Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/8c6a163d-7e16-31da-87d0-670eff768332.roa
File:                     8c6a163d-7e16-31da-87d0-670eff768332.roa (raw, json)
Hash identifier:          0HJ/3Nx5KgYmazM9XEWyoC6iioGYE4uLfjkXrOfbnx0=
Subject key identifier:   BF:3C:D6:B4:00:13:28:EE:3D:15:95:F9:53:61:C4:77:23:CC:E3:B3
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584F473EF42FD97698FDDDF8CBC0
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/8c6a163d-7e16-31da-87d0-670eff768332.roa
Signing time:             Thu 24 Sep 2026 06:04:41 +0000
ROA not before:           Thu 24 Sep 2026 06:04:41 +0000
ROA not after:            Wed 23 Dec 2026 07:04:41 +0000
asID:                     21859
IP address blocks:        66.92.165.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:47:3e:f4:2f:d9:76:98:fd:dd:f8:cb:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Sep 24 06:04:41 2026 GMT
            Not After : Dec 23 07:04:41 2026 GMT
        Subject: CN=4292ae79-31ba-4e35-88f1-819e318889b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:d1:8a:e9:e1:f1:be:bb:ee:70:a8:6d:87:ae:
                    fe:84:7f:2b:87:88:c8:a4:90:74:7b:11:0a:41:9d:
                    38:fb:50:a4:02:01:50:6a:18:e4:e8:e6:01:35:52:
                    f2:8d:4b:60:63:a2:3d:88:9a:ba:bf:22:b4:3d:ba:
                    60:48:e4:b6:9b:17:da:60:9e:62:8e:16:8b:f5:a3:
                    07:ed:cb:fc:47:3a:e3:a4:34:fb:f2:fd:f0:8b:16:
                    dc:c2:80:45:5e:b6:fe:5d:cf:cc:82:94:f4:ee:09:
                    52:5a:61:77:10:db:00:27:ae:ec:6c:ef:ce:36:a7:
                    89:92:66:a9:6e:ac:ff:63:85:2f:85:0a:54:e5:f3:
                    58:92:98:9a:65:ae:2d:15:fc:37:30:e2:78:09:90:
                    22:b2:98:53:47:6d:31:48:3e:70:bd:d9:a3:c0:78:
                    7a:cd:30:06:65:e1:c9:2a:93:40:d2:d0:04:b4:7d:
                    87:f2:8f:eb:fa:01:2d:66:e7:7d:17:d1:97:67:aa:
                    0f:71:1a:fc:1c:ac:ba:97:59:42:f7:52:0f:1a:3b:
                    42:45:64:46:d7:82:95:b3:17:17:c5:c4:e7:d7:d6:
                    43:7e:27:99:7d:7c:42:de:63:0d:5d:79:16:e3:d6:
                    9f:bf:8c:c9:a3:74:28:45:ed:91:7b:70:18:d2:20:
                    7a:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:3C:D6:B4:00:13:28:EE:3D:15:95:F9:53:61:C4:77:23:CC:E3:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/8c6a163d-7e16-31da-87d0-670eff768332.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.92.165.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:25:9e:3d:a5:97:f9:b1:fd:fb:a5:e5:db:4c:b1:4c:80:3b:
         28:7d:15:62:d3:79:97:16:91:80:a0:05:de:51:e5:62:17:87:
         13:14:34:8d:f6:d3:70:ae:04:a8:63:1f:76:42:bb:91:a2:65:
         07:2e:e4:7d:1c:4c:38:ef:b8:7c:0a:01:8a:7a:5f:92:de:d0:
         93:7b:7e:44:d4:bc:70:01:1e:6f:28:71:f3:48:e0:95:cd:88:
         0a:17:13:bf:c1:56:61:ab:c2:ba:e4:16:53:71:ec:ad:08:f9:
         e5:3c:f1:04:1f:e6:82:7a:76:da:a9:6a:44:bb:4a:6f:a3:e0:
         1c:53:db:52:8f:4c:8d:8f:86:a7:70:af:47:7b:c7:cb:f2:5e:
         67:52:f0:42:41:d6:ca:25:45:dc:71:f1:b4:28:f7:a7:a6:7e:
         8e:47:ef:68:76:9b:91:84:9b:9e:ff:31:a3:fb:6d:11:9c:71:
         77:12:ce:95:a9:3b:cc:4a:c4:06:04:9f:14:0f:02:5d:65:5f:
         35:f9:cd:1a:5f:2e:23:d6:95:0c:f7:62:bb:89:66:3f:89:2b:
         5a:a6:13:29:66:82:ab:90:2c:f1:04:7e:d7:04:2f:9b:27:e2:
         01:19:44:ac:90:03:7a:ed:76:44:83:19:8d:45:88:7b:52:0c:
         15:1a:3e:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 11:46:10 2026 by rpki-client