Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0b60a007-9fb6-4096-9503-20f30414834b/4b94ea7a-fd8a-3c04-bf1f-7ffd9557f75b.roa
File:                     4b94ea7a-fd8a-3c04-bf1f-7ffd9557f75b.roa (raw, json)
Hash identifier:          Nxr9/zBk3moMVQdH3YLIVRDn7C1P2G0J0aBkzJq3W1s=
Subject key identifier:   FA:B8:54:B5:49:89:CA:10:7D:6D:89:33:21:5B:2D:7D:C5:A3:FC:D6
Certificate issuer:       /CN=0b60a007-9fb6-4096-9503-20f30414834b
Certificate serial:       010D0C9F4328584913AC2BA7BD56B1B4078A40A0
Authority key identifier: 9F:37:ED:89:6C:B5:EB:1F:A8:8B:B6:C5:90:AE:F9:15:1C:9D:07:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0b60a007-9fb6-4096-9503-20f30414834b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0b60a007-9fb6-4096-9503-20f30414834b/4b94ea7a-fd8a-3c04-bf1f-7ffd9557f75b.roa
Signing time:             Tue 04 Mar 2025 14:00:52 +0000
ROA not before:           Tue 04 Mar 2025 14:00:52 +0000
ROA not after:            Mon 02 Jun 2025 13:00:52 +0000
asID:                     395800
IP address blocks:        66.133.58.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0b60a007-9fb6-4096-9503-20f30414834b/0b60a007-9fb6-4096-9503-20f30414834b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0b60a007-9fb6-4096-9503-20f30414834b/0b60a007-9fb6-4096-9503-20f30414834b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0b60a007-9fb6-4096-9503-20f30414834b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:13:ac:2b:a7:bd:56:b1:b4:07:8a:40:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b60a007-9fb6-4096-9503-20f30414834b
        Validity
            Not Before: Mar  4 14:00:52 2025 GMT
            Not After : Jun  2 13:00:52 2025 GMT
        Subject: CN=e7ec5e70-a955-4c8e-b915-61ab326e8f03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:7b:91:57:44:14:cf:db:8c:43:dd:e3:84:2f:
                    e6:60:55:4a:b5:55:25:e4:81:a7:21:5d:a0:ab:58:
                    41:58:83:78:7e:2c:95:62:4b:ba:eb:22:eb:5c:65:
                    4c:63:6b:e5:34:c2:e4:f3:bc:d1:c0:ba:59:e2:e7:
                    93:e7:2e:38:30:35:88:5c:c0:67:1e:5b:c5:63:54:
                    48:89:94:db:50:48:00:13:1d:0b:26:df:89:72:65:
                    39:e8:08:f7:63:0b:77:7b:08:d9:37:83:cb:29:f2:
                    8f:cd:f1:18:28:ae:d7:93:f1:76:15:24:99:db:81:
                    e0:6c:cf:22:4d:f2:3c:be:d3:a4:a1:df:f0:a9:db:
                    4d:ef:8c:1c:24:5e:5a:ea:ca:2d:78:a9:1b:7e:eb:
                    8e:98:41:25:a8:ea:6a:ed:5c:65:e3:08:b7:24:a8:
                    e3:bc:05:c5:4b:09:94:6f:2d:dd:30:5b:16:8e:64:
                    b2:3a:77:21:f4:7c:a8:56:d1:5c:27:7c:69:13:cc:
                    c2:22:c6:2e:95:9a:35:15:50:be:c1:59:7d:04:96:
                    6a:39:79:b2:f6:71:a2:9d:63:49:26:8b:5b:a1:66:
                    e5:88:ff:e1:ef:56:78:3b:d2:c3:5f:2d:e9:08:99:
                    0c:91:e3:30:8b:79:60:2e:f3:54:83:ec:93:dc:04:
                    f8:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:B8:54:B5:49:89:CA:10:7D:6D:89:33:21:5B:2D:7D:C5:A3:FC:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0b60a007-9fb6-4096-9503-20f30414834b/4b94ea7a-fd8a-3c04-bf1f-7ffd9557f75b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0b60a007-9fb6-4096-9503-20f30414834b/0b60a007-9fb6-4096-9503-20f30414834b.crl

            X509v3 Authority Key Identifier:
                keyid:9F:37:ED:89:6C:B5:EB:1F:A8:8B:B6:C5:90:AE:F9:15:1C:9D:07:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0b60a007-9fb6-4096-9503-20f30414834b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.133.58.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:92:f4:d9:24:ec:d4:49:21:be:aa:d2:d7:7b:b0:a7:e6:70:
         cb:ac:22:ea:7d:4e:ad:0e:9d:66:14:25:e8:2f:62:30:71:db:
         fe:f5:7b:7d:b4:0b:3b:c3:1e:aa:2a:cd:09:8a:af:57:c9:e9:
         f7:c9:7c:33:d7:45:34:89:8d:4e:3b:fd:5e:5b:86:51:eb:fa:
         21:24:4a:d4:4a:a2:69:2f:38:9f:ec:60:8a:b8:dd:16:70:9d:
         55:27:0c:54:ac:05:03:9e:2a:88:8b:6d:20:45:d1:18:33:0d:
         aa:b7:8f:79:01:57:b3:01:48:da:27:d8:94:bc:96:c9:93:00:
         26:37:e3:1f:63:87:ea:03:3f:b4:65:66:ae:26:d5:e1:e2:b8:
         c6:71:65:e4:9c:bc:00:02:cc:51:2c:30:e9:ef:76:4b:e3:24:
         47:7a:62:6c:b8:21:0d:98:eb:7f:5c:67:31:08:2c:a6:16:4e:
         33:f4:28:2b:0f:4a:80:97:0a:30:58:f2:3d:1c:29:82:4d:b0:
         f8:41:67:79:51:65:1b:d7:f6:78:25:0d:5b:b9:59:10:54:94:
         7a:52:67:c1:59:b8:df:42:f8:bf:7e:c2:28:c3:2a:69:be:0b:
         ad:92:df:cc:01:2a:90:25:99:f9:9f:b2:76:b2:0d:4e:b1:10:
         03:bd:b3:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:11:06 2025 by rpki-client