Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/0e46189f-6763-3c78-85f7-44b980d57254.roa
File:                     0e46189f-6763-3c78-85f7-44b980d57254.roa (raw, json)
Hash identifier:          b57L4rJm+2fTNE4GFfYqykjGZOazFn4BTaf3m+raSWE=
Subject key identifier:   66:4E:62:A3:B7:FE:D1:AB:5E:79:C3:1F:9F:DA:EB:99:7A:A0:49:15
Certificate issuer:       /CN=58d2b29f-1da9-4b65-a82f-389822bed566
Certificate serial:       010D0C9F4328584A331ADFECDDCEDA4EFA4CDAC0
Authority key identifier: 3F:C5:A3:7A:1A:1F:74:88:44:CA:33:CB:C7:AD:B9:B5:60:EA:10:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/0e46189f-6763-3c78-85f7-44b980d57254.roa
Signing time:             Sun 15 Jun 2025 13:01:02 +0000
ROA not before:           Sun 15 Jun 2025 13:01:02 +0000
ROA not after:            Sat 13 Sep 2025 13:01:02 +0000
asID:                     40627
IP address blocks:        66.81.247.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/58d2b29f-1da9-4b65-a82f-389822bed566.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/58d2b29f-1da9-4b65-a82f-389822bed566.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:33:1a:df:ec:dd:ce:da:4e:fa:4c:da:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58d2b29f-1da9-4b65-a82f-389822bed566
        Validity
            Not Before: Jun 15 13:01:02 2025 GMT
            Not After : Sep 13 13:01:02 2025 GMT
        Subject: CN=5243936a-476d-431c-b8f7-7fb85139e705
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:25:97:d7:0f:20:65:65:8a:0f:be:8a:a0:72:
                    df:54:55:e9:04:38:02:68:15:7b:fd:e4:1c:f0:08:
                    f5:1e:81:2d:54:82:5b:94:49:0a:be:3d:2b:b7:c2:
                    ad:b3:48:1e:69:77:02:17:3b:90:ed:31:e7:7d:be:
                    a9:34:72:10:9d:1a:7a:75:68:e9:11:f9:e2:e2:2c:
                    db:ef:50:b4:e9:db:d7:32:c4:44:2d:f2:84:94:bc:
                    2a:de:dc:85:3d:bf:9a:eb:79:9b:b4:b7:d5:db:da:
                    3b:62:c0:64:e4:48:ac:36:a8:20:35:ae:cf:47:2e:
                    5f:4f:d7:1d:65:06:ac:55:1d:c2:9d:d3:d7:85:96:
                    14:e0:09:2e:85:f8:e7:b3:1b:cc:af:b6:44:00:53:
                    ab:d4:d1:36:7a:c6:82:33:69:4e:16:61:78:33:39:
                    7b:46:ba:d0:b3:89:bb:f2:52:39:de:b2:a9:69:12:
                    88:24:22:2d:aa:9c:e5:ab:8b:b2:6e:49:1f:72:5c:
                    d2:96:51:35:93:03:ea:5a:91:5b:a7:08:fb:95:bd:
                    c8:72:ea:24:cf:4f:3b:01:b5:21:2e:87:9e:de:4d:
                    30:b1:43:8f:ff:73:5a:1a:c6:c3:9d:9e:8b:98:ff:
                    97:6d:d4:b5:a1:13:01:0c:34:6e:66:9d:f2:f1:1e:
                    10:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:4E:62:A3:B7:FE:D1:AB:5E:79:C3:1F:9F:DA:EB:99:7A:A0:49:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/0e46189f-6763-3c78-85f7-44b980d57254.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/58d2b29f-1da9-4b65-a82f-389822bed566.crl

            X509v3 Authority Key Identifier:
                keyid:3F:C5:A3:7A:1A:1F:74:88:44:CA:33:CB:C7:AD:B9:B5:60:EA:10:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.81.247.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:99:1f:84:a2:6c:c6:c9:f4:94:76:53:c1:17:6a:ce:d4:d2:
         1a:52:ec:76:d1:5e:39:52:75:87:d8:60:6f:a7:b3:de:9b:3b:
         78:08:9d:2e:9a:2f:2d:34:ba:d6:e3:be:af:6a:6f:3b:5e:bc:
         8e:06:bb:9d:04:bf:52:6b:11:58:a7:8a:30:8c:73:19:cc:33:
         5c:84:26:c6:3c:70:ad:8b:f0:5c:fe:dc:7e:62:c9:84:aa:34:
         14:18:57:47:be:5b:ca:52:20:01:19:da:fb:b2:f2:1e:cc:d8:
         6e:92:82:3e:89:ed:6e:dd:09:64:e0:02:81:e7:57:03:b1:16:
         df:de:ab:51:b1:ca:fa:fc:c8:d1:a5:56:8f:17:c4:6b:cc:af:
         25:1e:27:8f:9b:18:36:b8:c7:39:bb:a5:99:ae:ec:ed:22:24:
         90:ed:9d:b3:9b:79:6d:35:d9:c4:af:74:1c:40:47:f6:87:7e:
         d9:cf:bd:7d:8b:8e:a9:d5:ea:56:a2:04:3b:ec:8e:e3:4b:de:
         e2:16:e6:72:e1:fe:2b:9d:8b:ea:78:83:54:dc:fc:26:f5:17:
         e3:6c:b5:f1:6b:27:78:54:15:0d:17:a7:7a:9c:49:a2:86:b8:
         92:72:ab:3a:1b:ee:c3:e0:99:46:f9:22:70:df:04:05:87:7d:
         25:35:a4:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 19:37:28 2025 by rpki-client