Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/283c33f6-719a-4205-86d9-7cf90d013622/2c2861f6-166b-3fa7-a8a2-2e2eecf7c88d.roa
File:                     2c2861f6-166b-3fa7-a8a2-2e2eecf7c88d.roa (raw, json)
Hash identifier:          N9w0/Uut8hVggFV9zuszb52PabTiUaMjo5Yq7RydkwE=
Subject key identifier:   F9:91:9A:54:5C:7E:21:DD:C8:FB:9E:EF:A0:69:3B:7C:F6:90:72:7E
Certificate issuer:       /CN=283c33f6-719a-4205-86d9-7cf90d013622
Certificate serial:       010D0C9F4328584988CF1BBF50466260B10AFAC8
Authority key identifier: 43:22:70:6A:EE:04:F8:BD:8C:71:3C:F5:43:3D:D6:70:54:A9:D1:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/283c33f6-719a-4205-86d9-7cf90d013622.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/283c33f6-719a-4205-86d9-7cf90d013622/2c2861f6-166b-3fa7-a8a2-2e2eecf7c88d.roa
Signing time:             Tue 15 Apr 2025 13:00:59 +0000
ROA not before:           Tue 15 Apr 2025 13:00:59 +0000
ROA not after:            Mon 14 Jul 2025 13:00:59 +0000
asID:                     399992
IP address blocks:        66.118.58.0/24 maxlen: 24
                          2620:9b:e000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/283c33f6-719a-4205-86d9-7cf90d013622/283c33f6-719a-4205-86d9-7cf90d013622.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/283c33f6-719a-4205-86d9-7cf90d013622/283c33f6-719a-4205-86d9-7cf90d013622.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/283c33f6-719a-4205-86d9-7cf90d013622.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 20 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:88:cf:1b:bf:50:46:62:60:b1:0a:fa:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=283c33f6-719a-4205-86d9-7cf90d013622
        Validity
            Not Before: Apr 15 13:00:59 2025 GMT
            Not After : Jul 14 13:00:59 2025 GMT
        Subject: CN=cda91c49-2ff3-4605-9df6-e8b4333bfca5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:e9:c9:f3:43:3a:16:f6:9a:99:c9:5a:ec:3c:
                    dc:c6:3d:95:04:10:e4:ad:af:cf:ae:1f:9a:33:b6:
                    a4:01:65:52:7b:1c:60:14:ed:99:b2:55:56:25:89:
                    c0:d8:46:cb:d0:cd:6e:8e:23:cd:c6:67:5b:5d:71:
                    1b:d7:42:5f:77:43:b1:e3:52:91:d9:7f:eb:c1:1a:
                    8c:a0:c5:e5:b3:38:5b:d3:20:54:9c:77:fd:e7:0f:
                    7d:80:c7:09:ef:27:31:ed:05:32:0d:46:5c:a4:ae:
                    19:e1:72:ad:0a:a0:b6:cb:2d:94:d8:6d:3e:95:59:
                    ec:e4:47:8e:7c:4b:e8:d5:d2:95:b8:cc:bf:bd:ff:
                    36:74:bd:10:5d:26:94:be:64:76:d3:9e:ac:8d:ae:
                    95:d0:c5:8c:d5:49:c7:4d:04:35:ba:ba:84:4d:c1:
                    be:99:2b:99:c5:74:c9:00:68:de:12:d2:cb:8c:bd:
                    d7:24:c3:34:50:b4:b9:6d:5b:21:97:33:25:b4:e3:
                    1b:23:14:a8:34:5a:a3:9c:95:b1:94:b4:47:db:79:
                    1a:91:c2:47:92:1b:d6:b3:40:7b:2b:62:5e:b2:49:
                    55:e7:a5:35:5a:82:3b:9a:67:4b:66:7c:25:93:49:
                    10:19:6b:1c:0b:3b:21:63:14:3a:4d:62:e5:0f:c4:
                    b1:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:91:9A:54:5C:7E:21:DD:C8:FB:9E:EF:A0:69:3B:7C:F6:90:72:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/283c33f6-719a-4205-86d9-7cf90d013622/2c2861f6-166b-3fa7-a8a2-2e2eecf7c88d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/283c33f6-719a-4205-86d9-7cf90d013622/283c33f6-719a-4205-86d9-7cf90d013622.crl

            X509v3 Authority Key Identifier:
                keyid:43:22:70:6A:EE:04:F8:BD:8C:71:3C:F5:43:3D:D6:70:54:A9:D1:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/283c33f6-719a-4205-86d9-7cf90d013622.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.118.58.0/24
                IPv6:
                  2620:9b:e000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:70:61:42:a7:64:ae:f2:b0:2d:f2:22:b7:5b:c6:18:c2:3b:
         2c:ca:14:43:d6:be:5e:3c:87:f4:b5:d0:96:fa:3e:ee:2a:8b:
         2a:12:54:3c:e0:2f:6d:0c:bf:52:db:b7:27:00:86:18:60:f5:
         67:68:de:de:9d:3d:95:a4:a5:b8:27:69:6d:e1:10:cb:f2:2d:
         1b:02:25:97:f4:5b:1c:78:21:19:dd:e3:39:b3:ca:50:d2:23:
         79:bd:4b:55:52:1a:17:7d:1b:fd:3d:78:f9:a6:4f:a5:60:43:
         9d:27:8d:e6:29:e7:cd:60:5a:8b:6f:a4:1f:87:89:e6:01:f9:
         58:c4:13:1e:b8:1f:24:58:52:f5:b5:b7:7d:71:bb:c0:fe:8a:
         05:2f:a3:a1:ea:cb:63:a6:27:ac:b8:47:ac:74:cf:e4:f3:4e:
         40:05:05:7a:76:1e:7b:38:b0:51:ff:6b:f2:e1:13:4f:b3:d1:
         00:3c:d2:29:3d:94:83:76:07:f2:46:a3:86:bc:02:72:46:6b:
         16:39:b6:93:df:a9:41:bf:69:26:72:0a:a8:fd:ac:80:19:6e:
         e3:da:12:40:66:66:63:34:92:50:a0:74:22:c2:68:3e:14:f5:
         c8:7d:be:0d:57:7c:c5:d0:34:bd:94:d9:30:ff:2d:a9:f9:05:
         1f:ae:15:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 14:38:54 2025 by rpki-client