Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/432aa5cf-74c1-3d95-9174-41f56abbc60b.roa
File:                     432aa5cf-74c1-3d95-9174-41f56abbc60b.roa (raw, json)
Hash identifier:          25T45R3EPalyS+uK32i6VXtQT1rZecz7Vp9cmmb1RtU=
Subject key identifier:   49:86:15:CB:83:08:3C:73:D3:D6:86:33:6F:9A:F1:8F:27:86:CB:19
Certificate issuer:       /CN=847c7608-e8de-46e4-803f-28e1912f24ed
Certificate serial:       010D0C9F43285849C0A4E7F678F8B94B4F6B5380
Authority key identifier: 0B:9B:C3:8A:0E:84:3B:6E:76:E3:2B:2A:7D:CD:08:3B:2F:EF:E5:18
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/432aa5cf-74c1-3d95-9174-41f56abbc60b.roa
Signing time:             Mon 05 May 2025 13:01:00 +0000
ROA not before:           Mon 05 May 2025 13:01:00 +0000
ROA not after:            Sun 03 Aug 2025 13:01:00 +0000
asID:                     33139
IP address blocks:        66.49.199.0/24 maxlen: 24
                          66.49.200.0/24 maxlen: 24
                          66.49.201.0/24 maxlen: 24
                          66.49.202.0/24 maxlen: 24
                          66.49.203.0/24 maxlen: 24
                          66.49.204.0/24 maxlen: 24
                          66.49.206.0/24 maxlen: 24
                          66.49.207.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/847c7608-e8de-46e4-803f-28e1912f24ed.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/847c7608-e8de-46e4-803f-28e1912f24ed.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 May 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c0:a4:e7:f6:78:f8:b9:4b:4f:6b:53:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=847c7608-e8de-46e4-803f-28e1912f24ed
        Validity
            Not Before: May  5 13:01:00 2025 GMT
            Not After : Aug  3 13:01:00 2025 GMT
        Subject: CN=6f3b9b42-286f-4ecb-abce-63dc6bac38c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:49:17:2e:7d:23:70:ca:30:d3:70:4d:30:7f:
                    07:c3:eb:e4:f7:c7:93:67:61:54:7b:dc:c9:62:ea:
                    16:c6:cd:fd:5e:5a:90:71:53:09:6a:78:1c:32:77:
                    70:73:df:de:85:75:a0:3a:17:e3:0b:88:3e:49:32:
                    ab:e9:46:47:b6:c2:20:b4:81:37:ee:7f:96:6e:21:
                    3c:4d:45:78:87:ec:86:c0:e2:46:6f:77:23:db:92:
                    30:c5:05:7d:17:b4:88:1d:09:21:97:d5:3b:27:bb:
                    eb:78:73:36:37:1b:8d:d1:25:a8:4d:99:d5:a2:41:
                    27:ff:6b:a9:26:ec:ef:c0:ca:c6:7c:40:5b:5d:46:
                    07:60:b0:b8:19:75:de:37:37:94:a3:c8:87:fd:cb:
                    de:85:d6:57:17:05:63:c4:b5:d5:cb:d8:34:28:94:
                    5a:94:f4:0b:ce:cd:5d:2d:d5:8b:60:50:28:04:20:
                    fd:f5:01:0b:e0:1f:a0:33:85:23:d6:9f:21:53:d5:
                    e9:f7:48:ee:b5:69:f2:32:42:50:b7:42:c7:46:87:
                    74:d5:45:c6:b9:61:6b:07:9f:50:85:bc:ab:0f:a9:
                    50:f0:37:cd:72:2c:6f:53:13:4b:5e:d5:17:e9:fa:
                    0a:63:d0:42:8d:cf:b0:f4:dc:50:f2:cc:67:ba:fc:
                    ab:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:86:15:CB:83:08:3C:73:D3:D6:86:33:6F:9A:F1:8F:27:86:CB:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/432aa5cf-74c1-3d95-9174-41f56abbc60b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/847c7608-e8de-46e4-803f-28e1912f24ed.crl

            X509v3 Authority Key Identifier:
                keyid:0B:9B:C3:8A:0E:84:3B:6E:76:E3:2B:2A:7D:CD:08:3B:2F:EF:E5:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.49.199.0-66.49.204.255
                  66.49.206.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:8e:51:2e:4a:e8:ea:98:d1:5d:fd:6b:16:91:ce:19:a0:4e:
         47:66:7a:49:89:d2:62:cd:f2:7c:05:e1:00:8a:e6:a1:1a:a2:
         05:35:c8:10:e0:50:a6:60:b3:bc:52:b9:dd:09:fe:45:d2:e9:
         02:49:03:74:05:53:4f:07:d7:80:84:3b:78:f1:af:78:e6:0d:
         32:6e:b1:ca:25:f7:f9:5e:52:ec:f3:89:da:36:d3:9e:84:d2:
         33:86:6b:e8:76:03:04:9f:d1:66:72:33:fb:52:ca:8f:f7:f2:
         ee:83:96:d2:8d:42:24:10:41:ec:96:64:45:60:36:7b:b7:44:
         84:60:a2:82:16:60:cf:0a:50:5f:9e:63:9f:5f:e1:af:0f:11:
         5d:47:1a:81:6c:d9:c5:e5:bd:4e:48:a8:ed:8c:a0:2d:d8:e5:
         8d:2e:d1:38:73:04:c7:7e:f2:36:fc:a7:27:55:f3:27:3f:36:
         d7:19:7b:c0:ae:eb:80:8e:5a:bc:50:e8:b5:48:6a:e1:7a:29:
         bd:eb:36:31:92:fd:e6:70:4c:94:0d:bc:c0:ce:20:13:ca:d5:
         8c:69:21:48:f8:88:a5:78:74:4f:86:78:f2:98:0c:fc:37:3c:
         4a:c1:ea:d9:44:64:f2:a9:ac:41:43:19:93:db:7e:c9:fe:93:
         ac:42:96:80
-----BEGIN CERTIFICATE-----
MIIGUTCCBTmgAwIBAgIUAQ0Mn0MoWEnApOf2ePi5S09rU4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODQ3Yzc2MDgtZThkZS00NmU0LTgwM2YtMjhlMTkxMmYy
NGVkMB4XDTI1MDUwNTEzMDEwMFoXDTI1MDgwMzEzMDEwMFowLzEtMCsGA1UEAxMk
NmYzYjliNDItMjg2Zi00ZWNiLWFiY2UtNjNkYzZiYWMzOGMxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzUkXLn0jcMow03BNMH8Hw+vk98eTZ2FUe9zJ
YuoWxs39XlqQcVMJangcMndwc9/ehXWgOhfjC4g+STKr6UZHtsIgtIE37n+WbiE8
TUV4h+yGwOJGb3cj25IwxQV9F7SIHQkhl9U7J7vreHM2NxuN0SWoTZnVokEn/2up
JuzvwMrGfEBbXUYHYLC4GXXeNzeUo8iH/cvehdZXFwVjxLXVy9g0KJRalPQLzs1d
LdWLYFAoBCD99QEL4B+gM4Uj1p8hU9Xp90jutWnyMkJQt0LHRod01UXGuWFrB59Q
hbyrD6lQ8DfNcixvUxNLXtUX6foKY9BCjc+w9NxQ8sxnuvyrIwIDAQABo4IDYzCC
A18wHQYDVR0OBBYEFEmGFcuDCDxz09aGM2+a8Y8nhssZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84NDdj
NzYwOC1lOGRlLTQ2ZTQtODAzZi0yOGUxOTEyZjI0ZWQvNDMyYWE1Y2YtNzRjMS0z
ZDk1LTkxNzQtNDFmNTZhYmJjNjBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvODQ3Yzc2MDgtZThkZS00NmU0LTgw
M2YtMjhlMTkxMmYyNGVkLzg0N2M3NjA4LWU4ZGUtNDZlNC04MDNmLTI4ZTE5MTJm
MjRlZC5jcmwwHwYDVR0jBBgwFoAUC5vDig6EO2524ysqfc0IOy/v5RgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS84NDdjNzYwOC1lOGRlLTQ2ZTQtODAzZi0yOGUx
OTEyZjI0ZWQuY2VyMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBABCMccD
BABCMcwDBAFCMc4wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUF
BwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRt
bDANBgkqhkiG9w0BAQsFAAOCAQEAHI5RLkro6pjRXf1rFpHOGaBOR2Z6SYnSYs3y
fAXhAIrmoRqiBTXIEOBQpmCzvFK53Qn+RdLpAkkDdAVTTwfXgIQ7ePGveOYNMm6x
yiX3+V5S7POJ2jbTnoTSM4Zr6HYDBJ/RZnIz+1LKj/fy7oOW0o1CJBBB7JZkRWA2
e7dEhGCighZgzwpQX55jn1/hrw8RXUcagWzZxeW9Tkio7YygLdjljS7ROHMEx37y
NvynJ1XzJz821xl7wK7rgI5avFDotUhq4Xopves2MZL95nBMlA28wM4gE8rVjGkh
SPiIpXh0T4Z48pgM/Dc8SsHq2URk8qmsQUMZk9t+yf6TrEKWgA==
-----END CERTIFICATE-----
Generated at Sat May 10 15:19:52 2025 by rpki-client