Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/32ab3bc6-1d39-30e4-b41c-322544b0befd.roa
File:                     32ab3bc6-1d39-30e4-b41c-322544b0befd.roa (raw, json)
Hash identifier:          5PmpAguZ5Vofr7DsC16igiEnUIWzOe7MG6uNobo00Jo=
Subject key identifier:   99:CF:94:E6:23:5E:79:2F:EA:A0:D9:7E:FE:57:33:62:CE:7E:59:EA
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285849D1654F2C4358370574464600
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/32ab3bc6-1d39-30e4-b41c-322544b0befd.roa
Signing time:             Sun 11 May 2025 13:01:01 +0000
ROA not before:           Sun 11 May 2025 13:01:01 +0000
ROA not after:            Sat 09 Aug 2025 13:01:01 +0000
asID:                     58061
IP address blocks:        166.1.59.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d1:65:4f:2c:43:58:37:05:74:46:46:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May 11 13:01:01 2025 GMT
            Not After : Aug  9 13:01:01 2025 GMT
        Subject: CN=78ad7933-4ab6-48d4-a504-83bd4b4b44f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:c7:82:16:ec:87:46:b4:65:d8:fb:f5:12:54:
                    5f:71:93:51:0e:a8:20:f3:a2:1b:ba:df:9f:18:3a:
                    6c:f6:61:26:05:95:d6:05:53:76:79:b9:89:32:5d:
                    57:ab:1a:9e:cc:7f:78:0e:92:e8:dc:ac:b8:6d:2a:
                    2f:a8:8e:86:f5:2c:82:91:7a:79:9b:13:7f:8f:10:
                    97:0c:05:1d:8b:4d:3e:8b:c4:f9:7e:5b:e0:f6:42:
                    63:b0:09:4d:48:d1:c9:66:ed:a8:ca:71:1a:5d:56:
                    c8:53:c1:06:c9:6f:7f:79:d0:5e:33:29:77:76:d1:
                    8a:76:c7:f9:4a:80:6a:f6:62:c7:fa:d1:9c:9e:74:
                    5e:92:ef:57:ee:86:7b:44:97:17:b6:96:07:43:00:
                    d5:0d:29:be:47:44:47:2f:df:42:1c:47:f0:7b:54:
                    3a:f8:ab:cf:e7:14:ac:c4:57:69:b4:c4:71:6c:11:
                    15:56:0d:59:f7:59:09:14:29:cb:70:7a:43:79:65:
                    4a:ad:2b:87:5a:2d:96:9e:48:99:7d:f3:3c:32:1e:
                    52:59:f4:39:b2:e0:9f:09:8b:8f:fd:4b:77:2e:27:
                    09:1f:38:10:d4:43:0e:08:db:c7:a9:8a:17:e4:6e:
                    64:86:04:5e:92:81:3e:cd:56:22:da:4e:05:56:af:
                    37:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:CF:94:E6:23:5E:79:2F:EA:A0:D9:7E:FE:57:33:62:CE:7E:59:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/32ab3bc6-1d39-30e4-b41c-322544b0befd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.59.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:82:77:41:fc:5e:b6:b8:d3:56:08:90:f5:77:04:30:e7:34:
         29:fd:b2:03:99:c5:64:3a:c0:ff:d9:13:25:ee:25:cc:f2:93:
         ad:bb:72:a0:0b:db:26:de:33:64:33:50:a8:10:87:dc:32:bb:
         b4:0c:5c:0f:a3:d9:70:75:a6:12:83:8c:2d:06:c7:87:a6:44:
         a8:7a:7b:78:67:95:cd:7f:80:32:18:df:be:17:44:1a:66:53:
         1a:04:d8:19:89:32:0b:42:72:12:46:b8:92:05:89:46:94:e0:
         4f:55:d4:15:dc:cf:1f:31:49:3f:4d:41:7e:a5:ab:97:17:77:
         0f:6e:eb:7f:4c:dd:e7:e7:1f:b1:2e:14:a7:be:53:6b:60:e3:
         01:87:07:c6:41:9b:6d:d3:65:eb:0d:48:3b:8b:53:a8:eb:38:
         fc:9c:bb:ce:3b:e3:f9:e8:06:1d:2e:bc:26:9d:22:e3:1e:08:
         91:24:a5:a6:39:81:fd:76:1f:83:84:33:1c:eb:8d:70:6d:fa:
         2e:19:70:b3:a0:11:1f:db:e4:47:c5:4e:05:ce:bc:a0:f3:3c:
         a9:64:1b:8a:33:11:5a:bd:98:f7:cd:a2:8f:7f:9e:a7:e0:9f:
         3b:d2:b0:14:e8:e7:a8:7a:e1:a3:d9:a0:3f:45:d8:e1:4e:e3:
         2b:af:18:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:27:27 2025 by rpki-client