Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/ce7c0c58-988a-351a-9d02-4c135ad72b0b.roa
File:                     ce7c0c58-988a-351a-9d02-4c135ad72b0b.roa (raw, json)
Hash identifier:          cmn6uD1+ID8GygZO6/K6nXW9qtqKa4zZf2EqMi3ZiDg=
Subject key identifier:   E6:01:79:94:8E:BB:9B:03:30:B5:C2:7A:8F:0C:4E:13:6B:D6:7E:21
Certificate issuer:       /CN=847c7608-e8de-46e4-803f-28e1912f24ed
Certificate serial:       010D0C9F4328584EC20C6E360C7EC62F0C53CBC0
Authority key identifier: 0B:9B:C3:8A:0E:84:3B:6E:76:E3:2B:2A:7D:CD:08:3B:2F:EF:E5:18
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/ce7c0c58-988a-351a-9d02-4c135ad72b0b.roa
Signing time:             Fri 07 Aug 2026 13:00:11 +0000
ROA not before:           Fri 07 Aug 2026 13:00:11 +0000
ROA not after:            Thu 05 Nov 2026 14:00:11 +0000
asID:                     33139
IP address blocks:        66.49.197.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/847c7608-e8de-46e4-803f-28e1912f24ed.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/847c7608-e8de-46e4-803f-28e1912f24ed.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Aug 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c2:0c:6e:36:0c:7e:c6:2f:0c:53:cb:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=847c7608-e8de-46e4-803f-28e1912f24ed
        Validity
            Not Before: Aug  7 13:00:11 2026 GMT
            Not After : Nov  5 14:00:11 2026 GMT
        Subject: CN=80590942-9360-42ae-a5a2-2db420819b20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:ee:6e:08:ef:20:5e:13:e7:27:a2:ac:d7:07:
                    7e:86:0c:80:28:7c:39:4d:b8:90:f3:3b:3d:0e:a4:
                    5a:cc:99:65:e0:db:17:7e:99:83:86:e7:1e:47:f3:
                    db:5b:92:17:eb:7f:c2:55:c1:05:b7:49:82:66:80:
                    c4:88:ed:5a:c8:96:6e:28:a8:0c:73:29:39:fb:03:
                    ad:ec:13:e1:39:7b:47:0b:fb:b7:24:20:e5:1f:d6:
                    23:69:15:4d:36:66:71:0d:6f:d5:de:91:30:63:97:
                    ee:c8:5f:b6:5a:a5:dc:47:72:39:bf:e7:09:60:68:
                    e9:f6:47:09:f6:61:23:f5:56:ec:1f:b3:70:28:98:
                    82:72:e8:61:25:ba:b0:db:c2:d8:1b:84:98:79:62:
                    82:88:9c:4f:f2:d0:9f:b4:8c:ad:91:80:2c:31:0f:
                    6a:15:44:8e:c2:f1:e8:01:7e:ff:64:00:a7:de:02:
                    45:43:13:96:53:f9:cf:3b:ce:2c:5a:41:cc:f1:96:
                    cd:2e:22:f7:83:c2:3f:e7:bf:c7:0e:f7:13:c9:08:
                    5a:51:e9:60:b4:02:8a:e6:a4:5e:cf:85:70:4b:07:
                    c0:3c:8f:dd:b2:4c:3a:e1:51:1e:39:30:d0:a6:54:
                    f1:d9:23:07:d5:3f:35:63:a8:21:c6:ec:4a:b0:2e:
                    cc:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:01:79:94:8E:BB:9B:03:30:B5:C2:7A:8F:0C:4E:13:6B:D6:7E:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/ce7c0c58-988a-351a-9d02-4c135ad72b0b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/847c7608-e8de-46e4-803f-28e1912f24ed.crl

            X509v3 Authority Key Identifier:
                keyid:0B:9B:C3:8A:0E:84:3B:6E:76:E3:2B:2A:7D:CD:08:3B:2F:EF:E5:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.49.197.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:36:49:da:85:0c:1e:b9:62:ab:8c:f9:95:e4:69:20:45:c8:
         be:22:28:63:cc:58:00:7c:8d:04:18:e1:06:dc:11:9e:62:ae:
         c8:53:8a:fd:69:df:78:78:c9:d0:60:7a:04:0a:ce:6f:3c:39:
         57:d5:5d:11:38:33:8d:a7:7d:bb:6a:b9:2c:36:05:cc:b6:26:
         f3:09:dd:9a:42:60:7c:47:32:2e:ce:ee:03:63:a4:ed:9e:52:
         8e:6d:2e:24:18:b6:da:a1:ec:ad:c9:0f:f4:d0:4b:6c:c7:e0:
         3f:88:69:b0:b9:85:6e:9d:7a:b3:19:33:47:19:81:01:b9:51:
         04:ad:a2:02:be:3b:df:74:cc:f3:ad:c0:8e:4a:cf:54:75:44:
         e3:7e:9e:bd:5d:7d:69:e0:99:dc:bb:10:0c:fd:ce:7b:8a:b4:
         0c:63:33:33:56:b4:1a:6d:96:8a:13:16:5c:fe:c9:a5:8e:19:
         ae:7c:51:74:ca:3d:c0:d2:d8:ff:51:1f:9b:74:12:5e:4c:28:
         23:8b:82:a6:0e:2f:a3:a3:b5:92:1d:7d:50:00:54:d3:ea:64:
         b1:a0:3d:03:b9:df:cc:4e:a0:86:9c:fe:b1:34:15:5c:c8:33:
         8d:80:aa:47:33:20:c6:59:e5:51:36:65:f8:1a:db:20:45:2e:
         69:96:e9:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 02:12:10 2026 by rpki-client