Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/561321f5-144e-3b4d-b1f8-27b1230853fd.roa
File:                     561321f5-144e-3b4d-b1f8-27b1230853fd.roa (raw, json)
Hash identifier:          8j+wc07uxhlyvZJpalXI2YslXD60GMk2SzpVArcKQBM=
Subject key identifier:   78:62:74:3C:9E:06:05:30:93:99:E9:9A:2B:4D:DC:96:B2:CC:5E:64
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285849D1654DE108D3AF94B7278240
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/561321f5-144e-3b4d-b1f8-27b1230853fd.roa
Signing time:             Sun 11 May 2025 13:01:01 +0000
ROA not before:           Sun 11 May 2025 13:01:01 +0000
ROA not after:            Sat 09 Aug 2025 13:01:01 +0000
asID:                     58061
IP address blocks:        166.1.58.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d1:65:4d:e1:08:d3:af:94:b7:27:82:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May 11 13:01:01 2025 GMT
            Not After : Aug  9 13:01:01 2025 GMT
        Subject: CN=62cb7bba-40f6-4e1b-af4c-8fc17452989e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:e0:53:50:63:a5:01:ac:92:09:cc:64:c5:3c:
                    9e:71:3a:7b:1f:9c:07:b9:cc:34:15:7b:4e:05:bb:
                    f6:2b:11:d0:4f:23:7d:2f:5e:f6:ee:de:0c:15:e1:
                    59:04:33:13:d1:6d:bd:8d:ca:6e:f8:74:8a:5c:54:
                    65:88:83:87:a3:19:4f:2b:4d:84:22:fa:db:c8:bf:
                    21:f5:19:ac:ef:9f:86:32:cf:30:d4:8b:c6:91:3d:
                    c7:39:85:ed:9c:4d:a0:b3:e8:14:3f:6e:3e:42:d0:
                    c9:3b:b2:c8:81:d7:af:2e:d0:50:8b:b7:c1:4c:85:
                    b0:d6:fc:d2:f3:cc:c2:74:cd:e7:b4:3a:7a:59:ab:
                    64:24:bb:dc:44:67:fa:9e:ad:e5:d6:d8:56:7d:6c:
                    ae:ae:73:a1:15:2f:87:f8:0f:41:d5:54:3f:49:da:
                    0a:89:12:aa:ae:d0:e7:b8:c8:88:62:48:f7:db:8f:
                    e5:00:9e:e8:0f:40:50:98:48:73:64:f2:81:a0:17:
                    d7:e7:6c:d4:0c:16:89:70:be:9f:75:1f:c7:20:91:
                    b0:02:d8:7a:ec:31:2b:5a:ec:32:b6:c9:cb:a7:87:
                    a9:b4:fd:98:70:86:b2:4e:22:e3:57:a3:1a:51:90:
                    14:ba:6e:f6:e2:22:a4:33:fe:02:d8:07:22:48:7b:
                    bf:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:62:74:3C:9E:06:05:30:93:99:E9:9A:2B:4D:DC:96:B2:CC:5E:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/561321f5-144e-3b4d-b1f8-27b1230853fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.58.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:ca:26:11:1a:33:e8:8d:3b:95:cb:2c:e6:d4:83:95:6b:d2:
         5d:4b:fb:94:b6:17:6f:13:2e:3b:df:eb:05:57:2e:8d:06:7e:
         eb:5f:59:26:29:21:17:3d:3d:93:6e:ca:55:db:55:cf:5b:47:
         d1:e2:29:9d:59:9d:38:d0:9b:bd:8f:29:4e:1a:0e:f8:b0:0e:
         de:39:8a:cb:53:e9:47:cb:b2:0e:01:a3:c8:88:b9:1c:11:c7:
         52:f2:7d:a5:29:79:bd:5b:da:db:98:55:26:9d:00:71:f4:eb:
         64:b6:a3:c7:64:4b:42:ea:5d:47:fa:30:55:3a:4a:0e:f4:f5:
         8d:9c:66:8b:38:b9:64:ed:b5:59:c8:c6:b3:ff:d3:14:6d:7c:
         b9:da:f3:6f:f8:07:88:4a:16:0c:4a:09:40:f5:a0:2f:92:2f:
         0b:43:a3:df:45:d6:a1:e0:b7:7e:07:55:16:6c:7f:20:03:c1:
         fa:c9:d7:49:f3:9d:d9:7b:d4:21:a4:a6:4d:60:3c:d8:86:b0:
         44:29:bb:fd:05:be:99:7a:a0:2f:19:a7:ea:97:12:20:ac:e6:
         4d:8c:80:66:08:9e:1a:d1:30:48:3a:d0:b3:74:ef:e9:42:8c:
         55:89:54:9d:c2:72:d8:41:e7:10:c5:cc:3a:03:e0:9a:27:47:
         03:de:22:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 08:21:14 2025 by rpki-client