Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/0b309836-db49-3895-bff7-fe52832f0597.roa
File:                     0b309836-db49-3895-bff7-fe52832f0597.roa (raw, json)
Hash identifier:          VVklE2PBvPDAUinekorZ76IhRbOU10KW0/qBzdbvWmY=
Subject key identifier:   D0:22:03:B9:21:1E:F1:A0:39:FC:FF:60:2C:25:D9:65:DD:12:90:14
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F432858452C1D47EA516F52F6620ED100
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/0b309836-db49-3895-bff7-fe52832f0597.roa
Signing time:             Mon 11 Mar 2024 13:00:31 +0000
ROA not before:           Mon 11 Mar 2024 13:00:31 +0000
ROA not after:            Sun 09 Jun 2024 13:00:31 +0000
asID:                     21859
IP address blocks:        108.165.126.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:2c:1d:47:ea:51:6f:52:f6:62:0e:d1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Mar 11 13:00:31 2024 GMT
            Not After : Jun  9 13:00:31 2024 GMT
        Subject: CN=4339f288-4b7f-4fd5-8c38-79452277c09a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:cc:f7:c4:77:d8:53:7f:93:e3:3d:96:19:79:
                    20:cd:1b:f4:c8:8e:1d:43:30:6a:c7:c8:c5:20:a8:
                    23:a9:48:5b:48:85:2a:15:da:c1:b0:9e:38:f7:37:
                    e8:6a:a3:0b:38:ca:d8:cf:bb:95:e6:8c:1a:c5:5e:
                    97:ae:2c:2a:45:73:4a:6a:95:1a:e0:39:27:7a:d1:
                    bc:4b:80:7e:a1:c9:b2:62:5d:c9:e7:16:e2:a2:49:
                    40:35:f3:ef:3e:f4:06:0f:57:40:b2:f4:8d:2f:30:
                    b1:09:ed:da:cd:0e:e1:51:07:4c:b9:54:20:61:a6:
                    6c:ef:6a:ed:2a:4b:00:21:81:dc:2a:c2:1c:4f:f7:
                    78:e1:6c:8b:6d:43:ff:5c:c3:77:05:79:6d:22:c6:
                    46:43:ec:ad:04:23:35:85:1b:f9:74:6d:bf:12:62:
                    e4:07:f3:03:62:41:eb:15:78:a0:31:2d:3d:ac:4a:
                    b2:34:d4:e4:8a:28:8a:ca:17:6d:31:22:87:cb:7c:
                    01:05:d1:a0:75:7a:f4:0e:ff:fa:2e:aa:c8:d1:4b:
                    9f:cf:93:29:28:ca:1c:10:97:a4:9b:ec:ad:aa:06:
                    3e:3b:5e:9d:01:50:4e:85:0e:b0:cd:73:e0:27:c4:
                    3f:f3:2a:0a:5b:c2:2c:a1:a1:1e:3d:31:e1:4d:6a:
                    14:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:22:03:B9:21:1E:F1:A0:39:FC:FF:60:2C:25:D9:65:DD:12:90:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/0b309836-db49-3895-bff7-fe52832f0597.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.126.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:9c:6a:8f:26:02:07:e0:77:2c:bb:fd:d4:b8:bd:91:32:63:
         9c:55:90:58:f7:06:bf:7e:81:0c:a2:7c:87:50:f7:80:22:9e:
         20:6b:6e:a8:f0:83:38:32:c3:89:c4:4c:4c:f3:7c:9d:e3:db:
         d7:65:35:6d:87:42:ba:fd:bd:a1:7b:f0:8b:8c:3e:9d:49:8a:
         a6:a4:4e:ec:b5:71:bc:a6:7a:cf:19:2e:c5:20:90:d6:ab:36:
         71:d8:0d:45:63:a3:c9:ed:5a:bd:b5:f0:ea:33:35:d5:45:8a:
         7f:35:1b:b0:19:35:f0:41:26:9b:08:71:b4:e3:d0:66:fe:94:
         7e:c2:00:5c:01:fa:f5:7c:39:b9:c1:02:90:dc:9f:af:1d:b5:
         0e:fe:30:6c:99:37:1e:0f:e5:0c:d5:09:54:1e:8c:8f:2c:9b:
         fe:81:d5:8c:0b:b7:ee:4e:38:74:f4:32:86:8c:31:56:5c:fd:
         3f:a3:30:e2:88:c3:52:c7:7b:dd:b5:ff:dd:b5:ec:3c:55:ed:
         3b:6a:e5:e3:7b:29:fe:5d:d8:9f:53:07:ee:4e:3d:2f:cb:35:
         15:9e:7a:1e:7f:37:2f:f1:6a:21:d6:68:f1:84:2c:72:ec:9c:
         c5:0f:77:ba:b6:09:e5:f0:19:51:da:91:1f:b3:64:ad:1b:19:
         a3:a0:c3:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 20:21:08 2024 by rpki-client on console-ams.rpki-client.org