Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/632209ad-4a4e-3134-a5ca-73ab037c2ebe.roa
File:                     632209ad-4a4e-3134-a5ca-73ab037c2ebe.roa (raw, json)
Hash identifier:          o0BTJ9Zz+LTAMHv2/xLAJCpnQO3nrPGkTYJ5eGHPN14=
Subject key identifier:   A3:55:D3:94:CC:AF:76:55:62:F8:54:77:31:D2:BC:FE:31:88:B2:77
Certificate issuer:       /CN=847c7608-e8de-46e4-803f-28e1912f24ed
Certificate serial:       010D0C9F43285849C0A4E7B22FBEBF62C0C904C0
Authority key identifier: 0B:9B:C3:8A:0E:84:3B:6E:76:E3:2B:2A:7D:CD:08:3B:2F:EF:E5:18
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/632209ad-4a4e-3134-a5ca-73ab037c2ebe.roa
Signing time:             Mon 05 May 2025 13:01:00 +0000
ROA not before:           Mon 05 May 2025 13:01:00 +0000
ROA not after:            Sun 03 Aug 2025 13:01:00 +0000
asID:                     33139
IP address blocks:        66.49.195.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/847c7608-e8de-46e4-803f-28e1912f24ed.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/847c7608-e8de-46e4-803f-28e1912f24ed.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 May 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c0:a4:e7:b2:2f:be:bf:62:c0:c9:04:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=847c7608-e8de-46e4-803f-28e1912f24ed
        Validity
            Not Before: May  5 13:01:00 2025 GMT
            Not After : Aug  3 13:01:00 2025 GMT
        Subject: CN=8c7ddb2d-808f-4cf8-91d3-b07294aeab3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:08:62:6c:2a:df:24:09:2f:b9:57:f8:a0:e9:
                    54:04:cf:10:5d:cc:d7:8e:d6:c2:e3:a4:29:94:2b:
                    cd:b7:47:b3:8e:d3:3c:b3:81:1b:f2:e1:68:1f:be:
                    28:96:de:50:b7:ad:71:9e:99:04:3f:e8:b6:6b:22:
                    4b:cf:11:8a:84:17:10:14:78:e9:a6:d8:27:ea:cb:
                    60:21:c4:1c:ab:41:35:e5:09:f9:a8:71:6d:57:62:
                    fc:c1:cd:3e:47:d2:18:78:e1:3e:d7:2d:9f:ff:f1:
                    a2:e5:67:5d:f9:77:78:e9:83:53:ac:02:b3:33:ce:
                    a9:c8:45:fa:fe:4d:55:f6:ee:7d:81:e2:45:f7:f9:
                    5f:4a:4a:76:6f:cc:57:16:cf:fc:4f:34:da:72:cc:
                    b1:cd:f8:1b:8e:6e:bc:e5:f1:d2:68:d2:b2:71:a0:
                    58:70:de:8d:38:a6:88:21:9a:cb:86:a4:98:dd:1b:
                    10:05:8c:af:f3:e8:3f:a6:2b:f6:99:24:bc:14:b0:
                    df:32:53:57:21:1d:23:92:b3:30:3a:71:9d:f0:9e:
                    08:e4:00:0f:76:90:6e:de:e5:1e:b0:b7:17:53:7e:
                    74:aa:87:7c:19:c5:f7:0a:01:16:0e:3f:dd:af:d1:
                    5c:3c:e1:59:9b:2e:a7:e3:d9:0c:76:b4:d2:f2:da:
                    15:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:55:D3:94:CC:AF:76:55:62:F8:54:77:31:D2:BC:FE:31:88:B2:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/632209ad-4a4e-3134-a5ca-73ab037c2ebe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/847c7608-e8de-46e4-803f-28e1912f24ed.crl

            X509v3 Authority Key Identifier:
                keyid:0B:9B:C3:8A:0E:84:3B:6E:76:E3:2B:2A:7D:CD:08:3B:2F:EF:E5:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.49.195.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:18:57:1f:6c:3b:0a:d8:c6:98:4e:e6:a6:8a:49:1f:72:69:
         39:10:ba:a5:33:44:4c:71:36:d8:d2:07:54:1b:d6:5e:b0:c7:
         13:17:3c:35:0d:ae:7a:97:97:10:cb:54:bb:4c:5b:14:7a:1b:
         11:9c:7e:16:6d:8e:b3:60:7a:65:ec:33:b3:47:4a:5d:41:e5:
         11:15:cd:f8:a9:1a:7f:ab:e4:5f:3c:1e:d8:21:06:63:53:e0:
         ee:f3:d0:17:d8:34:24:92:70:e2:74:30:98:0b:5c:ce:5f:fb:
         15:85:70:2d:1c:6c:67:fc:56:6b:07:c0:d5:12:26:87:2a:c5:
         f2:71:d8:f0:fa:85:67:db:45:ba:61:b4:71:58:dc:bf:c6:93:
         96:1f:cf:0b:97:09:06:14:3f:5e:1e:2a:a3:b8:7c:19:30:6e:
         3d:a8:dd:c8:4b:d2:43:96:35:6a:ac:42:67:a0:67:8c:dc:cf:
         45:4f:79:cf:05:83:97:ad:35:e3:02:4e:43:69:ad:c8:40:36:
         66:fc:56:60:ee:1f:93:d9:3d:74:4d:f9:70:68:2d:25:90:2a:
         10:f4:05:13:cc:53:be:27:7d:58:9e:4a:fe:4d:5a:ce:5a:93:
         9b:d1:65:76:b9:a2:50:fa:b7:16:b2:95:f8:87:b6:fd:21:83:
         0a:9a:19:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 22:18:19 2025 by rpki-client