Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/b72dadc8-cc14-3741-a346-3df15bd64a4d.roa
File:                     b72dadc8-cc14-3741-a346-3df15bd64a4d.roa (raw, json)
Hash identifier:          3M/GC8oqndHMSt7obPdLfk7Dj3QSSaEUKryVmxqLEN8=
Subject key identifier:   E4:DC:AB:2D:7B:7C:70:88:1C:6C:70:1B:DC:2E:53:6B:AA:5F:EF:17
Certificate issuer:       /CN=847c7608-e8de-46e4-803f-28e1912f24ed
Certificate serial:       010D0C9F4328584D3DFFAE8BF3A437E2C27526E0
Authority key identifier: 0B:9B:C3:8A:0E:84:3B:6E:76:E3:2B:2A:7D:CD:08:3B:2F:EF:E5:18
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/b72dadc8-cc14-3741-a346-3df15bd64a4d.roa
Signing time:             Sat 21 Mar 2026 13:00:39 +0000
ROA not before:           Sat 21 Mar 2026 13:00:39 +0000
ROA not after:            Fri 19 Jun 2026 13:00:39 +0000
asID:                     33139
IP address blocks:        66.49.192.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/847c7608-e8de-46e4-803f-28e1912f24ed.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/847c7608-e8de-46e4-803f-28e1912f24ed.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 23 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:3d:ff:ae:8b:f3:a4:37:e2:c2:75:26:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=847c7608-e8de-46e4-803f-28e1912f24ed
        Validity
            Not Before: Mar 21 13:00:39 2026 GMT
            Not After : Jun 19 13:00:39 2026 GMT
        Subject: CN=e3e94a6d-b198-4d77-a7fa-d35de9c6d488
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:58:d1:26:ee:b9:d8:75:9e:05:12:7f:b9:8a:
                    eb:49:8f:61:e1:e8:18:67:32:7b:f4:a0:e3:a0:c9:
                    ac:80:de:c8:32:2e:3d:89:bb:a7:87:aa:33:4c:14:
                    59:3f:17:47:55:40:9d:dc:84:e2:21:f3:37:9b:3c:
                    c7:89:22:26:6b:2d:e6:48:0b:e8:dc:35:26:02:56:
                    97:39:5a:16:92:1b:70:df:ad:fe:6d:72:24:45:3e:
                    d4:1c:b3:60:3d:e9:ce:65:60:ad:43:ab:13:c0:b0:
                    88:53:1c:e3:1b:9e:ed:b5:86:b1:79:19:b1:91:51:
                    89:c8:cd:a4:70:c7:28:c9:92:04:23:09:47:09:e7:
                    54:4c:f9:30:b2:07:b8:18:a4:c9:d1:9b:f9:3e:e9:
                    5d:88:14:07:4e:67:25:85:26:48:64:61:03:c7:24:
                    54:56:5a:cd:69:75:c1:c1:b0:a3:42:d1:47:cf:de:
                    bc:61:06:9e:86:e5:2d:67:48:65:b8:dc:91:1e:c6:
                    f7:6e:1f:55:de:2a:6c:0f:15:81:3e:0b:da:a0:f3:
                    71:d1:22:1d:e7:43:0c:ad:27:35:ac:a3:a2:9e:46:
                    9c:54:3f:28:3f:66:58:27:45:de:7a:da:45:0a:c4:
                    ea:a9:f7:49:03:ae:eb:14:fe:66:74:ef:12:f4:03:
                    a7:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:DC:AB:2D:7B:7C:70:88:1C:6C:70:1B:DC:2E:53:6B:AA:5F:EF:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/b72dadc8-cc14-3741-a346-3df15bd64a4d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/847c7608-e8de-46e4-803f-28e1912f24ed.crl

            X509v3 Authority Key Identifier:
                keyid:0B:9B:C3:8A:0E:84:3B:6E:76:E3:2B:2A:7D:CD:08:3B:2F:EF:E5:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.49.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:af:cd:52:04:46:ed:06:e5:d4:0f:5a:4d:df:1e:dd:49:b2:
         08:f6:ce:18:48:c1:e9:56:82:87:ea:1e:c8:ea:95:bd:00:5d:
         f4:ea:28:11:66:6e:ac:2b:9e:65:d5:07:36:f7:16:ef:60:5d:
         e0:4c:09:1c:2a:76:0b:0e:b9:05:42:75:c2:c2:95:f6:be:f5:
         a5:b6:83:dc:42:d9:7e:04:f9:3c:45:3e:92:a5:2c:bb:28:d0:
         ce:09:8a:5a:13:b5:56:e1:bd:86:d3:cf:b5:af:41:3c:30:a8:
         9a:f6:b9:f9:7a:76:8c:aa:eb:77:b0:82:d3:9d:a9:cb:a5:d9:
         56:15:cb:d3:c3:06:2b:08:9c:1f:4c:88:5d:45:3f:53:1a:97:
         da:39:e5:0f:a1:da:91:fe:9a:e8:ee:0d:b2:ca:1b:3a:67:42:
         51:7b:36:2f:dc:15:0a:db:14:a3:1e:4a:62:82:e8:9e:d1:3f:
         1c:df:32:5b:ac:a7:d1:c2:e0:26:4e:58:20:b7:f4:13:c1:c0:
         73:89:44:05:b3:8d:7c:11:34:15:d4:52:f5:91:99:69:89:5d:
         d3:3a:0d:f2:87:9d:61:d8:31:5a:08:3e:f4:7e:d8:65:f4:5d:
         16:4b:37:00:5a:be:39:6c:df:a3:d0:ee:20:47:1d:c3:7e:3b:
         44:29:35:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 22 12:34:07 2026 by rpki-client