Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/7f62a312-33e6-3264-a815-8df2f04489bc.roa
File:                     7f62a312-33e6-3264-a815-8df2f04489bc.roa (raw, json)
Hash identifier:          KgU74FfBgEKseq1sVJBRBDn/LGOZqwrYCMRS6khG0lU=
Subject key identifier:   28:58:43:76:B3:69:14:01:19:AE:F2:BB:5E:7E:28:57:D9:49:26:59
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285844D7151BAEF603A18904B43C00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/7f62a312-33e6-3264-a815-8df2f04489bc.roa
Signing time:             Sat 10 Feb 2024 02:00:26 +0000
ROA not before:           Sat 10 Feb 2024 02:00:26 +0000
ROA not after:            Fri 10 May 2024 01:00:26 +0000
asID:                     9009
IP address blocks:        108.165.88.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:d7:15:1b:ae:f6:03:a1:89:04:b4:3c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Feb 10 02:00:26 2024 GMT
            Not After : May 10 01:00:26 2024 GMT
        Subject: CN=245df02c-b5ed-4497-b610-b2a29d07ad64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:63:f3:40:20:9a:26:9d:de:c1:9f:b4:60:ad:
                    bf:17:2b:e8:8f:b8:22:87:03:3a:ed:11:1c:77:ca:
                    bb:de:31:08:d3:29:11:43:c2:dc:e1:55:42:b0:7c:
                    f5:5e:f1:aa:64:b4:8d:36:ce:50:de:bc:3d:bb:be:
                    29:30:11:a0:5e:41:73:1c:d8:c8:ce:f0:5c:cb:2e:
                    f6:72:32:e2:e2:58:2d:e9:db:04:4e:b4:74:91:d9:
                    4e:ca:e9:ed:e8:88:f3:3d:34:0a:29:e7:b0:8a:8e:
                    3b:be:d5:ab:c9:30:ad:01:42:0e:44:4e:ef:b2:ad:
                    02:d9:f8:87:c8:44:bf:a0:6a:de:29:2c:e2:84:e8:
                    39:27:21:e8:6f:b7:a3:5f:b1:aa:11:39:f3:f4:21:
                    57:70:94:0f:89:4b:2d:5e:db:11:64:3a:6a:44:16:
                    70:32:d3:ac:8c:1b:04:31:a7:cf:43:65:cf:e1:b8:
                    c4:b4:e9:31:5e:d8:a4:ce:7f:47:6c:76:3a:93:01:
                    0c:a3:a0:d2:a6:99:41:0c:12:a6:16:af:6f:65:88:
                    34:c3:0f:db:d4:48:ad:00:a4:f8:5d:ce:a3:64:a4:
                    d2:cc:23:67:76:a8:68:35:5c:26:4d:13:d3:97:20:
                    9d:e5:c0:88:a3:b9:d3:d8:a2:54:ab:2f:5b:57:2e:
                    5b:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:58:43:76:B3:69:14:01:19:AE:F2:BB:5E:7E:28:57:D9:49:26:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/7f62a312-33e6-3264-a815-8df2f04489bc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.88.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b0:6a:ee:82:8a:b1:18:53:f5:0a:10:cb:3a:45:d4:7e:03:e5:
         a9:e2:dd:de:6c:fa:db:49:70:62:1c:b9:30:5d:38:e5:7e:6f:
         75:3e:fd:72:0c:0d:7e:eb:47:6d:4d:00:fc:b8:63:31:c2:a1:
         69:af:e1:2d:ea:d7:90:af:5b:68:ad:86:fb:0e:32:76:7a:6f:
         69:e9:12:dd:69:a5:dd:8b:f0:c0:11:c9:6d:9c:ca:88:1e:05:
         de:d3:1f:70:e9:91:a3:69:f8:b0:1c:fc:63:79:c2:22:7f:49:
         a1:d5:20:f8:d3:2e:72:94:5f:a4:05:c6:74:d4:a8:f3:04:e7:
         6c:2c:fb:ea:f0:d9:1b:3c:92:92:12:41:a6:25:8e:6b:0d:57:
         e2:b2:fc:be:89:95:f3:97:af:9c:49:01:ee:4d:68:59:ed:10:
         a3:1d:eb:4e:4a:e5:9c:72:74:44:b3:3a:dd:10:03:44:2a:3c:
         00:bc:2c:e0:bf:38:bf:06:58:1e:dd:c9:0b:64:20:f9:90:c8:
         82:6f:58:d6:5b:cc:7a:89:34:58:a0:98:50:eb:50:02:bc:51:
         bb:0a:da:37:6a:35:8e:2e:3f:25:c5:0a:b6:2b:e3:fb:cd:50:
         b5:9f:b6:18:2f:6b:c3:f3:12:6a:5c:d4:f9:47:3e:ce:e5:47:
         09:1a:a2:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 15:29:02 2024 by rpki-client on console-ams.rpki-client.org