Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/7c3c71bd-0dcb-393a-9e49-46af72d4c774.roa
File:                     7c3c71bd-0dcb-393a-9e49-46af72d4c774.roa (raw, json)
Hash identifier:          xYBWMfyB9ay8y6BjLWNWXYnIbZUh9M8EvLtMxVhYHOs=
Subject key identifier:   37:62:0C:4F:53:4A:47:E5:27:0E:20:F6:A9:EB:86:5A:72:B1:F7:B1
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584DD07594A1B4B54054441B8100
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/7c3c71bd-0dcb-393a-9e49-46af72d4c774.roa
Signing time:             Wed 13 May 2026 00:06:37 +0000
ROA not before:           Wed 13 May 2026 00:06:37 +0000
ROA not after:            Tue 11 Aug 2026 00:06:37 +0000
asID:                     834
IP address blocks:        66.92.20.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 16 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:d0:75:94:a1:b4:b5:40:54:44:1b:81:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: May 13 00:06:37 2026 GMT
            Not After : Aug 11 00:06:37 2026 GMT
        Subject: CN=891b7f10-e5fb-40c3-96fb-3c6330eef0a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:39:84:22:a0:1d:54:06:07:b2:5b:80:20:23:
                    08:de:50:4f:4a:74:31:f7:48:be:e9:15:95:b9:00:
                    3f:e5:e1:a3:fe:3b:9c:4b:de:92:d1:7e:4d:37:7d:
                    d1:2b:3f:95:12:f6:ff:fc:2f:ba:9c:d3:09:2d:94:
                    c8:94:ab:16:82:24:b6:77:79:c0:cd:86:9b:54:d0:
                    64:d7:8c:89:e7:8d:cf:a7:4b:de:82:07:b8:01:a4:
                    01:aa:45:d0:49:e0:f4:ff:2c:7e:23:bf:96:8b:d7:
                    91:30:be:c4:9f:62:bc:aa:d4:d2:8d:44:6c:a2:cb:
                    ed:85:c6:87:e6:c9:db:b2:8c:1d:5a:97:d5:9f:62:
                    57:10:5c:ab:cc:ab:13:be:a5:72:08:4f:a8:90:c1:
                    d3:98:5d:23:8e:88:e2:32:f3:9e:a3:36:59:6e:9b:
                    98:4d:fa:f5:e6:94:f9:38:42:b3:a0:a0:86:99:8d:
                    0b:f0:a0:ee:f5:d2:09:02:ca:1a:db:f6:31:99:73:
                    e1:20:a1:39:56:7f:c4:f6:c0:42:18:02:e6:6c:89:
                    2d:fc:a1:e2:ac:9b:6c:68:6f:28:30:75:64:5f:fb:
                    cb:9b:a3:dd:6e:6f:f3:3b:58:52:2a:ad:a2:38:fc:
                    f9:25:b3:e1:cd:d0:62:2f:4f:d1:e7:af:75:94:56:
                    be:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:62:0C:4F:53:4A:47:E5:27:0E:20:F6:A9:EB:86:5A:72:B1:F7:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/7c3c71bd-0dcb-393a-9e49-46af72d4c774.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.92.20.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c2:0f:f4:66:7b:81:b5:d7:86:da:55:ed:2c:fe:68:9d:f1:2b:
         5f:ed:22:6f:a6:d5:77:01:71:01:82:03:f9:49:59:e4:6d:15:
         df:3a:18:d1:6a:cd:e4:22:c5:88:6c:a2:9a:1a:8c:47:df:a6:
         c6:4a:0f:a9:cd:15:a1:76:7f:15:cc:4b:e1:51:45:56:53:91:
         ba:eb:b7:fd:8b:36:93:a3:2a:0f:8e:0e:5e:1e:71:ae:35:9f:
         97:59:d4:ef:3e:0c:b3:bf:d4:55:28:d6:12:f6:76:be:37:71:
         fa:7e:ef:00:89:b1:63:ab:6f:5b:b9:0d:9b:ba:4f:99:9c:4a:
         d3:b4:08:bd:3a:92:fb:93:ea:8c:0c:c1:ed:47:d1:57:bb:66:
         7b:c7:3d:c8:30:53:ff:f6:de:b7:9a:f8:fa:25:90:15:cd:12:
         7c:a4:bc:14:38:d4:8b:5a:d1:5d:6c:77:08:23:9d:a5:49:c1:
         46:0c:1b:9d:a8:0c:e7:37:f7:a6:eb:6e:de:e0:4d:6b:81:53:
         f7:79:7b:4c:24:5d:a8:41:93:22:c9:0c:03:02:31:02:2b:a5:
         67:68:b8:eb:9e:f5:65:00:3c:db:60:de:29:3d:00:b3:bf:f1:
         f5:39:86:9c:3b:e5:a6:4f:84:9f:43:68:e5:40:a8:87:41:25:
         a6:35:e1:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 08:18:42 2026 by rpki-client