Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/b72dadc8-cc14-3741-a346-3df15bd64a4d.roa
File:                     b72dadc8-cc14-3741-a346-3df15bd64a4d.roa (raw, json)
Hash identifier:          yUQ3fQULrmoXLb4vNxNEWX6aV2IIrB4ZW4g2Ry1r5jA=
Subject key identifier:   B1:7B:21:62:86:89:A0:CB:A2:CE:7D:E7:25:6D:53:09:91:B3:1D:9C
Certificate issuer:       /CN=847c7608-e8de-46e4-803f-28e1912f24ed
Certificate serial:       010D0C9F43285848DEA11F26E3E1769CBC16DB00
Authority key identifier: 0B:9B:C3:8A:0E:84:3B:6E:76:E3:2B:2A:7D:CD:08:3B:2F:EF:E5:18
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/b72dadc8-cc14-3741-a346-3df15bd64a4d.roa
Signing time:             Thu 13 Feb 2025 14:00:50 +0000
ROA not before:           Thu 13 Feb 2025 14:00:50 +0000
ROA not after:            Wed 14 May 2025 13:00:50 +0000
asID:                     33139
IP address blocks:        66.49.192.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/847c7608-e8de-46e4-803f-28e1912f24ed.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/847c7608-e8de-46e4-803f-28e1912f24ed.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:de:a1:1f:26:e3:e1:76:9c:bc:16:db:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=847c7608-e8de-46e4-803f-28e1912f24ed
        Validity
            Not Before: Feb 13 14:00:50 2025 GMT
            Not After : May 14 13:00:50 2025 GMT
        Subject: CN=2037d64a-d856-410f-bc47-f426d7a6823f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:12:4f:18:50:ab:45:34:fd:32:03:27:f9:f2:
                    69:66:10:73:0f:bb:27:d9:4d:58:4b:53:5e:4d:2b:
                    99:6c:13:7c:bd:13:70:74:8a:b2:3f:42:cf:a0:e9:
                    95:84:93:c2:76:2c:16:74:a7:b5:12:8c:c0:ea:06:
                    e5:47:04:3c:0f:e5:c4:d5:80:28:47:e1:d5:13:65:
                    14:f9:1b:1f:07:5e:ef:1f:d0:44:0f:63:30:5c:e3:
                    e1:a7:09:07:f8:25:ca:57:e4:f8:28:6d:62:b9:b8:
                    c9:89:74:91:2f:62:30:bf:03:ab:1e:3d:c6:5f:45:
                    fb:02:93:b6:49:e2:41:ed:f0:8e:bf:a9:74:d3:05:
                    83:17:10:e6:41:5a:8d:cc:13:4d:f0:7e:c2:e4:72:
                    bd:0a:5c:ce:9a:c6:45:32:00:03:88:28:53:fe:7d:
                    4a:49:60:fa:cb:4b:17:7a:61:16:03:85:f3:d3:3d:
                    c8:4e:c6:e5:58:dd:1e:69:8f:f1:a6:b6:d5:42:79:
                    d0:88:71:46:0c:fb:29:78:3c:35:5a:25:87:3a:94:
                    e6:da:ad:d9:15:a5:0d:ad:f3:e9:37:d2:33:3c:bc:
                    b1:17:58:bb:62:01:ee:09:a3:84:ab:c8:05:4e:00:
                    ae:41:29:7c:98:a0:88:b0:1b:3d:d4:54:00:48:b1:
                    ba:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:7B:21:62:86:89:A0:CB:A2:CE:7D:E7:25:6D:53:09:91:B3:1D:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/b72dadc8-cc14-3741-a346-3df15bd64a4d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/847c7608-e8de-46e4-803f-28e1912f24ed.crl

            X509v3 Authority Key Identifier:
                keyid:0B:9B:C3:8A:0E:84:3B:6E:76:E3:2B:2A:7D:CD:08:3B:2F:EF:E5:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.49.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:2e:45:4e:40:c6:63:ee:b9:4f:17:f2:ca:45:b8:a4:7b:aa:
         45:40:01:bf:0b:cc:54:26:0e:54:c5:4c:04:a2:2f:fb:d8:49:
         21:d9:98:59:39:ac:9d:db:b6:46:f1:38:36:77:fa:61:47:2e:
         aa:ce:dd:5b:6a:db:c1:b4:36:07:c5:44:05:89:01:f0:35:99:
         0e:8e:fd:37:3c:56:47:8b:b9:08:1a:60:90:30:08:d0:c8:b3:
         33:bd:2d:f2:f8:d3:1e:25:5f:62:db:5e:4b:34:63:d8:3f:30:
         cf:f1:5a:0f:06:06:30:9f:57:91:d9:52:fa:f0:7b:dd:d5:ef:
         93:c3:81:69:7e:96:17:d7:02:14:00:bf:d7:3d:43:27:f7:80:
         74:92:a1:9a:9b:16:d0:a2:2f:85:57:63:38:8c:ca:06:1f:da:
         9f:18:7b:70:5a:f5:ac:4d:05:5d:d7:34:22:ff:db:2a:99:d1:
         cd:38:9b:52:39:84:50:64:57:51:d5:03:04:f1:74:bf:4c:a8:
         3f:0d:0d:3a:10:19:a3:06:80:5b:e2:3b:36:8e:32:2e:62:f8:
         ed:9f:0b:fc:bd:b8:95:89:c4:02:5d:1d:e6:04:12:e1:07:91:
         95:d8:1e:0b:ab:eb:e3:b7:c4:83:54:1a:39:c6:e7:07:60:7f:
         81:f9:86:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:26:27 2025 by rpki-client