Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/c1ec8d09-5670-3d88-8368-60f557c12759.roa
File:                     c1ec8d09-5670-3d88-8368-60f557c12759.roa (raw, json)
Hash identifier:          NUeohqDuDApE7vol3y+3BbL9hSXG1/kcuSg2lACIwYk=
Subject key identifier:   F6:4B:6D:1A:4F:2C:72:73:73:FA:D4:17:52:4B:03:25:4E:30:5B:05
Certificate issuer:       /CN=58d2b29f-1da9-4b65-a82f-389822bed566
Certificate serial:       010D0C9F4328584B0A1160564344D46BC9E62A80
Authority key identifier: 3F:C5:A3:7A:1A:1F:74:88:44:CA:33:CB:C7:AD:B9:B5:60:EA:10:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/c1ec8d09-5670-3d88-8368-60f557c12759.roa
Signing time:             Sun 31 Aug 2025 13:00:42 +0000
ROA not before:           Sun 31 Aug 2025 13:00:42 +0000
ROA not after:            Sat 29 Nov 2025 14:00:42 +0000
asID:                     13335
IP address blocks:        66.81.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/58d2b29f-1da9-4b65-a82f-389822bed566.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/58d2b29f-1da9-4b65-a82f-389822bed566.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 17 Sep 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0a:11:60:56:43:44:d4:6b:c9:e6:2a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58d2b29f-1da9-4b65-a82f-389822bed566
        Validity
            Not Before: Aug 31 13:00:42 2025 GMT
            Not After : Nov 29 14:00:42 2025 GMT
        Subject: CN=8e33bd16-2c5d-4b5c-b3ee-69751f6bcc78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:9e:20:06:ab:2b:eb:88:67:58:af:1a:bf:b5:
                    af:f4:52:54:5a:bd:18:84:8b:ea:fb:96:71:e1:ba:
                    f7:41:71:14:a1:dc:49:20:d3:2c:36:d0:d6:b3:fc:
                    78:94:1b:c9:84:cc:d9:b5:0a:d6:2a:77:ee:c3:59:
                    bf:24:c8:d6:7c:28:58:f3:9d:9f:aa:51:e9:bd:77:
                    9e:d8:46:90:60:5b:d3:62:b1:55:2c:f9:09:9a:e4:
                    0d:5f:14:10:f3:1f:cc:d9:6f:0d:6f:0b:f9:0c:5f:
                    33:40:14:ba:b2:85:a5:6c:9d:d7:5e:b5:21:5c:ca:
                    40:f5:67:69:93:59:d4:d5:83:2e:f8:02:51:f6:c4:
                    2b:4d:c7:03:fb:9c:84:de:0c:c2:f0:22:f7:7e:cf:
                    c7:eb:26:b5:ac:7e:99:c6:64:61:f2:f2:ef:2b:7e:
                    54:6e:ce:eb:29:76:76:93:07:71:30:b5:db:45:39:
                    cb:d7:04:1c:97:be:33:fc:0e:9c:a0:49:cc:45:24:
                    59:60:b7:b4:85:78:be:6e:51:a7:15:d4:d1:4a:32:
                    01:1f:bc:9b:1c:a3:5b:ab:c7:f9:df:e4:d9:59:06:
                    fb:8d:d7:fc:fd:c7:26:25:c5:8c:2c:06:e9:6a:d8:
                    e8:95:d6:7e:f6:d9:ea:d7:8a:0a:ae:5a:35:86:7d:
                    a0:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:4B:6D:1A:4F:2C:72:73:73:FA:D4:17:52:4B:03:25:4E:30:5B:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/c1ec8d09-5670-3d88-8368-60f557c12759.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/58d2b29f-1da9-4b65-a82f-389822bed566.crl

            X509v3 Authority Key Identifier:
                keyid:3F:C5:A3:7A:1A:1F:74:88:44:CA:33:CB:C7:AD:B9:B5:60:EA:10:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.81.255.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:27:e9:80:6b:d0:f7:16:74:ca:6d:66:f6:ff:60:77:7f:c1:
         ee:48:0f:36:b0:ed:14:94:2f:bf:af:0b:05:f4:2c:d4:aa:80:
         f5:62:14:1b:1a:0d:1f:fb:80:b7:79:d7:d9:29:bc:ae:95:48:
         46:b9:f8:3f:4f:ee:5c:e1:55:05:cc:43:92:9d:1a:d9:16:61:
         16:a4:d6:f6:82:c8:7e:5a:c1:1f:98:7c:94:cf:b8:91:2c:68:
         73:e8:02:c1:e8:70:8d:02:ff:6d:ad:bc:23:71:53:ac:a2:50:
         0e:2d:71:ee:9b:08:bb:b9:6b:e0:b7:f6:2f:a7:0e:f7:e5:11:
         d6:d0:7b:16:61:21:cb:4d:0e:47:ef:f8:f9:85:1c:3b:22:de:
         48:93:56:70:86:44:7a:db:4a:27:89:68:d9:53:4e:84:9e:55:
         0f:89:d7:08:e0:f4:7c:fe:88:ad:2a:09:26:bc:32:05:23:3b:
         a5:18:49:31:06:77:fa:51:d8:19:93:f8:8c:22:64:b3:d7:11:
         ce:19:65:4d:42:d0:09:c4:1c:8d:a7:80:cf:87:7d:17:88:44:
         d4:92:a6:ad:af:5c:9f:6b:34:cb:9c:80:5d:ea:fc:36:6e:ac:
         1f:22:05:61:bf:0f:d8:79:78:b0:d4:2e:65:3f:c1:0f:8f:73:
         8c:06:55:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 16 03:23:36 2025 by rpki-client