Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/25b3c12c-c9cb-3b39-99b9-729127665a67.roa
File:                     25b3c12c-c9cb-3b39-99b9-729127665a67.roa (raw, json)
Hash identifier:          kpJUsVrrnRkQZ2N1v/Jt8QQDS8MCUPvqFAKW1mI/edQ=
Subject key identifier:   31:A7:4A:34:57:00:88:F1:77:8E:7B:44:DC:A9:7B:03:99:63:A9:06
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584D7538AAF2D3A1057529CF2D80
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/25b3c12c-c9cb-3b39-99b9-729127665a67.roa
Signing time:             Fri 10 Apr 2026 07:45:20 +0000
ROA not before:           Fri 10 Apr 2026 07:45:20 +0000
ROA not after:            Thu 09 Jul 2026 07:45:20 +0000
asID:                     401861
IP address blocks:        66.92.35.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Apr 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:75:38:aa:f2:d3:a1:05:75:29:cf:2d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Apr 10 07:45:20 2026 GMT
            Not After : Jul  9 07:45:20 2026 GMT
        Subject: CN=4c660654-ccd7-4abf-af83-9761f171325a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:4e:bd:8a:2c:60:22:37:d7:91:44:9a:e0:03:
                    2b:37:e2:ec:d2:b1:df:36:85:6b:81:00:b8:75:91:
                    26:7d:63:e4:1b:de:3d:23:70:21:f1:95:6b:68:1f:
                    cc:e0:94:1f:c1:84:dc:08:26:5c:63:eb:dc:f2:96:
                    9a:2c:62:10:12:d9:c0:74:7c:12:0e:38:3d:28:e3:
                    9c:1b:eb:ef:11:4d:f2:2a:24:9f:82:7c:04:a0:32:
                    59:b0:79:51:fb:bb:7f:38:74:bb:85:07:04:dc:26:
                    2f:79:c7:04:bb:02:60:f5:51:1e:44:74:43:c1:88:
                    0f:eb:55:d6:91:18:3b:57:28:78:cf:a5:15:ec:77:
                    d7:05:27:19:78:a4:bc:7f:98:cc:56:06:32:0b:63:
                    c8:47:a7:e1:23:e3:01:09:a2:1b:98:15:af:b1:23:
                    de:71:6e:fc:77:e5:26:fa:c8:f4:b9:fb:b5:5e:69:
                    f3:51:72:43:59:04:cf:7b:99:9c:5c:9b:25:de:bc:
                    f6:2c:56:8c:82:c9:f9:e4:91:f0:e3:bf:cb:9a:a9:
                    4c:75:56:2e:f6:ff:cd:32:f9:56:65:42:fc:ec:76:
                    a5:fc:d4:33:27:e3:33:9c:ba:c2:d4:d4:e7:40:f7:
                    c7:a4:cc:e9:ef:f6:e3:ec:84:97:64:59:f8:09:14:
                    76:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:A7:4A:34:57:00:88:F1:77:8E:7B:44:DC:A9:7B:03:99:63:A9:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/25b3c12c-c9cb-3b39-99b9-729127665a67.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.92.35.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:9d:8a:a7:e0:83:97:0b:fb:3e:8e:bc:5a:dd:53:bd:e4:66:
         89:c8:f8:13:6b:32:93:38:fe:32:c3:d0:f4:f5:2a:7c:81:61:
         40:7e:35:37:65:3a:a6:d6:b6:91:0d:22:25:d1:0d:e8:85:de:
         ac:d6:9f:0c:43:05:6f:5d:f0:a6:09:ae:e0:b2:b0:94:3b:5f:
         5a:0f:0b:b2:db:3c:aa:45:4c:84:1e:9a:ac:97:d8:11:24:8e:
         10:d2:ac:1b:7d:dd:8e:a3:ff:f5:e5:f8:94:01:8f:9c:fa:0a:
         ba:28:c2:3f:06:df:7c:d9:e6:72:12:f0:25:e5:e8:13:55:b3:
         1d:27:2c:68:3e:f4:53:ad:58:c4:5d:17:1b:c0:fa:3b:ee:57:
         be:dc:ba:58:a0:3f:66:3b:ee:22:4a:a9:80:c9:c1:6f:1c:ae:
         b1:23:90:5e:10:c4:5d:bd:88:85:c0:83:70:d5:8a:ae:60:44:
         58:3d:97:bf:cb:88:d7:e5:aa:0a:00:2c:86:7f:39:fa:72:3d:
         91:44:eb:cd:50:04:86:9f:12:1f:dd:37:8c:5c:0f:00:8f:9f:
         ae:fe:25:7c:3c:32:9f:e6:95:3e:72:78:45:aa:c3:5e:09:20:
         58:28:6d:ce:06:80:2d:39:88:60:41:56:34:05:6d:ca:38:28:
         51:b3:27:77
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE11OKry06EFdSnPLYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh
YWU3MB4XDTI2MDQxMDA3NDUyMFoXDTI2MDcwOTA3NDUyMFowLzEtMCsGA1UEAxMk
NGM2NjA2NTQtY2NkNy00YWJmLWFmODMtOTc2MWYxNzEzMjVhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjk69iixgIjfXkUSa4AMrN+Ls0rHfNoVrgQC4
dZEmfWPkG949I3Ah8ZVraB/M4JQfwYTcCCZcY+vc8paaLGIQEtnAdHwSDjg9KOOc
G+vvEU3yKiSfgnwEoDJZsHlR+7t/OHS7hQcE3CYveccEuwJg9VEeRHRDwYgP61XW
kRg7Vyh4z6UV7HfXBScZeKS8f5jMVgYyC2PIR6fhI+MBCaIbmBWvsSPecW78d+Um
+sj0ufu1XmnzUXJDWQTPe5mcXJsl3rz2LFaMgsn55JHw47/LmqlMdVYu9v/NMvlW
ZUL87Hal/NQzJ+MznLrC1NTnQPfHpMzp7/bj7ISXZFn4CRR2bwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDGnSjRXAIjxd457RNypewOZY6kGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3
MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMjViM2MxMmMtYzljYi0z
YjM5LTk5YjktNzI5MTI3NjY1YTY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0
YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj
YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw
OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQlwjMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC6diqfgg5cL+z6OvFrdU73kZonI+BNrMpM4/jLD0PT1KnyBYUB+NTdl
OqbWtpENIiXRDeiF3qzWnwxDBW9d8KYJruCysJQ7X1oPC7LbPKpFTIQemqyX2BEk
jhDSrBt93Y6j//Xl+JQBj5z6Croowj8G33zZ5nIS8CXl6BNVsx0nLGg+9FOtWMRd
FxvA+jvuV77culigP2Y77iJKqYDJwW8crrEjkF4QxF29iIXAg3DViq5gRFg9l7/L
iNflqgoALIZ/OfpyPZFE681QBIafEh/dN4xcDwCPn67+JXw8Mp/mlT5yeEWqw14J
IFgobc4GgC05iGBBVjQFbco4KFGzJ3c=
-----END CERTIFICATE-----
Generated at Fri Apr 10 23:14:05 2026 by rpki-client