Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/019c316d-63a2-3eb1-81f3-b9ca541d5644.roa
File:                     019c316d-63a2-3eb1-81f3-b9ca541d5644.roa (raw, json)
Hash identifier:          diodRCTm0La/9ECsdD8qtUlFkJswZop1gPNBtdAR2BA=
Subject key identifier:   4D:BF:D6:C5:3F:B9:DF:FF:D6:F3:10:1B:7D:27:AD:E8:D2:50:2C:7E
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F432858452C1D46F656B10CCA60688800
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/019c316d-63a2-3eb1-81f3-b9ca541d5644.roa
Signing time:             Mon 11 Mar 2024 13:00:31 +0000
ROA not before:           Mon 11 Mar 2024 13:00:31 +0000
ROA not after:            Sun 09 Jun 2024 13:00:31 +0000
asID:                     21859
IP address blocks:        108.165.99.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:2c:1d:46:f6:56:b1:0c:ca:60:68:88:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Mar 11 13:00:31 2024 GMT
            Not After : Jun  9 13:00:31 2024 GMT
        Subject: CN=c0ebc9a6-708c-40b2-97d4-7cfb295c90b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:5e:5d:9f:90:1f:2e:ba:31:84:1e:2a:8d:fe:
                    b0:0c:af:5a:64:03:96:1a:bc:c8:2a:25:d8:ae:e2:
                    de:0a:af:1c:c3:b3:c2:eb:cc:f0:37:5f:e1:a0:01:
                    04:b8:61:44:1f:b6:1b:d4:9d:a1:27:ac:0e:09:41:
                    62:7c:b2:07:a5:1e:b2:f4:b6:99:e3:ad:7b:4a:72:
                    93:84:6d:94:1c:5a:6d:f4:42:40:c9:d2:6f:3d:7e:
                    b4:30:37:89:4e:3b:53:f1:5a:6f:47:70:47:f1:f9:
                    83:cd:c4:ab:27:a3:16:f4:d7:d5:18:17:30:3f:58:
                    0b:9c:34:22:77:c4:0b:1d:7f:d9:d8:7a:fd:56:c5:
                    88:04:b6:04:f3:3c:e4:3b:e7:4d:81:bd:1d:3d:be:
                    cc:eb:c2:9c:b2:16:67:13:7e:49:fc:23:af:5a:d4:
                    5e:a9:40:67:cf:71:a7:68:a2:4d:97:42:e4:da:5b:
                    83:d7:23:8a:8c:24:85:7c:92:ab:67:ca:6a:ba:59:
                    43:e7:cd:fd:83:d9:e9:f8:4b:fe:9f:c5:70:ff:29:
                    76:8d:04:f7:3c:84:75:b2:32:b6:0c:0d:55:29:2c:
                    02:1b:bc:68:35:87:18:e3:8b:0f:06:a5:92:3b:6a:
                    d0:80:f0:cb:0c:33:38:a5:f9:06:4e:ca:28:17:ce:
                    c9:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:BF:D6:C5:3F:B9:DF:FF:D6:F3:10:1B:7D:27:AD:E8:D2:50:2C:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/019c316d-63a2-3eb1-81f3-b9ca541d5644.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.99.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:76:19:fc:03:6a:3c:60:4c:00:36:37:92:25:f8:44:23:46:
         45:48:1d:f4:dc:08:68:d4:d9:c7:aa:65:9e:7a:01:d1:43:e7:
         46:c2:89:dc:8c:80:7a:1a:97:f7:ee:f9:84:e4:03:e5:ea:eb:
         14:67:ca:8a:df:99:30:2f:26:36:02:80:d1:81:e3:6b:d3:5b:
         59:57:96:04:57:3f:83:ba:9d:7b:7c:82:53:20:61:8e:43:7c:
         e6:7b:a3:29:fc:15:e9:2a:fc:4d:cb:60:e1:25:4a:81:29:6a:
         48:45:17:af:7e:6b:44:4f:3b:58:29:8d:b6:33:c3:b3:91:3e:
         fd:15:d7:c3:0d:44:62:ca:bb:07:30:f5:49:2e:af:37:70:5a:
         4d:f7:25:e9:a2:72:fc:e1:67:ac:36:ab:6f:dd:67:f1:42:ea:
         14:77:38:02:08:ea:8a:28:2f:8d:3f:d7:52:c1:c0:75:f1:fa:
         02:f0:ca:b6:36:0e:24:a8:26:af:a6:fe:80:39:0f:40:c0:82:
         37:7f:86:85:f9:d7:1e:90:35:80:b1:a0:b8:ee:4a:19:19:91:
         31:39:42:13:b6:b4:9c:84:5f:bc:a0:ad:0d:4d:87:68:71:bf:
         d3:06:f8:8b:33:4d:a1:1e:b3:d1:a6:60:98:d4:bd:0a:3c:8b:
         c7:c9:c3:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 17:32:41 2024 by rpki-client on console-ams.rpki-client.org