Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/c0d18a77-2220-385b-a93c-a67d1e048ec8.roa
File:                     c0d18a77-2220-385b-a93c-a67d1e048ec8.roa (raw, json)
Hash identifier:          nRMUFrLQIkNJGxDOZLrNsfCd2y1ff5qmBEYezTd7w4s=
Subject key identifier:   4A:2E:B1:24:C9:1C:37:8B:61:D4:90:B7:A5:77:49:C1:B2:5F:55:D2
Certificate issuer:       /CN=847c7608-e8de-46e4-803f-28e1912f24ed
Certificate serial:       010D0C9F43285849C0A4E7DBEF965F3CF00A2B40
Authority key identifier: 0B:9B:C3:8A:0E:84:3B:6E:76:E3:2B:2A:7D:CD:08:3B:2F:EF:E5:18
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/c0d18a77-2220-385b-a93c-a67d1e048ec8.roa
Signing time:             Mon 05 May 2025 13:01:00 +0000
ROA not before:           Mon 05 May 2025 13:01:00 +0000
ROA not after:            Sun 03 Aug 2025 13:01:00 +0000
asID:                     33139
IP address blocks:        66.49.198.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/847c7608-e8de-46e4-803f-28e1912f24ed.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/847c7608-e8de-46e4-803f-28e1912f24ed.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 May 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c0:a4:e7:db:ef:96:5f:3c:f0:0a:2b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=847c7608-e8de-46e4-803f-28e1912f24ed
        Validity
            Not Before: May  5 13:01:00 2025 GMT
            Not After : Aug  3 13:01:00 2025 GMT
        Subject: CN=bf260f4b-7af5-4949-aa88-66a7c536b52d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:01:f2:5d:1e:cf:8a:63:6a:26:17:6f:22:28:
                    a1:3f:e6:20:9c:93:5a:02:b0:ab:da:86:e2:4e:77:
                    9b:ba:20:d6:03:df:78:7d:0d:c2:12:d8:94:ee:d4:
                    b8:cb:6e:75:35:43:b7:a8:99:b7:a0:51:95:f9:8a:
                    22:97:7b:16:b4:a4:ad:22:7a:4a:22:04:16:9c:e9:
                    e1:8f:e6:b3:33:56:ed:d4:95:a6:16:81:66:3b:95:
                    a5:98:d2:07:f0:3d:e7:39:a5:5b:de:13:85:71:4a:
                    55:38:00:91:ec:2b:63:4f:67:19:bf:f2:e3:18:4f:
                    9f:6e:b4:1f:d0:41:79:df:c2:57:33:14:24:e9:36:
                    ac:a5:77:cd:05:4f:22:cc:5d:d7:92:ed:d5:96:d3:
                    4e:5c:e0:af:97:55:a9:af:23:28:c7:4a:47:c8:6a:
                    16:29:d9:03:2d:db:2b:dc:86:81:f0:3b:4a:42:68:
                    77:25:52:db:e1:cf:98:c0:e6:d0:d6:59:e2:ce:af:
                    62:e6:4d:10:f7:db:df:a0:5f:bb:a2:e6:a9:b3:9b:
                    52:20:c9:97:65:5b:71:35:5e:e5:d3:66:b6:21:3c:
                    9a:a7:82:a2:cc:0b:90:6f:7b:67:fe:1b:45:9a:74:
                    bf:0d:a3:6f:15:32:8e:22:ce:ee:6e:fa:4d:68:a8:
                    5e:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:2E:B1:24:C9:1C:37:8B:61:D4:90:B7:A5:77:49:C1:B2:5F:55:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/c0d18a77-2220-385b-a93c-a67d1e048ec8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/847c7608-e8de-46e4-803f-28e1912f24ed.crl

            X509v3 Authority Key Identifier:
                keyid:0B:9B:C3:8A:0E:84:3B:6E:76:E3:2B:2A:7D:CD:08:3B:2F:EF:E5:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.49.198.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:e2:d6:48:4f:08:6b:99:89:b1:9e:3a:54:b1:f6:fe:36:e1:
         2e:8f:2c:17:ce:dd:f3:3d:cd:c4:0b:bc:7b:87:8b:e8:d3:49:
         38:fe:c7:d9:d0:57:30:e9:20:95:c4:1e:ac:0f:2d:23:c4:1f:
         4a:ef:d6:9e:62:62:67:35:48:04:4e:b1:ef:6e:02:d4:be:5d:
         b8:6a:f2:b6:0c:8c:02:e7:b9:94:52:da:c8:6e:f4:de:ba:6e:
         6a:58:7d:26:d3:4f:fb:ab:83:22:ec:34:2a:ec:34:6f:b9:1a:
         c1:40:d4:5a:98:3b:ff:de:83:78:31:95:99:3b:b8:02:9e:60:
         39:52:17:dd:4b:15:77:1f:b2:48:22:d5:b7:f5:7e:1c:95:09:
         b4:30:e6:af:6b:1b:62:2f:e2:2c:b8:84:b5:96:a0:dc:71:5e:
         01:e9:cd:20:4f:99:57:51:e3:d8:a0:b7:74:2b:fb:01:ae:85:
         30:87:1e:8f:73:cb:33:8b:01:fb:16:e3:ad:a0:7f:f2:17:2a:
         b6:ba:a0:5f:41:ad:76:b3:94:d3:ff:b0:ae:5e:c7:a5:7d:7b:
         ff:c5:86:4e:c5:4c:50:cb:94:b1:5f:8c:53:9b:ec:8c:a6:e7:
         2d:bb:23:81:e9:89:87:7e:2a:cd:bc:ac:89:41:f8:b2:dd:76:
         07:11:42:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 14:34:55 2025 by rpki-client