Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/0ad42081-ac06-3168-8c6b-953c135a826e.roa
File:                     0ad42081-ac06-3168-8c6b-953c135a826e.roa (raw, json)
Hash identifier:          dl7gL3FAAXzzFXNuvkKks1qhFQtdNBk+RqKgxHAO/uU=
Subject key identifier:   B1:24:83:E6:04:DA:BF:8A:CB:55:76:6F:C6:80:70:DC:91:ED:3D:68
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285847F584EF035CA9D0893B4A68C0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/0ad42081-ac06-3168-8c6b-953c135a826e.roa
Signing time:             Fri 22 Nov 2024 02:00:40 +0000
ROA not before:           Fri 22 Nov 2024 02:00:40 +0000
ROA not after:            Thu 20 Feb 2025 02:00:40 +0000
asID:                     36829
IP address blocks:        108.165.105.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:f5:84:ef:03:5c:a9:d0:89:3b:4a:68:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Nov 22 02:00:40 2024 GMT
            Not After : Feb 20 02:00:40 2025 GMT
        Subject: CN=9e638be1-e06b-4268-8c81-bbba606e4ff3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:81:bc:cc:22:c1:47:d1:1e:d7:13:11:ab:07:
                    d2:3e:23:e9:c1:a2:60:c8:0e:f7:98:06:2f:75:aa:
                    21:3e:c9:f7:16:d1:4c:58:ee:61:ad:a5:b5:01:c0:
                    dc:7b:7e:ee:0f:ce:bd:44:40:3b:f1:13:9b:26:02:
                    20:82:cb:75:84:53:a5:bf:6b:bd:3e:6e:ab:46:cf:
                    72:ea:b2:84:c2:9b:55:47:01:3b:45:b4:2b:69:04:
                    6a:7f:4a:61:3b:2c:f3:8f:39:bd:18:e5:fe:44:96:
                    bb:fe:47:0c:ce:a0:f8:46:dd:0c:a6:6f:eb:e4:3b:
                    0f:8d:01:74:89:20:85:a4:b7:63:d9:93:c7:ee:76:
                    6f:f5:b8:f4:8a:1d:d9:61:63:3d:9e:56:2a:c4:8c:
                    f9:85:bf:12:bf:4f:8a:ad:34:2c:d5:4b:00:e4:ea:
                    6d:b5:34:3c:90:0e:b9:5f:6d:82:b9:c9:c1:f1:8b:
                    d4:ba:41:8c:8c:0d:7f:25:2e:26:c8:8c:26:e8:31:
                    e8:49:52:18:ed:b7:d1:e2:62:a6:d1:b0:36:01:69:
                    45:ee:d3:95:fc:46:31:de:d2:04:a9:1f:b5:5a:b1:
                    ce:0a:90:85:48:d1:28:0b:f9:f4:9a:ad:c3:5e:37:
                    82:c4:ae:93:a5:68:d2:e7:c7:7a:d7:00:02:8a:eb:
                    26:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:24:83:E6:04:DA:BF:8A:CB:55:76:6F:C6:80:70:DC:91:ED:3D:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/0ad42081-ac06-3168-8c6b-953c135a826e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.105.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:9e:c3:51:55:5d:7b:11:4a:b2:27:b6:15:19:22:f7:19:cb:
         54:50:db:ed:2d:2b:10:2e:ca:6e:cc:85:38:29:04:03:46:2e:
         15:8d:68:30:a4:f5:b6:c3:fc:17:70:d1:49:4d:23:26:3c:95:
         d6:07:c9:b1:f2:03:69:22:cc:fa:cb:3f:b8:28:df:6a:cc:9d:
         a5:fd:16:e3:7a:ad:0f:45:c6:33:4a:47:47:8d:e3:11:82:46:
         cf:58:45:0e:41:4f:04:3c:67:70:36:fc:b3:a3:c0:7c:28:74:
         66:3c:46:ec:5e:af:b6:a6:87:5e:62:87:16:73:4e:c0:53:75:
         79:ad:6c:5f:77:93:40:7a:a6:c9:93:68:de:92:84:cb:af:11:
         22:63:1a:cf:9a:5e:06:26:e9:a8:fe:31:7e:6a:4b:8f:84:60:
         58:76:b5:fc:77:f0:db:53:83:f8:c4:9b:77:94:96:0a:32:3b:
         e5:78:ca:0b:92:44:d9:4c:49:82:26:a2:36:04:de:35:37:b9:
         74:26:63:5b:fd:12:2c:cc:de:d4:70:7c:e2:55:09:60:b7:7e:
         fc:64:d1:d8:a3:b7:5a:39:16:0b:03:5d:1e:9f:8b:e3:c0:70:
         74:08:99:33:d7:b8:e6:c9:83:c7:89:65:83:95:d0:97:d9:08:
         3a:b8:91:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 05:50:15 2024 by rpki-client on console-fra.rpki-client.org