Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/4261d021-1da7-3e74-b41e-a8788c762ff4.roa
File:                     4261d021-1da7-3e74-b41e-a8788c762ff4.roa (raw, json)
Hash identifier:          sPmLkNlrsGX6TpOT3eXYtM2QwDbwQ40W10+IZ8ZIJpE=
Subject key identifier:   5B:C8:8A:BB:92:92:AC:72:DB:82:D2:78:A8:FA:BA:12:83:95:FB:EA
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584F4C3D3D2D1AD9324DCAD6BF90
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/4261d021-1da7-3e74-b41e-a8788c762ff4.roa
Signing time:             Sat 26 Sep 2026 01:00:13 +0000
ROA not before:           Sat 26 Sep 2026 01:00:13 +0000
ROA not after:            Fri 25 Dec 2026 02:00:13 +0000
asID:                     5065
IP address blocks:        66.93.66.0/24 maxlen: 24
                          66.93.69.0/24 maxlen: 24
                          66.93.80.0/24 maxlen: 24
                          66.93.250.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 Oct 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:4c:3d:3d:2d:1a:d9:32:4d:ca:d6:bf:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Sep 26 01:00:13 2026 GMT
            Not After : Dec 25 02:00:13 2026 GMT
        Subject: CN=f1bd8587-ddca-4dd9-9aa6-6c4d85932b10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:cb:e0:76:58:44:a3:b2:ca:ac:e1:98:9b:0a:
                    b2:5f:2b:fd:0f:6b:b4:77:fe:c0:a8:44:14:ec:41:
                    76:12:bd:3e:a6:8f:1c:fc:ed:c7:5b:fa:82:b6:e3:
                    11:14:79:8a:c2:56:66:ae:85:72:fd:f0:24:10:0e:
                    be:47:31:d4:c6:db:16:93:2d:66:4e:a4:fb:18:45:
                    09:3b:63:d4:22:b5:aa:ee:67:18:f1:a0:7a:11:f6:
                    9f:0b:bc:1b:d2:31:1c:e1:70:06:8c:99:6a:72:73:
                    9c:51:81:47:10:02:69:4c:12:78:bd:3f:63:ae:ca:
                    1c:f5:c0:a3:3f:30:c0:52:2b:65:b5:fe:04:70:cb:
                    19:d5:93:61:9a:45:21:31:38:9e:76:0c:2b:ee:39:
                    0e:a5:ae:98:62:dc:9c:5f:c9:44:8b:2b:ba:90:e1:
                    c0:85:df:7c:68:d3:b3:35:1e:19:0f:60:54:4a:ea:
                    2e:08:43:4f:7b:c0:0d:9d:5e:1f:5c:c7:fa:f8:58:
                    7f:d3:20:c2:8c:38:5e:b2:10:13:41:94:27:91:9c:
                    0c:11:8b:fe:80:75:46:00:bf:81:80:e2:5e:34:03:
                    75:6d:1c:bb:05:23:bb:38:bc:3d:cf:d5:4e:31:3d:
                    42:c5:81:1e:2b:76:9c:f1:59:b6:96:6a:5b:b8:8b:
                    67:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:C8:8A:BB:92:92:AC:72:DB:82:D2:78:A8:FA:BA:12:83:95:FB:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/4261d021-1da7-3e74-b41e-a8788c762ff4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.93.66.0/24
                  66.93.69.0/24
                  66.93.80.0/24
                  66.93.250.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:e3:4a:a8:06:19:6e:45:cd:62:73:76:77:27:32:09:20:c5:
         3b:24:4f:1b:a3:b0:8d:d2:ac:3c:f4:25:3f:fb:3c:89:f3:87:
         06:6f:6b:6b:a9:f7:c3:3a:53:a1:2d:8e:be:76:9f:ce:b6:98:
         1e:12:d2:d7:22:5a:66:45:95:c8:50:ad:b8:c6:bf:6d:43:3a:
         2d:b2:f2:33:a8:60:b2:fa:a6:e5:c1:fa:1d:18:4a:b3:88:f3:
         60:49:d8:f4:ae:28:c0:cc:68:f3:f2:79:cc:2c:ad:80:70:2c:
         ff:73:28:65:9b:a3:b0:fb:10:2d:c6:35:61:85:79:28:e8:a4:
         4d:9b:88:77:b7:14:92:8c:c7:5b:52:c5:c4:0c:9b:5a:9c:3d:
         fe:5d:d7:78:6e:81:a9:2c:b8:81:49:5b:c6:63:ae:7f:46:0b:
         6b:2a:94:71:5c:3c:4f:db:b5:68:ae:c7:c9:f0:a5:bc:00:d3:
         2c:11:ca:e4:b7:1b:60:ed:a2:dd:95:14:28:7b:56:7b:d0:46:
         2c:8e:05:c1:35:71:5c:12:9a:30:c6:16:e1:0b:13:bf:9e:5a:
         c9:23:31:e2:d0:0c:2d:ee:34:6d:c9:db:97:d1:10:bd:53:62:
         12:0b:6a:ae:3e:18:67:07:14:e3:31:9d:f1:78:fb:5e:f2:e5:
         01:63:6e:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 21:03:00 2026 by rpki-client