Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/432aa5cf-74c1-3d95-9174-41f56abbc60b.roa
File:                     432aa5cf-74c1-3d95-9174-41f56abbc60b.roa (raw, json)
Hash identifier:          sKpbtr5GMq5ttneZFf6fy7hDGonz9xED1M+ylAGgKMk=
Subject key identifier:   B5:B0:8A:4C:A1:D1:6F:42:A7:51:FB:98:1D:5D:72:E9:85:BD:37:6B
Certificate issuer:       /CN=847c7608-e8de-46e4-803f-28e1912f24ed
Certificate serial:       010D0C9F4328584A9FFBA73BC4360E4F77163400
Authority key identifier: 0B:9B:C3:8A:0E:84:3B:6E:76:E3:2B:2A:7D:CD:08:3B:2F:EF:E5:18
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/432aa5cf-74c1-3d95-9174-41f56abbc60b.roa
Signing time:             Thu 24 Jul 2025 13:01:02 +0000
ROA not before:           Thu 24 Jul 2025 13:01:02 +0000
ROA not after:            Wed 22 Oct 2025 13:01:02 +0000
asID:                     33139
IP address blocks:        66.49.199.0/24 maxlen: 24
                          66.49.200.0/24 maxlen: 24
                          66.49.201.0/24 maxlen: 24
                          66.49.202.0/24 maxlen: 24
                          66.49.203.0/24 maxlen: 24
                          66.49.204.0/24 maxlen: 24
                          66.49.206.0/24 maxlen: 24
                          66.49.207.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/847c7608-e8de-46e4-803f-28e1912f24ed.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/847c7608-e8de-46e4-803f-28e1912f24ed.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 09 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9f:fb:a7:3b:c4:36:0e:4f:77:16:34:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=847c7608-e8de-46e4-803f-28e1912f24ed
        Validity
            Not Before: Jul 24 13:01:02 2025 GMT
            Not After : Oct 22 13:01:02 2025 GMT
        Subject: CN=336c5cdb-486c-4ee4-92d2-d6c05e140bb8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:55:8c:be:3e:b6:5f:95:9e:e2:ce:6c:a9:32:
                    5c:62:a9:4b:9d:5f:b2:45:d9:9f:32:a0:24:e2:86:
                    53:ab:5d:52:aa:f0:6f:22:6f:8e:a0:1b:d5:49:b2:
                    5d:5d:d5:6d:1e:11:b3:50:d2:87:b9:a6:41:64:62:
                    55:45:23:84:62:a0:49:15:20:89:8e:32:e1:d8:dc:
                    a8:75:a3:51:1f:c7:21:3d:55:9d:18:40:51:16:64:
                    09:7f:e8:7e:ad:92:a4:1e:21:80:57:0a:1b:cd:0b:
                    09:85:24:7a:fd:1f:78:af:0f:d0:f9:f3:ba:c8:13:
                    bc:90:15:74:4c:16:dc:89:b1:e8:44:e0:c0:07:78:
                    e1:b9:8b:89:9f:23:a6:c7:0c:a0:c8:3b:ec:90:f9:
                    91:68:e8:4c:68:e6:5d:f3:b3:67:57:b2:f7:fb:bd:
                    9c:38:18:df:55:48:07:09:62:6e:0b:01:c2:2d:3e:
                    2c:c3:14:ee:e3:09:a4:34:20:84:44:ce:7b:bf:ee:
                    3b:8e:10:e5:f2:6e:29:50:1c:dc:44:da:d1:e7:e4:
                    98:ed:4b:ed:b7:76:96:60:a2:52:69:48:63:57:d9:
                    69:fe:11:eb:22:95:17:33:9d:17:e8:d4:f3:ca:9f:
                    a5:86:13:45:fb:40:55:10:2f:d4:ec:7c:88:04:5a:
                    c2:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:B0:8A:4C:A1:D1:6F:42:A7:51:FB:98:1D:5D:72:E9:85:BD:37:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/432aa5cf-74c1-3d95-9174-41f56abbc60b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/847c7608-e8de-46e4-803f-28e1912f24ed.crl

            X509v3 Authority Key Identifier:
                keyid:0B:9B:C3:8A:0E:84:3B:6E:76:E3:2B:2A:7D:CD:08:3B:2F:EF:E5:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.49.199.0-66.49.204.255
                  66.49.206.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:c3:6d:37:21:39:48:c9:89:8f:98:0a:8a:00:03:4b:56:97:
         60:b7:b7:de:4c:74:f8:06:d4:16:ae:02:86:49:d0:c2:47:b5:
         63:be:6c:8d:98:59:ab:47:c7:dd:d2:e4:73:12:07:03:12:72:
         9b:18:d2:5b:56:c4:3b:26:71:e9:8a:e1:4b:fc:b7:c4:79:60:
         99:b0:da:03:f2:8f:18:ed:19:79:fe:e8:38:0b:35:85:76:47:
         22:cc:49:ba:ec:0c:46:73:5c:f2:a6:b2:01:a9:70:77:e8:28:
         8a:97:d7:0f:36:d4:97:da:1f:63:f7:01:0d:2e:bb:1c:98:fa:
         6b:e4:61:32:a8:50:2b:3e:df:81:45:46:96:d8:39:1e:69:2f:
         27:94:bf:e1:2b:96:a8:d4:4d:a8:c3:1a:9d:a8:73:3f:a3:ab:
         20:a8:07:0e:b6:b4:1b:33:f3:c9:be:4f:05:ee:4f:86:bc:93:
         f5:b5:14:93:32:41:15:da:73:ee:50:a5:89:5b:e5:9b:d3:23:
         d7:e5:b5:a5:11:ad:23:0f:9a:23:61:da:22:33:b8:8f:94:4f:
         f3:46:80:72:a2:17:6f:d0:ae:27:12:43:60:c6:f4:b7:5a:21:
         33:5e:f9:4f:ac:77:b2:f4:a3:4b:71:7f:2a:c6:fa:01:31:d6:
         f4:76:b3:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 20:15:07 2025 by rpki-client