Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/439d7892-dd0a-34dc-800e-4c08b1b945ed.roa
File:                     439d7892-dd0a-34dc-800e-4c08b1b945ed.roa (raw, json)
Hash identifier:          iYs2Fnz9V7MVanLBLvJiw0GbdzLpoi5pYB2YIl2stmk=
Subject key identifier:   7B:F3:A7:11:A1:B5:89:E7:CB:66:C7:41:70:2D:F0:67:94:33:93:BB
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584D571F974DC143B4026FEA2860
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/439d7892-dd0a-34dc-800e-4c08b1b945ed.roa
Signing time:             Mon 30 Mar 2026 13:00:30 +0000
ROA not before:           Mon 30 Mar 2026 13:00:30 +0000
ROA not after:            Sun 28 Jun 2026 13:00:30 +0000
asID:                     19016
IP address blocks:        66.92.38.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 16 Apr 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:57:1f:97:4d:c1:43:b4:02:6f:ea:28:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Mar 30 13:00:30 2026 GMT
            Not After : Jun 28 13:00:30 2026 GMT
        Subject: CN=e3ca2522-85e7-465c-a905-8b3a40d70372
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:b0:94:66:af:b5:c8:72:27:3b:a7:c8:54:ad:
                    c2:4b:28:eb:18:51:cf:66:9d:08:96:3e:79:25:8e:
                    66:ee:36:03:75:2e:07:ca:8a:5d:35:12:08:9b:ab:
                    ef:fa:3a:0f:e3:d6:06:b0:0a:20:4e:e8:e7:d9:d7:
                    a6:e7:44:ad:fe:63:18:c7:2f:fc:f0:ed:91:18:55:
                    6f:b7:66:d4:84:84:09:5b:4d:60:bc:7a:e2:8e:c6:
                    a3:5e:d5:c0:69:30:b9:c4:e4:12:20:cd:bd:e1:ed:
                    e0:b1:70:96:8a:e8:e7:49:9a:ec:7a:9d:9b:dc:84:
                    78:1b:1a:74:00:a7:2f:22:da:d8:c2:90:31:e0:01:
                    c7:ff:23:af:1e:27:e0:87:e8:44:b4:0b:f9:e0:17:
                    86:b8:e6:ee:a8:27:80:87:29:d6:99:e4:7a:b2:fe:
                    df:3b:c3:b9:af:eb:12:6c:0e:65:11:32:d6:33:c2:
                    8a:ad:af:1c:4d:a7:7f:d5:50:bd:7d:2a:b4:31:df:
                    98:07:16:dc:38:6d:46:4a:b8:63:b8:3d:c3:30:6c:
                    95:9a:51:67:c3:df:e0:9f:b9:5d:f1:b0:44:1e:ab:
                    1a:67:d9:a8:d5:9d:f1:1d:d2:f0:6d:8e:f2:39:97:
                    e9:df:99:d6:b5:b3:16:cb:ef:15:85:59:8f:be:45:
                    e7:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:F3:A7:11:A1:B5:89:E7:CB:66:C7:41:70:2D:F0:67:94:33:93:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/439d7892-dd0a-34dc-800e-4c08b1b945ed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.92.38.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:f9:66:6c:de:22:38:04:4f:cc:63:c0:cb:11:20:8b:29:49:
         e3:e0:b0:e2:77:18:92:04:6d:aa:7a:44:6a:d3:50:6a:c0:d3:
         b3:3b:d9:37:1f:78:29:64:91:d6:bf:c3:34:9c:44:cd:7c:c7:
         73:08:14:03:1d:8a:00:cf:6e:02:60:95:d1:81:60:59:d9:ff:
         ff:55:39:bf:f5:0c:14:66:a4:7e:a1:47:98:ad:b6:8f:86:06:
         44:92:2c:0d:32:cb:c6:70:a4:51:73:a4:b6:1b:fd:83:36:67:
         3f:74:6a:10:65:12:a5:f7:7e:7d:37:43:dd:25:68:9a:58:5f:
         7b:a9:99:4c:b5:7d:49:17:e3:94:e8:f1:cc:3e:fc:cd:ba:2d:
         d6:64:7d:9f:c6:9e:5a:4e:05:0a:a1:01:4a:c1:72:02:0e:b8:
         f1:85:7b:69:48:45:44:1f:da:7a:50:70:06:3d:a4:00:a7:c7:
         c7:bd:6c:01:dd:de:86:7a:58:01:f2:a7:94:08:d5:69:4e:cf:
         69:ea:24:b6:6f:27:ff:e4:d0:59:8e:ef:76:24:ae:2c:48:10:
         50:1f:d8:55:23:e8:c3:ea:c6:78:68:59:d1:11:04:6b:76:81:
         77:f1:f8:74:4b:8f:c2:68:63:ea:f8:c2:1f:cb:07:4c:23:4a:
         30:b1:6d:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 15 02:53:20 2026 by rpki-client