Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/00ba668b-93c4-35e4-84f7-10a989bb1b49.roa
File:                     00ba668b-93c4-35e4-84f7-10a989bb1b49.roa (raw, json)
Hash identifier:          irVx91sGtXIhygyAqkMAUxIzwFUrRNLdK7MZK9XTKUg=
Subject key identifier:   EB:B1:64:AD:3D:B0:61:1C:4E:78:36:FD:C2:A5:E2:FA:07:AB:54:4D
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F432858473095F8545FEF76725C44B154
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/00ba668b-93c4-35e4-84f7-10a989bb1b49.roa
Signing time:             Thu 12 Sep 2024 13:00:41 +0000
ROA not before:           Thu 12 Sep 2024 13:00:41 +0000
ROA not after:            Wed 11 Dec 2024 14:00:41 +0000
asID:                     132335
IP address blocks:        108.165.94.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:30:95:f8:54:5f:ef:76:72:5c:44:b1:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Sep 12 13:00:41 2024 GMT
            Not After : Dec 11 14:00:41 2024 GMT
        Subject: CN=6691d675-8703-49e9-abd3-7017d40e8dae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:22:dd:4a:58:ed:2a:d3:cd:bd:f1:cd:23:5a:
                    7a:5c:5c:e6:00:d6:92:2c:d5:8e:7e:5e:ce:c4:7f:
                    07:b4:06:cc:45:07:44:1e:ef:b3:d3:76:9f:08:c7:
                    ac:8d:5c:9c:d7:25:3f:12:0c:31:a8:a3:89:9d:8c:
                    a3:2d:61:f4:49:76:15:8b:0d:26:37:f2:db:41:f7:
                    ff:7c:04:63:c9:ee:49:0d:0a:b7:a3:54:c7:92:20:
                    8f:11:37:19:47:82:cf:88:c0:35:94:01:cb:b3:89:
                    6e:a7:5b:d1:56:71:7e:74:7f:4b:6e:0a:76:70:4d:
                    98:1d:6c:1b:b7:36:28:c3:96:f6:74:38:a1:4c:93:
                    32:b8:73:11:75:e0:09:91:0a:6c:0e:df:26:9a:ac:
                    73:11:59:4f:ad:e0:9f:29:c1:d4:b5:a7:56:07:0a:
                    16:6d:7d:16:c0:a9:84:7b:db:86:b1:98:63:0c:42:
                    f7:13:38:b5:6d:f2:a5:a0:ef:aa:85:9f:9e:45:01:
                    48:76:16:0b:1b:c5:13:e4:b6:e4:16:fc:e2:56:40:
                    b6:66:42:46:49:77:22:30:12:93:4a:78:ae:d8:79:
                    e3:5c:01:53:8e:ea:af:74:ab:61:43:c9:8c:be:8e:
                    a2:dd:9f:f3:d4:9c:32:91:a5:ed:23:59:81:8f:8f:
                    ed:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:B1:64:AD:3D:B0:61:1C:4E:78:36:FD:C2:A5:E2:FA:07:AB:54:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/00ba668b-93c4-35e4-84f7-10a989bb1b49.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.94.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:61:d2:20:b8:3f:b0:a1:8c:86:98:68:1f:2c:50:b6:50:75:
         61:03:ad:fe:8a:86:49:bb:df:3e:78:81:db:f8:85:60:54:81:
         e6:69:13:9f:c2:ea:1a:35:a2:fa:f8:04:f3:f2:71:1e:32:cd:
         ea:fd:54:ca:da:97:49:73:4d:91:92:0c:95:a7:c8:6e:b3:8b:
         f3:9d:c8:24:c1:6d:4d:e3:02:f4:24:ee:d3:92:51:ff:88:c0:
         d5:79:43:f5:0e:09:e8:4a:99:46:ad:25:80:59:cc:ed:39:1b:
         d4:83:cc:fd:d2:82:de:e0:1c:3f:a0:da:86:f2:18:54:ec:92:
         4b:1e:dd:d2:94:64:96:c2:05:56:20:8f:4f:64:95:2e:d4:bb:
         36:fb:ea:94:37:32:4d:4e:bf:4e:2d:6f:b7:51:97:48:45:13:
         79:11:2e:36:54:a7:c9:65:17:3e:57:c7:ae:fc:61:1d:be:ea:
         a3:6d:53:e4:2c:0b:af:11:b4:b3:34:91:cf:cf:9e:32:7a:b7:
         c5:ca:40:3d:e3:7d:43:e6:01:14:54:be:b7:b7:8f:14:30:18:
         4e:25:69:95:e3:e4:f0:0d:6d:1f:36:13:65:88:7c:5a:ea:3c:
         d8:a5:5e:c1:8a:87:48:63:9e:cd:fb:80:e9:44:c6:de:ac:d1:
         47:73:7a:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:37:33 2024 by rpki-client on console-ams.rpki-client.org