Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/09d066cc-1a3e-3fda-9c38-5ea6ba5dbcff.roa
File:                     09d066cc-1a3e-3fda-9c38-5ea6ba5dbcff.roa (raw, json)
Hash identifier:          tQYjSSpi5TU9wulBDLxUNxbExeLt5XpfYnIAHc0JpeM=
Subject key identifier:   68:DA:B2:BD:DD:7E:05:BC:CF:2B:5C:92:2F:0A:88:7D:7E:25:80:9C
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285847CA3F854F8495F7326B026740
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/09d066cc-1a3e-3fda-9c38-5ea6ba5dbcff.roa
Signing time:             Wed 06 Nov 2024 14:00:41 +0000
ROA not before:           Wed 06 Nov 2024 14:00:41 +0000
ROA not after:            Tue 04 Feb 2025 14:00:41 +0000
asID:                     21859
IP address blocks:        108.165.51.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ca:3f:85:4f:84:95:f7:32:6b:02:67:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Nov  6 14:00:41 2024 GMT
            Not After : Feb  4 14:00:41 2025 GMT
        Subject: CN=fa5aa766-b3bc-4595-b834-e55304b25dd9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:01:21:bf:b6:99:1b:3a:f4:51:af:f8:07:b9:
                    9d:95:b4:ff:3e:de:a6:5b:d7:43:63:82:b9:55:8e:
                    d5:6f:da:a1:c3:5f:92:f7:0d:4c:f8:a5:0a:09:90:
                    86:e5:ba:0e:7c:bb:a6:75:bd:2b:57:89:56:28:b1:
                    11:6a:79:97:67:f4:9c:06:f3:5a:7a:c0:05:76:dc:
                    f0:dd:38:f8:e6:21:da:e1:82:97:39:0d:ed:b5:72:
                    51:4a:18:34:9c:d8:7a:98:0b:e3:a0:b6:74:b1:93:
                    70:ae:b2:2f:c5:54:b9:96:53:d8:28:11:1f:5d:e9:
                    7e:41:a5:11:4e:ac:33:4a:4f:25:2e:52:b4:fb:47:
                    57:75:5c:ea:04:66:87:d1:b0:95:45:35:c4:01:3d:
                    c1:70:32:77:00:d5:e0:b7:25:74:a7:43:0d:f0:7d:
                    86:b5:18:2d:9a:6e:6e:03:70:15:e3:47:5c:9c:1f:
                    e3:23:25:d2:16:ad:c9:0e:a4:81:af:bf:9d:e9:c2:
                    b8:f0:17:01:87:54:36:5c:ec:ab:08:65:b8:91:72:
                    83:5c:33:36:f7:c8:13:c8:c5:f9:d0:82:bf:43:63:
                    43:9d:3b:85:33:62:c1:0e:c0:41:be:3d:54:80:2f:
                    eb:b3:95:aa:6b:92:93:80:55:cf:9f:6f:c4:b7:d8:
                    35:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:DA:B2:BD:DD:7E:05:BC:CF:2B:5C:92:2F:0A:88:7D:7E:25:80:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/09d066cc-1a3e-3fda-9c38-5ea6ba5dbcff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.51.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:7b:0e:59:96:f7:d5:7f:19:e4:2f:9e:18:1b:68:e7:ed:03:
         e7:92:ee:13:1b:27:b2:0f:4e:32:f0:2d:99:76:af:fc:84:e7:
         df:88:95:93:6f:5f:7b:75:4b:b1:ec:93:5c:dc:e9:b6:b8:d5:
         8a:97:28:55:5c:a3:3c:72:cd:7c:3b:ff:64:54:6b:7f:a8:a3:
         a0:cb:ed:65:91:bb:ae:0c:3b:21:57:87:df:df:e5:ac:77:ee:
         42:89:8f:a9:02:02:a2:2e:98:4d:87:1f:d4:29:2c:9f:1f:5d:
         ba:19:fa:e4:8d:e7:b5:04:54:a5:5e:31:17:47:cd:ff:79:8f:
         28:17:8c:46:14:e1:50:6c:53:73:6d:fa:62:84:5f:df:69:cf:
         f8:b9:ba:2b:c4:b6:b8:19:89:b1:84:59:26:e0:a7:6e:6d:f3:
         84:26:23:32:3c:82:1e:43:28:29:ae:c3:8a:47:e9:8e:2b:7c:
         04:28:fe:02:a2:25:24:33:65:d4:7e:84:06:8d:89:db:30:aa:
         ec:0b:60:26:2c:ec:4d:84:00:23:5b:f8:6d:f1:8d:bf:38:3c:
         d8:26:8b:74:05:1f:76:ee:f6:d9:a1:61:4d:6b:28:c7:68:26:
         b7:d6:9e:27:d7:81:da:e1:fd:56:83:29:65:18:c3:17:fa:5e:
         04:3b:c4:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:54:03 2024 by rpki-client on console-ams.rpki-client.org