Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/032def81-b2a8-38c0-8d9c-8912a08efeaa.roa
File:                     032def81-b2a8-38c0-8d9c-8912a08efeaa.roa (raw, json)
Hash identifier:          YwJQpB/qU2PIUFfFc3xQmstIahBazQcMewjRinKAObs=
Subject key identifier:   3F:E5:D8:74:6C:6A:23:CC:19:42:14:AD:B2:A7:DC:B6:10:26:7F:F7
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584784566E58A831393C42EF3000
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/032def81-b2a8-38c0-8d9c-8912a08efeaa.roa
Signing time:             Sat 12 Oct 2024 13:00:42 +0000
ROA not before:           Sat 12 Oct 2024 13:00:42 +0000
ROA not after:            Fri 10 Jan 2025 14:00:42 +0000
asID:                     33425
IP address blocks:        108.165.0.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:84:56:6e:58:a8:31:39:3c:42:ef:30:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Oct 12 13:00:42 2024 GMT
            Not After : Jan 10 14:00:42 2025 GMT
        Subject: CN=87e3d834-2a7d-42b0-8736-fc1ac09a9deb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:ab:1d:88:74:4a:8e:13:19:13:b4:fa:b5:be:
                    62:b9:4e:fc:e4:72:92:ad:21:2e:d8:20:ae:3e:c3:
                    96:56:5a:16:de:09:f4:df:ff:31:08:31:03:25:49:
                    8a:a7:5a:de:50:f5:95:5c:90:be:f2:11:1c:bb:9b:
                    01:58:a0:ce:76:dc:07:24:3f:8e:6a:bf:d0:a5:75:
                    26:e1:ac:67:4c:a5:6c:1d:f9:d5:72:fb:96:d9:99:
                    51:67:27:ef:5b:9b:4a:4e:90:45:30:8c:0c:00:fc:
                    9c:45:a6:79:46:e4:59:7a:a0:de:26:04:5a:77:89:
                    7b:df:b6:c1:5b:a2:4b:8c:c0:9f:b0:e1:46:91:98:
                    ce:82:d8:82:a8:8b:8e:ba:75:2e:06:7d:a7:48:0f:
                    82:b8:95:5d:2e:51:55:15:e3:b0:ea:d4:8e:8f:a4:
                    88:5e:dc:33:eb:03:fb:8a:3f:ad:a2:8e:bb:5a:c4:
                    7d:fd:54:96:cc:b5:38:1b:3d:ae:b1:69:2a:1e:01:
                    33:f4:38:70:5d:14:be:f1:e4:9b:fd:3b:e6:cf:02:
                    44:76:87:c1:a4:b0:fc:90:bd:01:09:0f:1e:32:e7:
                    4b:d2:ec:68:99:49:d7:2d:23:4b:93:30:0e:99:af:
                    be:06:c8:51:05:ec:b7:9e:7e:27:72:8c:34:f5:52:
                    3a:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:E5:D8:74:6C:6A:23:CC:19:42:14:AD:B2:A7:DC:B6:10:26:7F:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/032def81-b2a8-38c0-8d9c-8912a08efeaa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.0.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:e0:bc:d0:4d:28:14:95:2c:2d:af:39:38:4c:22:4c:4a:0b:
         39:9e:df:4f:d9:64:ef:71:5b:f9:c6:84:2f:37:e7:ad:50:f4:
         2a:d2:45:d2:8b:ac:ed:37:19:93:39:b7:5c:32:dc:86:42:b6:
         b7:d6:79:0a:ad:01:87:64:1d:50:b1:2d:05:bd:8f:c4:a3:d1:
         06:e2:4e:1f:86:cc:2e:19:5e:0a:58:30:38:1d:ad:a8:21:c9:
         29:f5:33:a3:1f:f5:ca:8e:23:c6:25:3c:c8:1d:4f:e9:3c:86:
         c9:97:d9:0a:5f:a0:16:7c:ed:17:46:bf:d7:ee:df:9f:c1:bd:
         0a:cd:58:ad:c4:fb:b7:25:46:78:12:d0:b9:e6:f7:9b:d3:b4:
         ba:c1:ac:42:31:a1:0f:36:c3:5a:97:87:fa:44:33:05:7d:8f:
         9d:6a:17:57:39:f2:26:70:83:a0:a4:c9:b8:75:9c:58:0f:1d:
         13:e9:6b:d7:30:66:95:64:16:8d:d3:31:2a:9c:a0:df:c6:52:
         ba:07:e0:06:a5:56:e2:67:6d:c6:ae:c3:e6:ba:1e:15:e2:25:
         e3:6d:21:ba:54:a7:33:89:66:fb:e5:14:88:6a:47:92:97:d6:
         c1:87:78:72:33:9a:74:d9:45:9b:4f:a3:d3:98:68:6d:d6:8b:
         a7:a2:bd:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:41:44 2024 by rpki-client on console-ams.rpki-client.org