Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/283c33f6-719a-4205-86d9-7cf90d013622/78600027-08d3-39c7-9f0c-a2e6862fcb4c.roa
File:                     78600027-08d3-39c7-9f0c-a2e6862fcb4c.roa (raw, json)
Hash identifier:          ZULXKlvYtFwQOk2XWYAslrKxuraijzZDRTkoE7YONQc=
Subject key identifier:   5A:A4:85:68:CB:08:50:A5:E9:74:FF:5B:C9:92:82:B4:B1:25:36:7B
Certificate issuer:       /CN=283c33f6-719a-4205-86d9-7cf90d013622
Certificate serial:       010D0C9F4328584AD7E7AE1DEF269E8DDF9ED300
Authority key identifier: 43:22:70:6A:EE:04:F8:BD:8C:71:3C:F5:43:3D:D6:70:54:A9:D1:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/283c33f6-719a-4205-86d9-7cf90d013622.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/283c33f6-719a-4205-86d9-7cf90d013622/78600027-08d3-39c7-9f0c-a2e6862fcb4c.roa
Signing time:             Sat 09 Aug 2025 19:08:39 +0000
ROA not before:           Sat 09 Aug 2025 19:08:39 +0000
ROA not after:            Fri 07 Nov 2025 20:08:39 +0000
asID:                     399992
IP address blocks:        66.118.58.0/24 maxlen: 24
                          2602:f5a0::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/283c33f6-719a-4205-86d9-7cf90d013622/283c33f6-719a-4205-86d9-7cf90d013622.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/283c33f6-719a-4205-86d9-7cf90d013622/283c33f6-719a-4205-86d9-7cf90d013622.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/283c33f6-719a-4205-86d9-7cf90d013622.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d7:e7:ae:1d:ef:26:9e:8d:df:9e:d3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=283c33f6-719a-4205-86d9-7cf90d013622
        Validity
            Not Before: Aug  9 19:08:39 2025 GMT
            Not After : Nov  7 20:08:39 2025 GMT
        Subject: CN=dee1ccc6-b320-4d84-a0f6-f61a162f1113
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:a5:a0:e9:70:ec:8a:35:3a:3f:8d:e8:ac:9c:
                    12:b2:eb:57:43:6c:5b:ba:a3:0f:c5:2a:ba:ca:e7:
                    28:37:5d:03:37:9e:49:0c:e5:66:6c:a0:5d:5c:25:
                    32:c2:be:6d:5d:a5:26:d1:eb:07:87:9b:9e:af:e4:
                    bc:eb:27:82:fe:e7:db:f1:60:d0:31:70:2d:af:ff:
                    7a:5b:fd:33:2c:9b:4f:39:a0:ee:28:e1:32:eb:26:
                    39:63:5c:3c:c2:df:0e:38:fb:ce:05:8d:b7:e7:46:
                    35:37:b8:57:4e:5f:05:40:60:ee:cf:24:c6:fc:22:
                    b8:41:73:93:45:b8:2b:f8:5c:c7:4d:a0:b4:03:d8:
                    46:96:da:50:29:47:30:42:53:25:a7:b4:7a:4e:61:
                    76:a7:d7:33:6a:03:a7:c4:00:5f:d8:3b:27:fa:39:
                    1b:6c:2e:51:10:79:fb:31:d1:20:d3:2c:df:77:57:
                    c9:c6:31:ac:7c:96:e4:f3:63:75:29:87:7b:f1:cf:
                    e9:57:a6:01:64:9e:9f:40:ab:89:80:c6:a4:2a:99:
                    79:53:fe:b7:26:f8:fb:e4:09:14:8a:64:54:d1:c3:
                    96:87:ae:44:1d:eb:21:8a:35:14:76:28:24:48:1d:
                    1c:60:35:68:fa:62:a8:46:04:b9:c4:bb:5c:b3:18:
                    e0:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:A4:85:68:CB:08:50:A5:E9:74:FF:5B:C9:92:82:B4:B1:25:36:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/283c33f6-719a-4205-86d9-7cf90d013622/78600027-08d3-39c7-9f0c-a2e6862fcb4c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/283c33f6-719a-4205-86d9-7cf90d013622/283c33f6-719a-4205-86d9-7cf90d013622.crl

            X509v3 Authority Key Identifier:
                keyid:43:22:70:6A:EE:04:F8:BD:8C:71:3C:F5:43:3D:D6:70:54:A9:D1:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/283c33f6-719a-4205-86d9-7cf90d013622.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.118.58.0/24
                IPv6:
                  2602:f5a0::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:8f:19:f9:d3:66:ea:de:88:51:96:c1:3f:a0:92:29:d0:80:
         47:b4:3b:ac:f5:09:d3:42:93:1e:06:5c:b8:39:46:a1:85:c5:
         e3:b0:a5:1b:c6:d9:e8:94:74:bc:d5:4b:08:31:68:62:70:fb:
         2a:66:e4:3b:07:89:13:0a:48:5a:26:be:98:f2:14:d4:c4:f1:
         9b:5c:00:49:42:aa:6f:25:83:97:ac:42:64:29:40:b0:30:94:
         d8:3c:0a:be:3a:1c:e9:7f:83:9e:3d:be:7d:b9:be:71:5d:92:
         86:4e:aa:e8:22:69:10:db:0e:fe:52:db:a0:40:41:6e:d0:2d:
         d3:98:90:b3:7c:38:1c:76:83:ce:5e:26:74:7f:34:2f:71:8f:
         b1:72:6b:01:14:25:99:68:bb:a5:d0:6d:10:6d:09:d0:6d:00:
         9e:e1:8e:b1:8a:e9:67:a4:f3:84:fa:ea:6b:8a:f1:79:6c:5e:
         a8:2f:ec:d9:58:e6:cf:d7:93:a4:78:4f:c9:6f:a1:85:28:69:
         92:f2:b7:52:1e:06:d3:bb:e0:1e:62:b5:3c:81:1c:30:03:50:
         3e:27:2e:b6:60:10:75:36:32:8a:e6:03:58:4f:56:ab:37:f3:
         16:1d:7d:76:60:8f:2a:f5:7a:f9:c8:9e:0f:ce:ab:4e:1a:71:
         ab:b1:21:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 08:02:12 2025 by rpki-client