Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/632209ad-4a4e-3134-a5ca-73ab037c2ebe.roa
File:                     632209ad-4a4e-3134-a5ca-73ab037c2ebe.roa (raw, json)
Hash identifier:          lgJKpz/FTJwi4RUtVakSzPiea7pL2dZUyU92G8j31Cc=
Subject key identifier:   58:4C:45:D7:C4:C2:19:2C:0E:CD:8F:10:E2:FE:8A:B0:21:CC:6D:40
Certificate issuer:       /CN=847c7608-e8de-46e4-803f-28e1912f24ed
Certificate serial:       010D0C9F4328584B80B769921439585D84586900
Authority key identifier: 0B:9B:C3:8A:0E:84:3B:6E:76:E3:2B:2A:7D:CD:08:3B:2F:EF:E5:18
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/632209ad-4a4e-3134-a5ca-73ab037c2ebe.roa
Signing time:             Mon 13 Oct 2025 01:00:29 +0000
ROA not before:           Mon 13 Oct 2025 01:00:29 +0000
ROA not after:            Sun 11 Jan 2026 02:00:29 +0000
asID:                     33139
IP address blocks:        66.49.195.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/847c7608-e8de-46e4-803f-28e1912f24ed.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/847c7608-e8de-46e4-803f-28e1912f24ed.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:80:b7:69:92:14:39:58:5d:84:58:69:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=847c7608-e8de-46e4-803f-28e1912f24ed
        Validity
            Not Before: Oct 13 01:00:29 2025 GMT
            Not After : Jan 11 02:00:29 2026 GMT
        Subject: CN=a139ba7d-ca94-4e57-a97e-41708d9b592a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:67:5b:27:83:55:90:f6:e6:cf:02:37:32:00:
                    ab:7f:83:8b:b8:e5:1f:d7:51:1a:bd:b0:63:dd:50:
                    0c:a5:f6:89:e1:51:9d:e4:b0:8b:1a:7d:92:2e:77:
                    a7:80:de:24:b4:5e:d5:57:64:80:06:4b:ba:45:9a:
                    de:21:0f:ef:62:9c:ed:b5:3c:33:06:17:5f:53:07:
                    d3:18:9f:45:c7:3f:08:24:d4:f4:a9:b4:8a:87:4d:
                    6b:b5:33:c3:2e:e5:b3:79:0b:81:50:b2:62:70:ff:
                    48:09:e1:38:69:8c:d0:58:b5:1d:de:67:77:7e:fb:
                    57:75:e9:32:d3:4c:cc:82:da:dc:26:e7:cb:ae:55:
                    63:a8:26:3b:8b:0a:ff:81:29:33:da:a0:23:c1:7c:
                    01:c4:62:2e:5d:35:7f:d2:d4:76:ae:2b:2c:0b:91:
                    42:11:c9:5a:62:ca:46:69:b8:a8:61:1f:c4:e4:d2:
                    46:30:ae:eb:71:4d:99:4d:90:f7:fd:1a:13:2d:85:
                    8d:d1:fb:59:78:e2:73:af:68:a6:0d:31:85:5d:a9:
                    ab:7c:e8:c6:a2:e2:df:28:04:02:27:51:86:26:63:
                    df:be:68:f0:b7:1e:13:99:7b:a2:13:ef:51:4b:31:
                    62:8b:04:a5:a2:e8:c4:23:f7:20:41:d2:1c:bb:86:
                    41:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:4C:45:D7:C4:C2:19:2C:0E:CD:8F:10:E2:FE:8A:B0:21:CC:6D:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/632209ad-4a4e-3134-a5ca-73ab037c2ebe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/847c7608-e8de-46e4-803f-28e1912f24ed.crl

            X509v3 Authority Key Identifier:
                keyid:0B:9B:C3:8A:0E:84:3B:6E:76:E3:2B:2A:7D:CD:08:3B:2F:EF:E5:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.49.195.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:10:40:a6:6e:75:70:00:3c:6a:a6:d5:b9:68:1b:6d:4b:b4:
         3e:ae:3b:72:16:cc:72:76:e6:a9:a3:54:b9:36:9a:52:d6:52:
         20:85:72:5f:b0:6a:07:08:8a:06:b5:85:58:80:49:9f:0b:64:
         fe:c1:d8:9b:95:b6:21:7c:c1:e2:82:2b:58:3d:7f:db:07:b6:
         20:bd:3c:5f:f1:94:97:f8:d0:5c:0e:3c:79:05:b1:0f:5d:2f:
         42:0c:f0:e9:9c:f4:69:52:a9:63:8f:7e:5e:5c:b1:b3:af:36:
         db:8c:54:58:36:c2:bd:41:b7:13:89:fb:64:40:5e:f9:2e:ee:
         6b:6f:e3:9c:d1:f4:ca:c1:a6:82:75:d7:02:9f:47:f7:a8:a8:
         8d:55:ac:72:46:13:b2:0e:66:97:34:c3:53:62:e5:8d:5e:25:
         b3:57:ef:5d:ee:99:df:6a:09:2f:45:69:83:f5:37:9f:30:c2:
         6f:b2:e5:a7:3a:f5:a3:2b:ce:b6:99:64:c4:64:13:7b:a5:5f:
         e5:83:73:9f:a6:9c:4a:08:92:ce:54:ac:11:d7:4b:85:39:1a:
         3b:c0:27:72:84:6a:c5:3c:fd:c7:e8:86:c4:19:5b:82:08:74:
         a4:5e:ba:fe:6f:46:33:46:db:e0:6f:fb:4e:c5:45:13:68:6f:
         26:5c:10:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:02:58 2025 by rpki-client