc9f8-f534-3a0d-ad22-51d09117643f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.93.188.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:fd:7f:f8:08:6c:78:f9:48:9d:cf:54:8c:b2:9e:70:26:f9:
         75:16:ad:93:26:f5:3d:e5:78:85:24:46:8b:8a:46:8a:41:51:
         be:ed:6e:4f:7f:b6:69:1c:2e:92:96:85:38:39:22:d2:76:bf:
         d5:45:1b:c8:e8:55:3b:d7:e1:bd:0c:80:0d:f1:08:97:44:b3:
         b1:38:1c:1c:14:04:32:36:aa:aa:bc:0d:53:4f:e8:70:4c:fa:
         ba:a2:fa:15:02:e2:bd:1f:b8:21:c6:41:d9:24:52:26:5b:31:
         c2:5c:fa:e9:e0:dd:c4:9a:ef:32:83:76:8f:ee:e2:39:55:81:
         bf:51:dc:44:7a:71:66:d6:54:36:76:1c:da:20:66:e3:b8:c6:
         2f:c7:26:a2:74:73:31:7c:b2:75:3c:f5:f8:3a:66:88:0f:99:
         47:20:f1:95:20:52:05:62:7e:fc:f9:d6:6b:bf:68:52:d5:62:
         37:ff:a8:7d:bb:dd:8c:8d:65:79:46:5a:81:83:a7:a5:30:cf:
         38:b5:41:6e:37:17:ce:45:5d:cc:9c:30:f6:5c:86:5c:c5:50:
         82:18:83:eb:49:31:16:26:e0:18:2c:7b:6b:6e:4b:00:2c:ac:
         4a:51:c4:8d:b9:a5:1e:01:a3:24:38:55:76:4c:4c:ee:16:5e:
         86:a5:a0:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 23 04:52:47 2026 by rpki-client