Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/432aa5cf-74c1-3d95-9174-41f56abbc60b.roa
File:                     432aa5cf-74c1-3d95-9174-41f56abbc60b.roa (raw, json)
Hash identifier:          qV2W1kNTAUuk5/CxXYm9ZgXRYj0dZd1YerR1XGGzjAo=
Subject key identifier:   E5:A9:7F:9D:D3:34:F1:55:9E:59:EB:FA:A0:B7:16:A6:AC:46:85:C5
Certificate issuer:       /CN=847c7608-e8de-46e4-803f-28e1912f24ed
Certificate serial:       010D0C9F43285848E16BE93F19C8AE654AC9A980
Authority key identifier: 0B:9B:C3:8A:0E:84:3B:6E:76:E3:2B:2A:7D:CD:08:3B:2F:EF:E5:18
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/432aa5cf-74c1-3d95-9174-41f56abbc60b.roa
Signing time:             Fri 14 Feb 2025 14:00:52 +0000
ROA not before:           Fri 14 Feb 2025 14:00:52 +0000
ROA not after:            Thu 15 May 2025 13:00:52 +0000
asID:                     33139
IP address blocks:        66.49.199.0/24 maxlen: 24
                          66.49.200.0/24 maxlen: 24
                          66.49.201.0/24 maxlen: 24
                          66.49.202.0/24 maxlen: 24
                          66.49.203.0/24 maxlen: 24
                          66.49.204.0/24 maxlen: 24
                          66.49.206.0/24 maxlen: 24
                          66.49.207.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/847c7608-e8de-46e4-803f-28e1912f24ed.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/847c7608-e8de-46e4-803f-28e1912f24ed.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e1:6b:e9:3f:19:c8:ae:65:4a:c9:a9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=847c7608-e8de-46e4-803f-28e1912f24ed
        Validity
            Not Before: Feb 14 14:00:52 2025 GMT
            Not After : May 15 13:00:52 2025 GMT
        Subject: CN=60ed85f0-8df1-4c16-8f35-7f9b61c14c98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:5f:5c:26:f1:20:58:fb:53:56:36:94:3c:94:
                    8b:1c:f3:72:f2:52:05:5a:76:ec:a2:39:2b:26:6e:
                    9a:5d:2b:c7:aa:a4:87:ad:89:ce:5c:e2:11:4c:56:
                    b1:a7:d1:89:8c:39:15:61:52:13:b7:f2:4c:da:29:
                    3c:04:18:bf:ba:87:49:57:2f:2c:f8:e2:c3:a5:af:
                    64:c7:39:67:60:34:cc:ad:cd:a6:3c:52:7d:35:b6:
                    70:25:78:93:48:cb:2a:1d:cf:54:ea:d3:4e:16:9a:
                    f7:7d:34:58:51:32:8a:32:7d:0e:7f:2c:fc:fe:9e:
                    90:84:8e:b3:09:f8:93:f9:47:c6:04:a0:87:be:82:
                    65:07:8e:87:dd:1f:6f:72:d2:b2:df:a4:d7:65:71:
                    17:7a:71:cc:38:72:77:80:6f:ae:05:79:86:a3:89:
                    67:41:f8:38:82:98:e9:b1:7e:b3:01:ba:01:25:bf:
                    79:3b:c8:49:2c:d9:10:d6:c2:c8:16:8a:ac:86:0c:
                    9d:60:16:5a:00:8d:60:42:84:c3:ab:f3:34:6f:da:
                    32:5c:2f:f6:08:59:cc:76:38:70:a1:46:bf:52:63:
                    7e:64:d3:1f:a1:c7:ba:ab:2c:32:f3:7a:29:9a:36:
                    e1:b4:d9:e0:46:87:16:3d:c1:5b:04:b9:45:07:4c:
                    03:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:A9:7F:9D:D3:34:F1:55:9E:59:EB:FA:A0:B7:16:A6:AC:46:85:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/432aa5cf-74c1-3d95-9174-41f56abbc60b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/847c7608-e8de-46e4-803f-28e1912f24ed.crl

            X509v3 Authority Key Identifier:
                keyid:0B:9B:C3:8A:0E:84:3B:6E:76:E3:2B:2A:7D:CD:08:3B:2F:EF:E5:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.49.199.0-66.49.204.255
                  66.49.206.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:6e:67:27:06:d5:b0:9c:0f:ca:87:5c:92:cd:cd:b6:cf:37:
         5e:7b:5e:74:ba:24:4f:9d:69:85:06:10:77:eb:60:ee:7a:0e:
         2b:c2:05:14:d0:59:36:45:a4:0c:64:20:d9:f0:5b:7f:40:60:
         ec:9f:4d:34:09:3c:5f:52:ac:6b:26:d7:80:ee:0f:4d:09:09:
         07:de:b4:01:63:6d:d0:e2:a1:ae:b8:e1:1e:dd:f2:f4:96:8d:
         b6:6d:5f:cd:aa:0c:28:33:d5:65:6e:28:b6:b2:f2:e1:e4:3d:
         10:d8:ab:6a:69:a1:82:c2:d9:89:5d:25:dd:e5:8a:cf:4f:5b:
         2a:78:8e:26:96:f8:c2:a2:fb:de:0e:1c:cc:2d:7c:c6:f2:f4:
         d4:34:4c:a5:26:98:a2:25:b1:4a:e0:8a:bc:df:c7:2d:a2:7f:
         bc:ec:55:ed:a6:36:43:9f:16:19:43:25:0e:9e:3b:48:2c:9e:
         d4:ac:36:8a:ae:a0:9f:78:57:58:09:65:7f:98:a1:90:1e:df:
         d3:c9:18:2d:01:2e:12:e5:81:65:62:89:c2:ed:2e:2c:65:6c:
         ed:56:f3:ba:cc:a0:9e:9b:5d:ae:8d:d5:5c:9c:16:b6:b0:fa:
         30:31:73:b1:37:43:17:9d:ad:b7:28:32:30:c4:a2:c1:57:d9:
         0c:3b:8d:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 05:19:48 2025 by rpki-client