Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/0856c4df-26a7-3efa-8450-82b646b79445.roa
File:                     0856c4df-26a7-3efa-8450-82b646b79445.roa (raw, json)
Hash identifier:          09S+DF0brrux9L87w1TZqiVIFEqIqLrBmfXp0JuEd5w=
Subject key identifier:   4E:38:07:D9:AF:2F:22:54:AD:C5:3A:C0:9B:C2:10:DA:0F:11:42:B1
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285848D2113AA5D75D2B9245009F00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/0856c4df-26a7-3efa-8450-82b646b79445.roa
Signing time:             Sun 09 Feb 2025 02:00:39 +0000
ROA not before:           Sun 09 Feb 2025 02:00:39 +0000
ROA not after:            Sat 10 May 2025 01:00:39 +0000
asID:                     61317
IP address blocks:        108.165.206.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:d2:11:3a:a5:d7:5d:2b:92:45:00:9f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Feb  9 02:00:39 2025 GMT
            Not After : May 10 01:00:39 2025 GMT
        Subject: CN=eb0bf2c2-8460-45ab-ba0b-05a7038540ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:6d:5b:8e:4c:b0:25:cb:09:54:8e:80:57:e7:
                    9c:ea:77:8f:d6:81:da:61:8c:76:e4:ab:3c:28:b7:
                    8a:36:3e:69:99:b8:bf:9a:7e:2f:62:c9:02:ef:88:
                    53:c5:e0:e4:5f:1e:cd:46:d5:48:d8:6b:c3:6b:ed:
                    80:4f:c4:8c:4c:9e:6a:15:6f:9a:5f:dd:ca:c9:4f:
                    18:2f:e2:99:17:86:e8:fa:f4:db:d6:d7:cc:c7:21:
                    bf:23:36:e9:a0:34:4d:61:62:a0:d1:0d:cf:9b:54:
                    48:40:ca:1e:bc:75:ff:0c:5b:59:52:e1:e1:70:59:
                    e4:74:59:98:2a:67:36:8d:61:ad:23:e3:c6:56:df:
                    31:f6:b4:10:bd:48:87:6c:01:54:5a:a2:90:02:f6:
                    5c:9a:f1:08:29:84:4c:d0:a1:7f:c0:41:6d:91:cc:
                    fd:a9:1c:58:7a:55:5e:4e:4b:90:48:88:0a:21:6f:
                    02:59:b9:36:1a:b0:f7:c0:39:4f:e0:b8:69:07:14:
                    d3:0a:10:d1:d3:4b:61:93:a2:3b:7f:04:4a:cd:45:
                    c7:5e:b2:76:2e:8c:64:97:58:00:33:f9:c3:de:b4:
                    4d:43:73:cd:02:b4:de:22:8e:f2:ee:dc:04:79:6f:
                    ba:58:ea:54:e8:1d:7f:a6:9c:fb:15:2d:11:cb:b3:
                    91:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:38:07:D9:AF:2F:22:54:AD:C5:3A:C0:9B:C2:10:DA:0F:11:42:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/0856c4df-26a7-3efa-8450-82b646b79445.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.206.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:8e:79:e2:64:3d:2f:ba:5f:f4:7b:1c:9e:8c:64:0c:dd:e3:
         80:b9:b0:89:4c:43:c8:6e:09:49:56:42:2a:80:6a:35:e6:b7:
         5e:99:55:8c:5e:c7:3f:41:e5:07:29:c0:69:da:74:82:1c:85:
         fc:db:75:39:53:cd:11:c5:df:1d:7c:a6:2c:7c:89:60:d2:02:
         df:92:f8:a5:49:fa:da:c2:62:a6:0b:a2:62:41:74:13:33:bc:
         4d:33:6d:95:78:85:63:a2:51:1d:22:61:bc:3c:1e:49:06:1e:
         44:ef:8d:ea:9a:5f:83:71:1c:35:89:4f:d4:fb:50:4c:dc:b1:
         7d:5c:56:28:7f:53:e0:25:a7:28:fd:28:04:10:16:cc:3b:e3:
         96:73:41:81:16:76:a2:74:09:f9:b7:33:4c:ca:2c:a2:43:60:
         99:11:37:df:27:c5:9a:d8:29:5f:96:9d:03:c0:cb:74:30:72:
         9d:e3:2a:89:df:39:e0:27:23:63:e2:63:e2:0e:a6:f9:a8:fc:
         af:13:4e:34:97:1c:96:d4:96:ef:9b:47:bb:47:59:51:9a:b2:
         2e:27:72:b1:e7:28:9e:bd:66:c9:28:89:87:1f:79:a1:4e:07:
         54:13:f9:c8:08:b1:34:e0:bb:f3:6b:15:94:29:02:3f:52:31:
         11:19:7a:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:29:05 2025 by rpki-client