Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/0e5145f4-0f4b-35b5-a329-9d7b134de00e.roa
File:                     0e5145f4-0f4b-35b5-a329-9d7b134de00e.roa (raw, json)
Hash identifier:          OH9PNCdUVw2sIFVfgodGzJfwruuzkopmD7WthOL86bQ=
Subject key identifier:   2D:C7:BE:CB:A8:A0:E3:8F:C0:E9:57:E2:0C:0D:DD:93:0F:D8:BA:D1
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F432858474850B33F332F4ED01BD59D40
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/0e5145f4-0f4b-35b5-a329-9d7b134de00e.roa
Signing time:             Sat 21 Sep 2024 01:00:33 +0000
ROA not before:           Sat 21 Sep 2024 01:00:33 +0000
ROA not after:            Fri 20 Dec 2024 02:00:33 +0000
asID:                     209242
IP address blocks:        108.165.216.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:48:50:b3:3f:33:2f:4e:d0:1b:d5:9d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Sep 21 01:00:33 2024 GMT
            Not After : Dec 20 02:00:33 2024 GMT
        Subject: CN=74ea6724-bc06-41b8-b7a4-04595e2fb1a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:d5:10:f2:ab:45:c5:30:a5:33:41:a6:07:bb:
                    49:ac:68:b7:22:6f:4d:3a:30:a2:50:9c:7e:3e:ff:
                    f8:79:35:d8:12:75:92:c9:78:84:d9:0a:fd:29:17:
                    df:71:9c:a5:8d:ba:d1:2c:97:a7:04:f6:b0:07:08:
                    2d:14:2b:70:7e:16:5b:73:e9:cc:94:e9:05:58:51:
                    4c:1f:03:1a:00:1b:cd:73:c1:21:49:ae:50:63:05:
                    5c:8d:74:09:3a:6d:59:2d:b8:41:f5:62:3b:e9:31:
                    96:c1:00:b4:4a:39:c8:69:7a:62:e6:c8:53:df:79:
                    ce:36:52:91:3a:2d:93:71:03:b7:68:25:06:11:a7:
                    9c:f0:26:cd:0f:3a:a3:eb:e5:8b:c0:14:9a:84:4e:
                    c2:f0:5b:73:c0:a7:cc:5e:55:17:eb:3d:d7:23:aa:
                    4e:0f:b4:32:00:c5:7f:99:e3:3c:43:67:fd:f8:b8:
                    43:af:8e:13:01:a3:76:1d:b3:72:e4:c2:63:d5:84:
                    87:d9:53:1c:0f:ab:47:af:be:aa:30:2c:a5:ce:de:
                    20:04:41:04:36:9c:ec:06:ee:8c:89:86:93:17:12:
                    f0:90:f7:57:10:3f:2b:a8:52:e8:05:9d:a4:a1:31:
                    11:1b:8f:cd:e9:ba:e9:61:fd:5f:e7:49:9a:ec:e0:
                    9f:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:C7:BE:CB:A8:A0:E3:8F:C0:E9:57:E2:0C:0D:DD:93:0F:D8:BA:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/0e5145f4-0f4b-35b5-a329-9d7b134de00e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.216.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:8f:33:07:96:bf:4a:de:23:1a:8c:bb:f9:95:58:3e:6b:e8:
         24:fb:c7:7e:86:10:12:e3:d3:65:9a:a4:56:f3:4f:68:49:27:
         6d:8a:f2:7e:8c:81:02:4d:b1:b5:70:6c:2d:7e:cc:f8:c4:80:
         f1:ef:a0:bb:17:1c:fb:f4:11:03:eb:87:b9:9d:a2:d8:64:80:
         0a:6b:5e:48:fc:b9:c7:ae:e9:6f:4a:29:45:67:2b:76:1d:f4:
         a1:15:91:d7:a6:5d:99:7b:10:a3:e1:92:c5:a9:08:86:cb:67:
         0f:1e:f0:3d:88:ed:78:07:a4:98:e5:67:ab:2f:f6:4c:8d:44:
         c7:8f:3f:3c:d0:90:c3:f6:70:ad:b7:7e:85:a6:de:d8:a3:84:
         5d:4b:91:d9:7c:61:35:e9:c4:3a:cd:3e:64:e5:1c:da:58:eb:
         34:8f:49:e7:15:0e:21:51:5a:04:bd:6f:b9:d9:34:07:f8:35:
         fb:49:64:aa:1a:4b:02:df:8c:2d:9b:48:b5:a6:a2:c6:7d:3d:
         ba:5b:e7:d6:8a:4a:ed:36:61:97:1e:19:d0:85:24:ed:3c:83:
         af:0f:79:40:59:b5:72:9e:38:3f:45:46:fa:b5:f3:39:b5:18:
         ff:b3:eb:0f:9f:6c:9b:4b:8f:35:28:34:e0:b9:33:8d:1b:4a:
         5f:63:74:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:34:39 2024 by rpki-client on console-fra.rpki-client.org