Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/0c31e8b3-9186-3479-bcba-52f57503bf6e.roa
File:                     0c31e8b3-9186-3479-bcba-52f57503bf6e.roa (raw, json)
Hash identifier:          ixdSJxcdVaCBf5oFCcxp98rdbY0K5t30c5SxXPzb9AQ=
Subject key identifier:   E3:1B:7B:AC:B8:AE:17:08:73:9E:5D:63:B1:CE:E7:48:64:AD:0D:E1
Certificate issuer:       /CN=847c7608-e8de-46e4-803f-28e1912f24ed
Certificate serial:       010D0C9F4328584EC20C6E2A1D90F4D7372EBB40
Authority key identifier: 0B:9B:C3:8A:0E:84:3B:6E:76:E3:2B:2A:7D:CD:08:3B:2F:EF:E5:18
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/0c31e8b3-9186-3479-bcba-52f57503bf6e.roa
Signing time:             Fri 07 Aug 2026 13:00:11 +0000
ROA not before:           Fri 07 Aug 2026 13:00:11 +0000
ROA not after:            Thu 05 Nov 2026 14:00:11 +0000
asID:                     33139
IP address blocks:        66.49.196.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/847c7608-e8de-46e4-803f-28e1912f24ed.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/847c7608-e8de-46e4-803f-28e1912f24ed.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Aug 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c2:0c:6e:2a:1d:90:f4:d7:37:2e:bb:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=847c7608-e8de-46e4-803f-28e1912f24ed
        Validity
            Not Before: Aug  7 13:00:11 2026 GMT
            Not After : Nov  5 14:00:11 2026 GMT
        Subject: CN=0efc497d-41f3-41ad-aa7d-192f6f915ccd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:5b:dd:b2:a1:26:b2:0c:2e:36:da:b2:db:73:
                    08:2d:bf:eb:73:b3:37:ad:b9:f9:00:8a:b5:79:e8:
                    33:83:3e:3e:06:a9:ff:ae:eb:99:22:fa:2d:3d:ff:
                    a2:86:b9:06:68:e2:83:2b:6d:31:44:ec:1b:fa:41:
                    2e:7c:a8:97:cb:ff:8e:9b:aa:28:86:e6:3f:3d:d9:
                    78:5c:54:0f:a7:7a:6b:bd:c6:7e:1a:99:3f:b9:6a:
                    c6:a2:09:8c:64:5d:ad:20:2f:4f:2c:8e:0d:93:ca:
                    21:47:bb:84:af:ae:e3:c3:1b:ca:84:6c:01:1a:02:
                    28:8b:0b:ce:9d:3a:7f:4c:a9:16:df:46:ce:89:d3:
                    2e:58:be:f4:65:6a:06:ce:2c:ad:48:cd:ca:15:d4:
                    28:50:51:74:e8:f6:81:7e:a4:82:2b:48:9d:e0:e8:
                    8a:fc:d7:f9:95:28:a8:67:58:f3:a0:1d:cc:98:14:
                    31:9e:1d:f8:9a:8e:82:10:12:c6:1d:72:2f:51:6e:
                    9e:b8:40:91:e3:a5:03:0c:6c:76:f2:3d:78:89:77:
                    96:2d:ec:7c:c7:8a:c5:30:f9:99:3d:63:59:3c:7a:
                    1b:ba:6d:32:67:5c:42:a1:1e:ee:a2:6b:9c:d5:a2:
                    35:0c:73:6b:e2:1b:f6:b4:c1:1c:98:43:86:fc:ac:
                    88:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:1B:7B:AC:B8:AE:17:08:73:9E:5D:63:B1:CE:E7:48:64:AD:0D:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/0c31e8b3-9186-3479-bcba-52f57503bf6e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/847c7608-e8de-46e4-803f-28e1912f24ed.crl

            X509v3 Authority Key Identifier:
                keyid:0B:9B:C3:8A:0E:84:3B:6E:76:E3:2B:2A:7D:CD:08:3B:2F:EF:E5:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.49.196.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:4a:90:5c:86:e0:4d:5d:c8:ce:4d:5e:49:9f:e8:ec:ac:9d:
         32:16:c0:69:00:cf:e4:06:23:7b:0d:ab:a7:47:dd:76:ce:62:
         85:d1:18:dc:e2:f1:c1:a8:6c:78:63:a6:8e:e8:cb:04:92:e1:
         77:af:f4:4b:ac:6b:fa:1c:57:76:68:db:e4:76:49:40:12:f8:
         e7:ea:03:6a:c6:3e:0b:b7:3e:d0:eb:05:c6:eb:8c:f9:58:e6:
         81:ec:0c:7d:b4:60:b5:f2:1b:00:97:14:6e:9e:61:41:e5:58:
         2d:0d:be:c6:32:0b:ab:b9:97:4d:6b:f6:ca:d1:1a:f5:13:29:
         55:a5:a0:0c:04:a1:9e:6b:81:43:e8:82:c7:44:c0:04:0e:c4:
         42:78:f6:91:90:f8:7b:e1:eb:24:e4:76:b7:de:31:83:14:5c:
         4f:8d:c4:54:f6:14:a5:b5:51:bc:4c:a4:3a:86:65:4f:f7:dc:
         79:36:57:0c:10:c0:06:c9:e8:30:a4:08:48:ef:8e:1a:40:e7:
         9a:2e:af:02:20:8a:d2:e1:bc:31:04:a1:64:4d:3f:c4:8b:41:
         37:d5:1f:69:6c:d1:22:0e:b0:79:dd:bf:b3:ac:9b:39:cb:87:
         f7:1a:31:bc:67:0c:4f:1d:55:fa:9e:91:4a:d7:36:76:21:75:
         8f:0e:d5:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 02:12:17 2026 by rpki-client