Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/9ae091e5-2341-3a56-b621-6479f057e080.roa
File:                     9ae091e5-2341-3a56-b621-6479f057e080.roa (raw, json)
Hash identifier:          RtN6/v/hzIyFzlqsA08NfvBCk0rWPQ/rHwcaom8UFJI=
Subject key identifier:   91:A4:82:D7:9D:3B:23:D5:CD:5C:32:C2:72:F5:FF:81:47:2E:B4:AD
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584AFEE7208034A0C2CE05A3F300
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/9ae091e5-2341-3a56-b621-6479f057e080.roa
Signing time:             Wed 27 Aug 2025 13:01:47 +0000
ROA not before:           Wed 27 Aug 2025 13:01:47 +0000
ROA not after:            Tue 25 Nov 2025 14:01:47 +0000
asID:                     211192
IP address blocks:        66.92.132.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Sep 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:fe:e7:20:80:34:a0:c2:ce:05:a3:f3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Aug 27 13:01:47 2025 GMT
            Not After : Nov 25 14:01:47 2025 GMT
        Subject: CN=27404bee-65ed-46ed-81b0-2843791960b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:cd:4a:25:58:97:7a:ba:8b:1b:6e:b1:0b:e0:
                    eb:6f:57:61:11:18:4e:90:71:dd:90:7f:1f:42:99:
                    11:00:f5:02:a0:21:03:38:9e:0b:27:59:44:d2:eb:
                    48:7f:24:3f:a1:d9:90:38:68:3b:43:fa:88:69:56:
                    31:4b:b4:72:78:98:6a:d7:04:73:45:81:08:0f:c6:
                    39:15:80:cd:84:8d:91:b1:0e:38:02:44:e0:12:6e:
                    d8:01:c8:01:20:97:10:73:cd:ec:50:66:b3:c6:f8:
                    53:f2:72:11:4b:08:79:50:3f:63:0d:a8:be:82:09:
                    7e:8f:58:59:cb:09:b1:ae:66:47:fd:e5:8b:84:7f:
                    a1:5b:1b:7d:33:9c:2c:c6:6c:b6:f4:59:a4:1f:c9:
                    96:82:84:e5:5a:a9:4c:2c:20:57:0c:46:6e:d8:0a:
                    ac:51:74:46:30:08:47:f7:7a:df:ca:c0:b2:26:2b:
                    5f:16:09:06:d9:bf:0d:ab:a1:94:87:b3:ed:7c:5e:
                    9a:90:d9:3a:f4:7a:0d:04:c5:cb:06:4e:da:6e:ff:
                    2b:e4:e2:32:e0:90:2a:3b:a9:79:20:85:d3:fb:d0:
                    2a:73:8d:df:06:5e:78:2d:5e:38:61:5a:0c:28:c9:
                    5f:59:f0:9c:a9:5a:bb:65:e7:fd:c3:8a:b0:55:e3:
                    ac:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:A4:82:D7:9D:3B:23:D5:CD:5C:32:C2:72:F5:FF:81:47:2E:B4:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/9ae091e5-2341-3a56-b621-6479f057e080.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.92.132.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:c1:a5:ab:8a:fd:b0:d7:38:73:78:8d:5e:97:45:54:5d:05:
         29:b2:6b:e9:60:6b:f2:34:1f:5c:87:36:4e:ef:d4:49:31:d7:
         00:53:90:68:66:d9:fd:ca:6f:b8:6d:06:28:e2:7f:db:b6:43:
         57:59:f0:17:7c:8c:fe:19:37:9e:fd:64:be:1c:f0:2f:5d:84:
         14:91:20:15:4b:72:df:e8:df:52:b2:71:ea:c3:05:17:46:e4:
         1d:04:ee:94:7a:5d:de:2a:b1:e6:89:cb:47:1d:26:4e:69:6b:
         9f:7f:99:4a:31:06:03:aa:0c:91:8c:33:79:58:52:e5:6f:9b:
         b7:23:0f:77:d8:f3:cb:98:cb:ad:3d:8e:9b:e3:f4:28:19:00:
         af:c4:53:1f:30:59:62:e1:ec:0c:7f:f5:91:8f:d3:c9:b4:10:
         0c:00:f3:41:60:9f:59:ae:56:bf:62:86:4a:dd:18:2f:96:c2:
         68:dd:62:04:7b:f1:cb:d6:d2:9f:69:ea:f6:00:e0:01:62:cb:
         d7:ad:f0:20:cf:ea:f8:bb:cb:50:c5:13:e8:63:4e:32:dd:a4:
         6f:f1:37:0d:34:87:a5:e9:99:a5:86:60:e6:2d:a9:d2:46:53:
         58:78:87:d8:a9:a7:d6:3b:1d:f0:15:ce:20:bd:3f:d8:79:a5:
         df:48:53:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 14 09:48:30 2025 by rpki-client