Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/17b5369b-2ee4-3186-9336-78eda451aa42.roa
File:                     17b5369b-2ee4-3186-9336-78eda451aa42.roa (raw, json)
Hash identifier:          sY36Abc6TUNs01fC48xEXuSR/6aoDdhnhtmUrLjOapE=
Subject key identifier:   28:EA:06:91:F8:EB:9F:8A:81:13:96:5F:BB:1D:79:C3:43:6F:02:E4
Certificate issuer:       /CN=847c7608-e8de-46e4-803f-28e1912f24ed
Certificate serial:       010D0C9F4328584D3DFFAE98F736A2413B09B200
Authority key identifier: 0B:9B:C3:8A:0E:84:3B:6E:76:E3:2B:2A:7D:CD:08:3B:2F:EF:E5:18
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/17b5369b-2ee4-3186-9336-78eda451aa42.roa
Signing time:             Sat 21 Mar 2026 13:00:39 +0000
ROA not before:           Sat 21 Mar 2026 13:00:39 +0000
ROA not after:            Fri 19 Jun 2026 13:00:39 +0000
asID:                     33139
IP address blocks:        66.49.192.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/847c7608-e8de-46e4-803f-28e1912f24ed.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/847c7608-e8de-46e4-803f-28e1912f24ed.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 23 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:3d:ff:ae:98:f7:36:a2:41:3b:09:b2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=847c7608-e8de-46e4-803f-28e1912f24ed
        Validity
            Not Before: Mar 21 13:00:39 2026 GMT
            Not After : Jun 19 13:00:39 2026 GMT
        Subject: CN=73df9209-12fe-4329-bde7-15aedd981b61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:b0:0c:b4:b2:83:e1:e4:d4:1a:4d:d7:4c:e0:
                    00:0b:c2:9d:6f:14:c4:b8:dc:57:62:37:48:87:c3:
                    aa:56:de:fd:c7:35:c4:ca:32:03:bf:ea:7d:c6:8f:
                    05:a7:f9:6b:4c:89:fc:cd:d8:3e:47:18:5a:bd:6f:
                    e6:3d:ef:be:a8:5a:3d:f1:d0:6f:dc:53:bd:42:b7:
                    b2:fa:b0:84:84:e9:2a:49:db:35:fb:ba:72:02:be:
                    b9:04:da:25:48:ee:24:ed:3a:95:8c:da:3f:3b:62:
                    d2:24:e5:24:bd:41:60:8b:75:15:f2:b3:10:25:e6:
                    cb:04:74:52:3d:90:b0:e1:72:01:a3:83:6a:ca:47:
                    02:15:a9:91:f2:26:eb:dc:51:8a:0f:05:55:0b:1d:
                    a5:0b:83:04:5c:9c:8d:35:00:3f:f4:bc:a5:5b:48:
                    fa:e0:08:5e:16:73:61:6d:f1:a6:5c:10:f7:e8:99:
                    b7:36:40:bc:05:07:de:e6:b1:80:93:36:df:61:84:
                    67:b5:27:05:32:0f:b6:b2:9e:0f:64:2e:1e:11:a7:
                    53:c8:e9:13:cf:97:8d:ed:3f:32:d7:ad:e8:65:04:
                    67:d0:cd:4d:02:b4:3d:56:8a:58:04:b4:68:7c:9c:
                    db:b6:82:26:ec:ca:78:da:7b:b2:a2:57:0a:7d:8d:
                    60:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:EA:06:91:F8:EB:9F:8A:81:13:96:5F:BB:1D:79:C3:43:6F:02:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/17b5369b-2ee4-3186-9336-78eda451aa42.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/847c7608-e8de-46e4-803f-28e1912f24ed.crl

            X509v3 Authority Key Identifier:
                keyid:0B:9B:C3:8A:0E:84:3B:6E:76:E3:2B:2A:7D:CD:08:3B:2F:EF:E5:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.49.192.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:8b:07:4e:d5:f7:db:29:2c:e8:c0:47:1d:9a:c4:21:00:07:
         76:c2:cd:50:16:04:e2:b9:25:ea:0f:be:41:e7:74:10:a1:07:
         28:3b:e7:74:f3:db:e3:a4:35:0e:fc:22:52:61:39:b8:71:c4:
         fd:56:20:ad:a7:a4:c8:ec:81:87:f5:4f:85:23:98:59:08:33:
         1d:42:76:6d:a3:5c:79:b0:2f:5f:07:04:df:78:95:b7:77:89:
         d2:69:b2:ed:e7:55:2e:67:36:55:c7:cd:54:a6:34:19:53:cf:
         06:ca:1e:5a:76:5b:96:33:b8:e8:fe:f5:b8:6c:76:81:b4:12:
         f7:b2:49:f4:29:84:4a:9d:da:95:c4:1e:1c:dd:e9:f0:06:c3:
         01:8c:df:41:2c:30:a2:43:80:4d:eb:fb:d2:51:77:3f:93:96:
         a9:2c:20:9d:0b:68:fc:78:b2:f8:de:e7:ff:d0:b6:aa:c6:96:
         d7:3f:15:0f:9d:10:32:e4:a4:cf:40:d3:90:10:2f:0a:93:bf:
         eb:3e:fc:68:aa:aa:11:a5:4c:c4:39:c0:dc:d0:47:31:4f:63:
         78:82:44:ce:bc:50:53:9a:49:3b:fc:4c:13:f7:5e:5e:f7:3a:
         0a:5b:46:3e:1e:67:cd:ad:81:59:70:ee:3f:eb:71:99:a5:ad:
         0d:21:1b:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 22 12:35:37 2026 by rpki-client