Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/432aa5cf-74c1-3d95-9174-41f56abbc60b.roa
File:                     432aa5cf-74c1-3d95-9174-41f56abbc60b.roa (raw, json)
Hash identifier:          Al50782WA3ulQEpKMxnBOOd6v2fEHgt9pGb/oqlUfys=
Subject key identifier:   CB:C5:8B:75:03:EC:2B:2F:41:20:74:F0:B6:9F:3B:81:00:8D:98:AA
Certificate issuer:       /CN=847c7608-e8de-46e4-803f-28e1912f24ed
Certificate serial:       010D0C9F4328584F63F81FECD61973D02DC544F0
Authority key identifier: 0B:9B:C3:8A:0E:84:3B:6E:76:E3:2B:2A:7D:CD:08:3B:2F:EF:E5:18
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/432aa5cf-74c1-3d95-9174-41f56abbc60b.roa
Signing time:             Sun 04 Oct 2026 13:00:13 +0000
ROA not before:           Sun 04 Oct 2026 13:00:13 +0000
ROA not after:            Sat 02 Jan 2027 14:00:13 +0000
asID:                     33139
IP address blocks:        66.49.199.0/24 maxlen: 24
                          66.49.200.0/24 maxlen: 24
                          66.49.201.0/24 maxlen: 24
                          66.49.202.0/24 maxlen: 24
                          66.49.203.0/24 maxlen: 24
                          66.49.204.0/24 maxlen: 24
                          66.49.206.0/24 maxlen: 24
                          66.49.207.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/847c7608-e8de-46e4-803f-28e1912f24ed.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/847c7608-e8de-46e4-803f-28e1912f24ed.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:63:f8:1f:ec:d6:19:73:d0:2d:c5:44:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=847c7608-e8de-46e4-803f-28e1912f24ed
        Validity
            Not Before: Oct  4 13:00:13 2026 GMT
            Not After : Jan  2 14:00:13 2027 GMT
        Subject: CN=2dc46744-f0e4-43ad-bc18-c79316ef76d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:14:af:ad:d9:a0:c6:33:94:4d:61:dd:c2:23:
                    0b:ef:0b:9d:c6:7e:84:c1:77:a5:55:df:c6:ce:56:
                    3f:8c:37:96:34:76:83:69:27:fe:2e:2b:1f:bc:3b:
                    16:f6:12:0a:03:bb:08:92:e8:13:05:39:b5:f1:f0:
                    18:e8:9c:ca:01:19:e6:20:93:c9:c7:cd:8a:1c:e2:
                    25:a7:8a:59:af:41:3b:14:8c:e4:db:fd:61:0d:0e:
                    b2:a4:c4:84:e2:26:e4:6c:a5:59:8c:95:63:13:1a:
                    5e:88:29:f6:c5:de:8d:78:ec:5f:6e:1b:f6:44:d3:
                    b7:e0:99:fa:05:f9:c0:cf:b9:8a:c9:14:f1:c6:42:
                    b3:71:95:95:63:09:e7:52:fb:59:0a:76:2f:5f:79:
                    e9:96:e0:da:96:41:b4:84:9d:b3:f6:3e:92:d8:66:
                    95:20:d6:af:6c:1d:36:85:f2:31:40:60:61:8a:e8:
                    45:0a:e2:7a:65:84:b3:9e:d5:f7:0d:53:dd:7c:75:
                    2c:ad:0f:07:73:95:1a:02:9f:3a:48:b4:15:83:7a:
                    72:32:6c:73:5b:91:a8:ad:7d:23:42:be:2f:9e:ea:
                    b7:f5:92:69:b0:13:f6:4c:c5:4f:27:63:9d:70:10:
                    9e:42:db:3e:35:95:df:7f:83:1c:45:6f:a9:6c:b1:
                    43:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:C5:8B:75:03:EC:2B:2F:41:20:74:F0:B6:9F:3B:81:00:8D:98:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/432aa5cf-74c1-3d95-9174-41f56abbc60b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/847c7608-e8de-46e4-803f-28e1912f24ed.crl

            X509v3 Authority Key Identifier:
                keyid:0B:9B:C3:8A:0E:84:3B:6E:76:E3:2B:2A:7D:CD:08:3B:2F:EF:E5:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.49.199.0-66.49.204.255
                  66.49.206.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:2f:c3:12:55:15:05:c2:d2:ad:ee:76:8c:72:df:e5:d8:f3:
         7d:8c:dc:c9:fd:3f:4c:8d:cd:41:5c:fa:71:48:1c:31:93:60:
         d9:c0:38:01:4d:75:3e:ea:86:58:cb:8e:31:70:b9:36:60:95:
         76:32:87:ab:e7:55:3c:32:4d:92:09:b6:8e:20:33:a7:91:65:
         4b:76:96:bb:68:db:0d:ec:ba:e7:3a:3a:99:2c:58:dd:5b:82:
         d7:ec:11:33:85:59:71:ce:c0:b3:1c:61:d1:38:b6:c4:77:a4:
         d4:b0:9e:78:08:85:6b:53:f8:1a:a1:9f:dd:be:f3:51:44:50:
         75:b1:01:cb:a0:75:43:16:5f:d5:87:91:63:d4:d7:93:36:2f:
         0f:24:72:95:b1:ba:22:81:b8:27:9e:00:8a:57:6f:34:c5:70:
         26:d0:47:62:bd:6e:3b:8b:4a:cc:db:dd:63:d5:ff:62:d6:0c:
         af:99:a8:57:41:be:e8:37:c3:2a:f6:b2:1e:e6:b6:96:f7:0c:
         f0:1c:a1:82:ac:24:8d:78:8e:8c:d2:68:f1:2e:a8:19:54:84:
         9a:f3:c5:a3:52:fa:f1:21:e0:2c:47:2f:a1:8d:11:49:c9:f2:
         c7:8c:04:b1:88:4a:aa:a6:24:81:80:f5:42:e3:51:22:b5:2a:
         10:90:d1:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 20:19:25 2026 by rpki-client