Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/38470f8d-5686-30f7-9170-22f3bc850829.roa
File:                     38470f8d-5686-30f7-9170-22f3bc850829.roa (raw, json)
Hash identifier:          q9tmkyQJF38VwcX6mPaa861so5dMWRA3Y2XQYD7l+ps=
Subject key identifier:   64:EB:41:2F:5E:FD:87:EC:C0:AF:5D:6B:CC:CB:08:B6:33:18:09:BC
Certificate issuer:       /CN=847c7608-e8de-46e4-803f-28e1912f24ed
Certificate serial:       010D0C9F43285849C0A4E78F798D9FF869BE8ED0
Authority key identifier: 0B:9B:C3:8A:0E:84:3B:6E:76:E3:2B:2A:7D:CD:08:3B:2F:EF:E5:18
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/38470f8d-5686-30f7-9170-22f3bc850829.roa
Signing time:             Mon 05 May 2025 13:01:00 +0000
ROA not before:           Mon 05 May 2025 13:01:00 +0000
ROA not after:            Sun 03 Aug 2025 13:01:00 +0000
asID:                     33139
IP address blocks:        66.49.193.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/847c7608-e8de-46e4-803f-28e1912f24ed.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/847c7608-e8de-46e4-803f-28e1912f24ed.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c0:a4:e7:8f:79:8d:9f:f8:69:be:8e:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=847c7608-e8de-46e4-803f-28e1912f24ed
        Validity
            Not Before: May  5 13:01:00 2025 GMT
            Not After : Aug  3 13:01:00 2025 GMT
        Subject: CN=e2f2cfaf-d2ab-4464-8d65-3355ead7935d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:3a:4d:7a:0b:83:ba:85:a3:63:b9:6c:fe:ab:
                    c2:da:aa:cc:de:cf:96:98:ea:d3:34:32:3e:f8:9f:
                    3c:bb:2b:c5:b4:7a:a2:dd:8d:92:09:75:16:1d:f3:
                    cd:58:dd:e2:d1:d5:5b:cc:72:27:3a:48:6a:64:8a:
                    d1:b6:e1:09:ba:6a:a8:84:a0:bd:7a:2b:c9:4c:12:
                    79:88:4e:7f:c1:e5:f3:53:dc:dc:4a:ce:d3:00:5f:
                    b1:26:35:7b:1e:40:ac:19:27:ba:f6:99:a2:3d:c9:
                    d6:d9:a2:ee:08:af:49:5a:6d:29:f9:37:a4:79:c3:
                    97:b4:71:3b:35:2e:f3:a8:bb:fd:99:e8:83:99:73:
                    75:50:a2:ab:3b:46:e4:3a:e1:b2:6e:34:bf:28:57:
                    de:32:43:a8:07:ff:be:3f:66:92:28:a1:b0:c1:d9:
                    6b:3a:92:19:89:c0:9d:0b:21:a1:8e:63:a1:e5:ba:
                    dc:09:33:8e:be:79:22:32:0c:12:43:05:0e:3a:e7:
                    17:47:b1:09:2f:e2:88:e5:79:84:38:e6:84:ef:83:
                    29:df:08:73:6d:7a:fa:43:6b:7b:8a:69:66:72:a1:
                    0f:d9:e7:cf:23:c6:e8:e0:ac:e1:f8:00:88:a9:79:
                    b4:a5:41:76:bb:28:aa:3a:32:b4:36:4b:bd:c9:98:
                    da:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:EB:41:2F:5E:FD:87:EC:C0:AF:5D:6B:CC:CB:08:B6:33:18:09:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/38470f8d-5686-30f7-9170-22f3bc850829.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/847c7608-e8de-46e4-803f-28e1912f24ed.crl

            X509v3 Authority Key Identifier:
                keyid:0B:9B:C3:8A:0E:84:3B:6E:76:E3:2B:2A:7D:CD:08:3B:2F:EF:E5:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.49.193.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:24:5d:b0:ee:73:58:2c:0d:1a:42:9e:b9:96:c3:94:25:23:
         cb:81:da:3e:c9:3a:51:55:85:b8:b3:51:64:c7:64:2c:73:de:
         0d:97:32:3f:b8:92:92:7b:c7:b3:72:8b:61:58:82:a5:fc:31:
         e5:91:17:a0:c7:8a:7f:a2:e8:b3:ad:4c:cc:8a:96:3d:c5:24:
         01:5f:52:86:4c:1e:4e:7b:19:38:5f:58:b2:13:31:bf:98:7d:
         d8:42:30:ef:22:4f:9a:20:ee:2b:f5:b7:11:66:c7:e1:0a:01:
         99:cb:34:dc:53:42:ef:4c:14:d4:3f:49:88:6b:ae:d2:67:3c:
         24:08:91:fd:aa:55:cb:9f:d3:ad:58:bf:25:0e:4b:3f:fd:86:
         06:1c:42:c3:05:4c:46:17:c1:5f:d3:eb:4f:f8:2d:21:c1:73:
         3c:8f:13:c0:7d:56:d4:8f:0a:8e:84:1e:f8:fa:3a:c7:52:74:
         71:70:81:90:f7:be:c1:48:da:40:5f:c8:ce:56:a6:37:58:cb:
         e6:1a:6e:97:14:64:5c:b9:81:47:ab:96:df:f1:57:55:ad:de:
         84:1e:30:2f:7f:7e:39:0f:d1:4b:57:81:a3:cd:5f:b5:49:27:
         15:35:c4:39:b6:c9:ce:39:75:ea:84:6f:9b:43:19:99:0d:6e:
         cc:0c:a9:03
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnApOePeY2f+Gm+jtAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODQ3Yzc2MDgtZThkZS00NmU0LTgwM2YtMjhlMTkxMmYy
NGVkMB4XDTI1MDUwNTEzMDEwMFoXDTI1MDgwMzEzMDEwMFowLzEtMCsGA1UEAxMk
ZTJmMmNmYWYtZDJhYi00NDY0LThkNjUtMzM1NWVhZDc5MzVkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnzpNeguDuoWjY7ls/qvC2qrM3s+WmOrTNDI+
+J88uyvFtHqi3Y2SCXUWHfPNWN3i0dVbzHInOkhqZIrRtuEJumqohKC9eivJTBJ5
iE5/weXzU9zcSs7TAF+xJjV7HkCsGSe69pmiPcnW2aLuCK9JWm0p+TekecOXtHE7
NS7zqLv9meiDmXN1UKKrO0bkOuGybjS/KFfeMkOoB/++P2aSKKGwwdlrOpIZicCd
CyGhjmOh5brcCTOOvnkiMgwSQwUOOucXR7EJL+KI5XmEOOaE74Mp3whzbXr6Q2t7
imlmcqEP2efPI8bo4Kzh+ACIqXm0pUF2uyiqOjK0Nku9yZjazwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGTrQS9e/YfswK9da8zLCLYzGAm8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84NDdj
NzYwOC1lOGRlLTQ2ZTQtODAzZi0yOGUxOTEyZjI0ZWQvMzg0NzBmOGQtNTY4Ni0z
MGY3LTkxNzAtMjJmM2JjODUwODI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvODQ3Yzc2MDgtZThkZS00NmU0LTgw
M2YtMjhlMTkxMmYyNGVkLzg0N2M3NjA4LWU4ZGUtNDZlNC04MDNmLTI4ZTE5MTJm
MjRlZC5jcmwwHwYDVR0jBBgwFoAUC5vDig6EO2524ysqfc0IOy/v5RgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS84NDdjNzYwOC1lOGRlLTQ2ZTQtODAzZi0yOGUx
OTEyZjI0ZWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQjHBMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACEkXbDuc1gsDRpCnrmWw5QlI8uB2j7JOlFVhbizUWTHZCxz3g2XMj+4
kpJ7x7Nyi2FYgqX8MeWRF6DHin+i6LOtTMyKlj3FJAFfUoZMHk57GThfWLITMb+Y
fdhCMO8iT5og7iv1txFmx+EKAZnLNNxTQu9MFNQ/SYhrrtJnPCQIkf2qVcuf061Y
vyUOSz/9hgYcQsMFTEYXwV/T60/4LSHBczyPE8B9VtSPCo6EHvj6OsdSdHFwgZD3
vsFI2kBfyM5WpjdYy+YabpcUZFy5gUerlt/xV1Wt3oQeMC9/fjkP0UtXgaPNX7VJ
JxU1xDm2yc45deqEb5tDGZkNbswMqQM=
-----END CERTIFICATE-----
Generated at Sun May 11 10:45:12 2025 by rpki-client