Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/4891a10a-8ac9-3874-be24-c738e9a6dc8c.roa
File:                     4891a10a-8ac9-3874-be24-c738e9a6dc8c.roa (raw, json)
Hash identifier:          6Fdlvo+FzP6YAEW00L9cjlfVQbuthM390gJgA27/ECA=
Subject key identifier:   09:B5:BC:E4:8B:4B:66:5C:EE:B9:43:82:23:77:0D:7F:0E:D1:A7:12
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584F4973135830652BEBD1B48900
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/4891a10a-8ac9-3874-be24-c738e9a6dc8c.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     152672
IP address blocks:        66.93.170.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:13:58:30:65:2b:eb:d1:b4:89:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=76ba4360-c072-42c3-b233-4d2e471fce67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:0b:af:90:98:56:b5:ea:d5:fd:6d:34:0c:d5:
                    bc:df:f0:fb:6f:b8:82:f1:04:9b:0f:6b:01:f6:f0:
                    2c:c9:61:53:41:01:32:13:c8:4b:8b:84:9f:0b:c6:
                    7d:e4:84:97:ba:28:bb:db:40:52:94:2e:b1:83:53:
                    06:f0:f1:a1:2d:32:db:71:7f:67:64:0f:8e:8b:f7:
                    3e:5b:f4:ef:ce:aa:2e:b2:6a:a2:b3:5b:cc:47:e8:
                    fe:74:54:22:d6:ab:81:95:1d:d6:8e:44:4c:d2:51:
                    cb:28:a4:cc:10:a2:30:b9:e4:70:b3:18:b8:8d:c6:
                    18:c8:ba:8a:66:04:e3:b0:d6:67:e3:87:5a:3e:a6:
                    41:17:e6:c2:e9:1e:6e:01:a9:ca:65:5a:3f:54:e7:
                    ce:d1:ae:a7:f9:e1:c2:a7:eb:b4:cb:8a:42:e1:f4:
                    5c:51:75:c5:90:41:20:35:46:e2:d8:27:9c:78:e2:
                    bf:09:01:65:60:1e:5a:73:ab:dc:09:c4:0c:82:3b:
                    a9:0d:f8:17:cb:27:4c:0f:61:c8:02:37:c8:f5:f4:
                    fc:ff:23:c8:ed:10:ea:38:38:1a:83:33:ef:e3:04:
                    97:33:85:34:48:ec:43:c3:97:0e:b2:a1:1c:90:13:
                    76:87:ce:32:99:e2:e2:06:c2:9a:5b:ec:39:e3:bd:
                    39:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:B5:BC:E4:8B:4B:66:5C:EE:B9:43:82:23:77:0D:7F:0E:D1:A7:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/4891a10a-8ac9-3874-be24-c738e9a6dc8c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.93.170.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:98:1c:95:7e:bc:5a:f6:49:26:f5:83:e0:0e:d8:56:c5:3c:
         13:ff:b9:4b:f8:c4:4a:f3:cb:4b:4d:16:26:3e:49:ab:73:d5:
         0e:43:6d:2d:6e:53:36:15:35:b1:e4:f7:1d:cf:ea:b9:5b:2d:
         ee:e8:b0:06:ab:4d:5f:df:d9:75:c8:4d:0d:e1:70:31:7d:25:
         9f:66:6b:27:ad:4f:3e:b7:91:e1:e4:b0:bc:55:7e:2a:e1:5b:
         07:7b:22:c7:c5:6a:97:3f:15:75:cb:c9:f5:b4:ea:fb:bc:5c:
         c8:de:9f:9d:97:73:3c:a8:ec:a6:c1:be:1b:50:9a:95:11:e9:
         fa:97:65:5d:ce:59:29:ab:5d:18:fd:70:a1:ee:43:25:fd:fb:
         57:aa:a0:f5:5d:d2:65:9e:85:bc:73:ff:3d:d6:68:7c:b0:bb:
         d6:c9:a0:96:a9:08:50:39:20:f5:6c:7c:7c:a3:6c:d9:d0:ab:
         05:c3:b2:e3:3b:7c:c8:9e:ea:aa:b7:08:96:af:9d:c8:03:ad:
         e3:74:2d:01:d5:9f:9e:4a:ff:bd:51:d4:b8:9b:3b:f7:ad:23:
         5c:bf:0a:3e:be:54:e0:3c:4e:52:26:dd:34:b7:28:35:ba:28:
         29:ac:f3:30:f8:0a:81:2d:85:5e:a4:24:d2:17:ed:dd:15:e3:
         aa:ef:80:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 07:03:11 2026 by rpki-client