Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/aa4544c7-0c2f-3685-8adb-f5bcb3db62e0.roa
File:                     aa4544c7-0c2f-3685-8adb-f5bcb3db62e0.roa (raw, json)
Hash identifier:          8eJRMlZT11d7KV/F/oV4C8uQ627xfALAwyF85P+Anlk=
Subject key identifier:   BF:63:72:07:C5:BF:5E:B2:4E:BC:95:AF:C7:DC:E5:AB:D9:FB:FA:3A
Certificate issuer:       /CN=58d2b29f-1da9-4b65-a82f-389822bed566
Certificate serial:       010D0C9F4328584909E6A3046A9A10F9027D9700
Authority key identifier: 3F:C5:A3:7A:1A:1F:74:88:44:CA:33:CB:C7:AD:B9:B5:60:EA:10:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/aa4544c7-0c2f-3685-8adb-f5bcb3db62e0.roa
Signing time:             Sat 01 Mar 2025 02:00:39 +0000
ROA not before:           Sat 01 Mar 2025 02:00:39 +0000
ROA not after:            Fri 30 May 2025 01:00:39 +0000
asID:                     14618
IP address blocks:        66.81.241.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/58d2b29f-1da9-4b65-a82f-389822bed566.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/58d2b29f-1da9-4b65-a82f-389822bed566.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:09:e6:a3:04:6a:9a:10:f9:02:7d:97:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58d2b29f-1da9-4b65-a82f-389822bed566
        Validity
            Not Before: Mar  1 02:00:39 2025 GMT
            Not After : May 30 01:00:39 2025 GMT
        Subject: CN=3be2f428-2922-4d82-a034-3bbdede2c2cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:55:9d:83:c8:01:e2:9b:a2:f8:af:d8:59:13:
                    33:29:a6:37:54:d6:91:04:18:5d:91:08:b2:f7:d7:
                    a7:6b:59:86:00:89:81:5f:7d:4f:46:42:0b:00:1a:
                    9b:c4:29:27:85:45:7c:96:04:48:08:9c:b9:09:83:
                    bf:91:16:e6:2a:06:d5:fa:ff:8e:1e:73:db:73:b5:
                    42:85:d8:03:d4:7e:ee:d3:f6:7b:db:f4:f4:68:aa:
                    1c:07:34:3a:56:14:22:57:c0:d7:03:e3:3f:18:f7:
                    56:d3:81:bd:8b:86:b4:c0:cd:97:7b:db:59:d3:90:
                    f4:05:38:cb:7b:48:9f:93:45:e7:67:02:75:b9:83:
                    af:0c:71:a9:f0:05:5f:ed:87:0b:f5:9b:ce:58:10:
                    86:a7:8d:26:4d:4f:21:0b:95:4d:ab:e2:3a:25:64:
                    81:67:83:8f:c9:cc:05:23:6c:d1:f2:8c:d6:4a:7b:
                    87:c0:3d:96:be:d0:0b:4c:49:97:73:d1:9a:b6:47:
                    6c:2f:97:0c:49:b7:bd:98:41:12:ae:a2:63:4d:ed:
                    25:e5:6e:b4:bb:81:c4:9c:80:11:dc:56:ec:d8:96:
                    10:8a:e0:77:41:dc:80:cf:13:fb:27:15:6e:8c:9a:
                    94:63:35:33:99:ce:80:fa:48:19:6f:89:ad:68:95:
                    43:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:63:72:07:C5:BF:5E:B2:4E:BC:95:AF:C7:DC:E5:AB:D9:FB:FA:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/aa4544c7-0c2f-3685-8adb-f5bcb3db62e0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/58d2b29f-1da9-4b65-a82f-389822bed566.crl

            X509v3 Authority Key Identifier:
                keyid:3F:C5:A3:7A:1A:1F:74:88:44:CA:33:CB:C7:AD:B9:B5:60:EA:10:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.81.241.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b6:d4:d6:ad:e2:2a:f0:68:df:e3:0e:dd:ba:4c:99:e0:35:44:
         57:2e:62:43:d4:7d:b5:4f:a4:50:7d:f3:93:f2:8f:d9:b8:a6:
         4e:35:69:04:a4:4c:dc:1f:4e:48:5e:3d:11:1a:61:c8:b2:ab:
         51:73:14:b9:f5:bb:70:33:57:41:d1:23:45:fc:31:cb:93:87:
         fd:bb:ea:d1:4f:df:be:f6:ff:af:41:cf:50:fa:5c:e9:72:bd:
         5d:59:ee:c6:db:3a:c3:7a:d9:19:65:7e:56:a9:af:d3:2b:19:
         e9:b1:73:82:c1:c7:17:e2:4b:7e:54:08:1b:f7:d7:dc:91:c6:
         6a:ba:ad:15:ce:6a:cf:f1:63:b5:4d:9e:b1:4d:af:ca:8c:1b:
         f1:24:d0:35:f2:7c:9c:3d:f5:2d:64:99:0f:73:78:c3:07:52:
         e2:14:41:32:94:76:0d:a8:2a:6d:d6:e8:a5:e7:fc:6b:8a:e0:
         88:fe:62:cd:0a:5c:73:bd:be:c9:34:07:ea:73:d7:30:a8:df:
         10:81:37:78:8b:2b:65:53:a4:ad:dd:27:7b:7e:bc:fd:7a:40:
         ee:05:98:55:75:20:8a:55:e4:6e:d1:9b:73:9d:f7:0c:ca:2f:
         4c:46:f8:6d:af:63:83:6e:6f:a1:2e:f9:5b:3d:44:74:fe:fc:
         ac:c6:d3:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 10:25:05 2025 by rpki-client