Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/c534c6ce-25a2-3890-9411-9deda0cc8b45.roa
File:                     c534c6ce-25a2-3890-9411-9deda0cc8b45.roa (raw, json)
Hash identifier:          fYOe8G/xdDI+jpewbtLL0cEHf1rLohx7b5A7N0O8IAk=
Subject key identifier:   C9:6E:72:33:83:71:16:1C:C9:CC:64:8D:39:09:B7:85:A7:5B:71:7E
Certificate issuer:       /CN=58d2b29f-1da9-4b65-a82f-389822bed566
Certificate serial:       010D0C9F43285849E91FA304DD7CAAE071ECA080
Authority key identifier: 3F:C5:A3:7A:1A:1F:74:88:44:CA:33:CB:C7:AD:B9:B5:60:EA:10:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/c534c6ce-25a2-3890-9411-9deda0cc8b45.roa
Signing time:             Tue 20 May 2025 01:00:49 +0000
ROA not before:           Tue 20 May 2025 01:00:49 +0000
ROA not after:            Mon 18 Aug 2025 01:00:49 +0000
asID:                     40627
IP address blocks:        66.81.241.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/58d2b29f-1da9-4b65-a82f-389822bed566.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/58d2b29f-1da9-4b65-a82f-389822bed566.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e9:1f:a3:04:dd:7c:aa:e0:71:ec:a0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58d2b29f-1da9-4b65-a82f-389822bed566
        Validity
            Not Before: May 20 01:00:49 2025 GMT
            Not After : Aug 18 01:00:49 2025 GMT
        Subject: CN=26b767eb-3aff-427f-bf3b-8395c3eaab42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:0b:b8:c7:63:d0:f2:ca:ba:f8:47:fa:b1:d1:
                    85:89:9b:bc:2e:fd:4c:f4:5c:69:72:8c:9f:81:ec:
                    26:4d:d1:1c:28:b1:81:72:80:2e:9a:02:5a:e0:d7:
                    db:fb:33:ac:fa:bb:b3:23:9f:83:19:c4:ca:a0:b7:
                    61:1d:5e:f9:e4:1a:94:5e:d8:a5:1b:d3:81:b0:91:
                    8a:14:4e:0b:ed:31:ed:e2:96:fc:3d:ab:bd:36:46:
                    04:27:d2:e9:c0:90:42:49:4e:75:da:b4:22:14:01:
                    87:2c:d6:bc:eb:aa:00:85:21:bc:1f:48:86:b5:72:
                    01:37:9d:28:a4:61:74:c3:c1:04:af:82:07:59:f1:
                    dd:44:1f:97:90:ca:5f:de:d9:cf:15:d2:64:b1:bb:
                    90:64:57:65:0d:32:3d:be:7b:3d:19:6a:31:68:c7:
                    cc:fb:90:60:b2:dd:38:36:f8:fa:36:ff:1f:25:6d:
                    f5:88:32:a2:fd:e5:f0:5f:1f:18:e3:74:d1:9a:9c:
                    05:e6:0d:b9:a3:d8:a2:10:14:6d:de:15:e2:4f:e8:
                    2d:5b:8e:be:09:75:13:89:02:7b:f4:cc:69:06:f9:
                    91:af:c4:a1:7a:da:8e:dc:fb:71:07:45:f1:d0:95:
                    2a:ef:63:de:4b:56:98:bc:04:bd:9b:19:7c:00:4a:
                    47:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:6E:72:33:83:71:16:1C:C9:CC:64:8D:39:09:B7:85:A7:5B:71:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/c534c6ce-25a2-3890-9411-9deda0cc8b45.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/58d2b29f-1da9-4b65-a82f-389822bed566.crl

            X509v3 Authority Key Identifier:
                keyid:3F:C5:A3:7A:1A:1F:74:88:44:CA:33:CB:C7:AD:B9:B5:60:EA:10:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.81.241.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b5:fc:16:be:3c:71:74:dd:ff:0c:61:78:69:f4:95:da:06:8e:
         24:99:b4:76:61:c4:5e:81:e3:02:52:9b:13:25:06:e4:34:06:
         a0:dc:fb:d7:2f:b7:aa:01:ab:ae:c4:d9:03:7f:28:58:b0:47:
         55:bf:5b:a7:ae:82:d1:75:e9:e4:6b:51:47:48:c1:43:2e:33:
         db:81:d0:e3:61:69:c7:63:d6:ee:f1:5c:e6:23:81:4f:e4:2f:
         0b:d2:0a:91:7f:3d:2e:67:f7:cb:64:02:41:5f:31:b4:cd:67:
         28:5a:66:e1:69:34:5a:1a:7e:19:3f:e5:61:13:a6:50:fd:1e:
         ae:39:81:de:72:09:4d:4e:ce:e7:33:42:81:20:4a:14:09:db:
         f6:a0:b9:c2:5d:65:37:4a:79:b1:50:d9:95:42:7b:e4:a5:82:
         cb:81:98:86:c8:57:6c:d8:b7:f8:1e:bd:83:b2:b0:a3:2e:7f:
         bb:f4:0b:35:fb:83:bd:18:2c:6c:4d:48:49:80:b5:51:02:73:
         cc:d1:8b:ed:f2:9d:40:e9:8a:8f:10:8d:3f:06:02:6a:c8:7b:
         b1:4b:41:bd:25:af:ea:5b:42:71:a5:e6:8e:b3:2b:6c:dc:69:
         c9:5b:97:62:fa:e2:f3:de:5f:0d:c7:4c:37:d2:4d:24:93:3d:
         71:78:a7:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:53:22 2025 by rpki-client