Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/b965e3e2-1078-38d4-9b67-ce6f285cbbf6.roa
File:                     b965e3e2-1078-38d4-9b67-ce6f285cbbf6.roa (raw, json)
Hash identifier:          uMQxGuodGtfOeHBcvyyVigXmIDEYpbXCySzicIH264E=
Subject key identifier:   AD:8F:9A:CA:1D:90:1C:1D:E8:8B:25:1C:A8:74:9A:95:B6:74:08:A5
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584B332D2C184BDE04AC099A1000
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/b965e3e2-1078-38d4-9b67-ce6f285cbbf6.roa
Signing time:             Mon 15 Sep 2025 06:24:57 +0000
ROA not before:           Mon 15 Sep 2025 06:24:57 +0000
ROA not after:            Sun 14 Dec 2025 07:24:57 +0000
asID:                     21859
IP address blocks:        66.92.220.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 20 Sep 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:33:2d:2c:18:4b:de:04:ac:09:9a:10:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Sep 15 06:24:57 2025 GMT
            Not After : Dec 14 07:24:57 2025 GMT
        Subject: CN=74dcb522-83b9-4921-87c0-2f26c48dc387
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:c4:ad:cf:f9:93:3d:09:65:83:d1:df:42:55:
                    63:30:66:af:52:28:bf:2b:b2:4b:2f:00:16:21:33:
                    e5:bf:ac:87:16:0c:ed:e8:b2:3a:c3:a5:78:c0:f0:
                    f7:7b:82:de:9a:50:22:08:77:04:2f:cd:c2:3e:2f:
                    a4:6a:15:7e:41:0c:60:d0:40:e3:f6:b0:06:13:37:
                    f3:3f:bc:0e:51:8c:02:fb:79:e4:54:f9:ba:68:a8:
                    51:44:40:12:6b:05:80:9b:2e:f1:5d:6e:cc:5c:c8:
                    bb:a9:20:30:b2:8b:36:6a:00:49:07:2d:8e:22:c9:
                    48:94:c0:c8:6b:ca:88:24:c5:01:34:63:fb:08:0f:
                    99:30:50:a2:9f:bf:45:a6:a8:81:48:12:b7:1d:5d:
                    a2:5c:40:39:d2:dd:fd:3d:0a:ab:6d:26:ad:06:f1:
                    b0:0e:eb:b7:10:73:70:81:37:37:fd:d8:dd:b2:f9:
                    9c:08:80:db:75:40:24:d1:7d:35:4c:a7:e3:84:37:
                    af:5d:82:60:4f:8c:4a:53:03:d8:29:d0:5b:86:1e:
                    18:b8:a8:ee:dc:5a:7f:de:5f:39:b1:b9:10:b1:0b:
                    3d:81:ad:45:9e:f6:f2:b3:e3:24:c8:bd:84:5f:01:
                    00:a1:c3:cf:31:cb:75:96:d2:5a:c2:fa:c1:ee:90:
                    32:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:8F:9A:CA:1D:90:1C:1D:E8:8B:25:1C:A8:74:9A:95:B6:74:08:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/b965e3e2-1078-38d4-9b67-ce6f285cbbf6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.92.220.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:77:80:b7:0d:29:b0:3a:c6:cf:81:10:d3:4a:c3:96:75:a1:
         9f:61:0a:a6:da:0a:3f:3d:a4:f0:c1:9a:fb:f9:9e:5e:f4:6f:
         76:27:37:97:cc:a9:5c:30:86:4b:1e:2f:2f:17:a1:02:48:6b:
         83:56:25:4b:95:f8:bf:e8:f2:4b:cd:1f:75:7c:d9:46:bd:fe:
         b7:dd:6e:5b:7c:50:40:13:cc:c8:10:94:53:e9:ea:c0:d7:6c:
         1c:dc:d5:df:ec:60:fe:95:37:65:1f:a2:68:61:8e:db:5c:04:
         e4:87:dd:62:8f:34:2a:99:eb:3b:b5:57:d9:ed:64:e1:bd:d3:
         9d:77:ff:b3:48:d8:32:d6:d4:00:57:9c:15:c5:cf:9f:33:ae:
         30:17:4a:92:e5:96:10:a4:1d:49:e0:b6:ba:d8:af:ce:b7:a0:
         57:48:21:b4:22:96:61:21:1d:8a:c2:e7:df:d3:30:61:41:e4:
         ae:f6:98:7d:ce:5a:4e:2c:65:7c:0a:b1:a5:7c:e2:58:16:39:
         2c:43:a0:f9:b9:86:11:9d:c6:30:33:3b:11:ef:9f:ed:65:63:
         65:04:50:bc:6a:dd:84:e5:90:61:8c:5b:f1:6c:85:38:5b:c2:
         98:59:5d:71:41:d8:cf:3e:e1:ff:04:09:e1:5e:83:3b:39:8f:
         8c:4b:35:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 07:29:39 2025 by rpki-client