Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/597e4180-e7a8-37d3-8b6b-54fdcabb7f4b.roa
File:                     597e4180-e7a8-37d3-8b6b-54fdcabb7f4b.roa (raw, json)
Hash identifier:          vu79PP8bXztc3hK8Z2d20A/E427yVsDMQG8Af/VSud8=
Subject key identifier:   D2:3C:E5:6A:48:29:ED:24:FF:30:C8:0B:58:E2:39:F2:CE:A9:93:4B
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584E508486FEE4F65B2966096480
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/597e4180-e7a8-37d3-8b6b-54fdcabb7f4b.roa
Signing time:             Sat 27 Jun 2026 21:00:12 +0000
ROA not before:           Sat 27 Jun 2026 21:00:12 +0000
ROA not after:            Fri 25 Sep 2026 21:00:12 +0000
asID:                     132372
IP address blocks:        66.93.172.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:50:84:86:fe:e4:f6:5b:29:66:09:64:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Jun 27 21:00:12 2026 GMT
            Not After : Sep 25 21:00:12 2026 GMT
        Subject: CN=6c3840f3-3729-405f-8cf7-2c45afceee4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:f9:48:af:4d:65:de:d6:6a:26:84:40:71:e4:
                    bb:a2:3e:b5:86:2e:db:d9:d7:28:dd:cc:51:a2:be:
                    75:82:aa:0a:e8:40:ef:a5:6e:13:34:81:7e:37:26:
                    0b:44:43:3a:6d:b5:9c:08:6f:6a:c8:bd:c3:bb:f8:
                    3a:25:cf:b2:bf:d8:7a:31:95:6b:17:55:59:26:47:
                    10:ae:1f:26:05:74:30:64:d8:c5:9c:e2:73:65:ca:
                    c2:a9:10:08:bb:ba:c2:12:cf:ae:34:fe:9f:f7:5d:
                    ee:86:32:d9:4d:3f:62:61:84:24:54:f1:86:38:e5:
                    2b:32:4c:43:c3:81:32:2a:e4:41:ca:7c:9b:93:35:
                    fd:88:d0:9b:fd:60:34:a1:d9:a7:0b:37:5a:ca:8b:
                    c4:68:1d:46:76:30:5f:ff:05:44:ae:5b:a3:e9:71:
                    c8:a5:5f:32:78:c9:17:dc:66:04:c3:8a:06:5e:72:
                    d3:b4:38:ae:78:4d:31:60:5d:62:25:5c:8e:11:a1:
                    00:61:e6:69:e0:39:c4:de:83:b8:38:f1:ea:60:30:
                    32:9c:c8:26:35:14:0d:48:15:d3:9b:5a:01:ed:19:
                    82:37:e5:5f:de:36:54:a6:43:6d:e0:3d:76:47:1f:
                    c4:d9:4f:39:7f:00:f2:8b:f8:87:a5:e4:0d:78:f2:
                    16:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:3C:E5:6A:48:29:ED:24:FF:30:C8:0B:58:E2:39:F2:CE:A9:93:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/597e4180-e7a8-37d3-8b6b-54fdcabb7f4b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.93.172.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         aa:db:29:0f:47:0f:cc:e5:0e:dd:0c:9a:12:34:b4:2e:fa:bd:
         1c:72:41:cb:dd:a0:d4:be:d4:d5:eb:a8:0e:8a:ed:9d:a9:48:
         46:19:20:f3:9d:21:e8:76:8e:d3:a8:48:3a:3f:97:0d:1e:f2:
         4c:23:4b:3a:e8:98:c8:94:20:95:04:48:9b:68:9d:5d:dd:94:
         4a:d8:8e:7a:e9:fe:72:d6:21:c7:01:a8:dc:ba:05:7b:d8:4a:
         33:3c:12:67:44:4c:65:29:58:c8:a9:fe:6d:39:eb:2c:fd:88:
         d7:90:66:bb:14:73:90:40:e6:ce:12:02:f9:a5:9c:b4:53:54:
         00:58:ad:f2:8d:59:71:d1:28:d7:4a:2d:e1:60:13:c0:c1:b8:
         f3:f7:c7:6f:51:e1:fc:62:e2:b8:8b:18:ea:ee:4d:06:8a:77:
         ba:53:07:42:f9:3b:77:88:28:82:cc:9d:9d:69:7e:94:7f:bb:
         da:af:d6:75:1c:bc:a0:07:07:77:f1:34:47:49:e2:a5:dc:13:
         47:88:d9:ed:34:fd:7c:42:dd:1c:45:fa:8c:9a:19:af:01:81:
         0a:8d:17:54:ce:0c:ac:b8:15:a5:78:bc:cc:71:0b:29:22:2e:
         9c:58:97:93:c0:78:d0:13:a4:e9:2e:2e:85:5a:b1:d7:b7:61:
         78:8f:fd:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 10 13:49:36 2026 by rpki-client