Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/a0f53c24-196c-3044-ab68-255cff40ec0c.roa
File:                     a0f53c24-196c-3044-ab68-255cff40ec0c.roa (raw, json)
Hash identifier:          wUrcDG/bv78o3LoAQzuDhNRV/Lk7ou6dSmroA86UGC4=
Subject key identifier:   AE:4A:A3:F2:27:B1:92:87:A8:75:64:56:25:A4:DD:CD:80:7B:1C:8D
Certificate issuer:       /CN=58d2b29f-1da9-4b65-a82f-389822bed566
Certificate serial:       010D0C9F43285845CB3E5315B083C468118B4F00
Authority key identifier: 3F:C5:A3:7A:1A:1F:74:88:44:CA:33:CB:C7:AD:B9:B5:60:EA:10:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/a0f53c24-196c-3044-ab68-255cff40ec0c.roa
Signing time:             Tue 07 May 2024 13:00:35 +0000
ROA not before:           Tue 07 May 2024 13:00:35 +0000
ROA not after:            Mon 05 Aug 2024 13:00:35 +0000
asID:                     40627
IP address blocks:        66.81.255.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/58d2b29f-1da9-4b65-a82f-389822bed566.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/58d2b29f-1da9-4b65-a82f-389822bed566.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:cb:3e:53:15:b0:83:c4:68:11:8b:4f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58d2b29f-1da9-4b65-a82f-389822bed566
        Validity
            Not Before: May  7 13:00:35 2024 GMT
            Not After : Aug  5 13:00:35 2024 GMT
        Subject: CN=fc59c674-38a6-408c-8def-51ece1ca052b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:cd:b6:af:6c:61:4c:ed:c8:a5:b1:a8:ad:3c:
                    3e:46:38:97:b1:4d:60:02:3d:66:41:ac:39:58:9c:
                    5d:45:51:a0:03:8a:3d:41:e9:77:d0:c5:cf:13:6a:
                    e8:27:65:95:7b:23:33:b4:f4:27:c4:7d:8e:13:33:
                    bf:c9:9e:e9:2b:9f:e8:78:7d:36:1b:75:a6:4c:7c:
                    02:d0:4a:0b:b1:8f:df:b3:52:16:08:56:a5:e4:6c:
                    42:66:31:91:2e:51:f2:a0:ca:4b:f0:24:a6:66:55:
                    fd:46:57:32:22:75:33:34:e1:1f:08:ce:fd:b1:ca:
                    1f:99:30:80:a8:2f:0b:b1:24:c0:be:77:07:4c:bd:
                    34:d0:4d:20:3f:b4:fe:00:67:54:03:c3:3d:6a:a7:
                    6b:de:f4:3a:d9:62:d1:04:47:b3:e2:87:2b:14:8d:
                    95:0a:05:ae:94:e6:b2:c0:b7:04:a1:86:4f:6f:79:
                    80:63:f3:40:f6:d1:f4:a4:05:c4:e4:e2:2c:19:0f:
                    5a:3c:a2:52:2c:6f:07:cd:6c:2d:e0:9b:80:93:2e:
                    10:6b:a0:5a:43:c7:e2:05:3d:44:92:4b:f8:0a:13:
                    23:12:e8:af:78:ce:a6:35:25:36:2e:85:42:cb:24:
                    74:08:0c:85:f7:64:7a:68:17:ad:4c:6e:8b:14:54:
                    ad:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:4A:A3:F2:27:B1:92:87:A8:75:64:56:25:A4:DD:CD:80:7B:1C:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/a0f53c24-196c-3044-ab68-255cff40ec0c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/58d2b29f-1da9-4b65-a82f-389822bed566.crl

            X509v3 Authority Key Identifier:
                keyid:3F:C5:A3:7A:1A:1F:74:88:44:CA:33:CB:C7:AD:B9:B5:60:EA:10:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.81.255.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:ec:a2:e2:d6:e0:1e:2e:b3:5a:2b:b9:e8:30:35:b3:eb:d7:
         da:67:5f:96:dd:d7:43:e5:85:97:9e:5c:74:f2:05:6c:18:83:
         34:1d:23:55:cb:bf:98:fd:8a:0c:da:7f:41:30:27:f9:48:7d:
         9a:19:5b:46:0d:c4:2d:d9:6b:22:62:d2:e0:eb:55:6e:ab:27:
         c9:19:be:a3:26:96:5a:30:48:8d:ea:2a:58:93:ad:84:e1:5c:
         e1:8b:52:f3:0d:ca:1f:33:3c:0d:05:d0:21:74:af:1f:cc:31:
         99:a6:9d:dd:1f:60:02:55:46:ef:9d:71:0d:89:61:85:3a:d1:
         42:f2:92:45:bb:4e:09:0a:f6:73:03:18:d4:b2:ee:ea:9d:1d:
         5e:76:54:18:34:29:07:4d:2a:ca:85:63:a1:52:30:03:49:ef:
         d7:52:83:4d:b8:7d:25:bf:8c:2b:24:38:8f:2d:fa:04:da:ac:
         db:ae:da:71:22:2d:de:0d:70:a2:33:a9:f6:f8:3d:46:70:21:
         4f:ca:9e:bc:34:75:fd:29:45:d0:4b:5b:da:dc:db:7f:d7:98:
         b2:83:7a:6a:64:b7:c7:04:3e:ab:a4:38:4f:77:64:43:26:00:
         c6:e0:77:47:dd:97:25:19:3c:c8:26:28:0e:be:6f:1e:71:3a:
         c9:ad:e1:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 13 01:43:52 2024 by rpki-client on console-ams.rpki-client.org