Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/10d276ab-f751-35f0-a3e9-575d8f2ceb3e.roa
File:                     10d276ab-f751-35f0-a3e9-575d8f2ceb3e.roa (raw, json)
Hash identifier:          IM+BokHZ3OQ+y0R9PsRZ+o3R7yaaSB9hkhU4u5kYdWU=
Subject key identifier:   D4:35:F0:93:EB:21:F9:9B:49:8A:B0:A8:93:F9:78:B8:A1:93:59:51
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285845304D3C5B943F63C6A95A4900
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/10d276ab-f751-35f0-a3e9-575d8f2ceb3e.roa
Signing time:             Wed 13 Mar 2024 01:00:26 +0000
ROA not before:           Wed 13 Mar 2024 01:00:26 +0000
ROA not after:            Tue 11 Jun 2024 01:00:26 +0000
asID:                     211373
IP address blocks:        108.165.214.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:30:4d:3c:5b:94:3f:63:c6:a9:5a:49:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Mar 13 01:00:26 2024 GMT
            Not After : Jun 11 01:00:26 2024 GMT
        Subject: CN=371a3a1d-fcc7-40d4-b580-da608b412db6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:e1:23:9f:f8:eb:91:ce:85:e1:3f:04:c9:f5:
                    14:ef:8c:e1:05:91:00:a4:8a:44:a8:6c:e8:84:06:
                    92:26:bb:1f:a3:9a:e0:78:96:86:f5:51:cc:46:b9:
                    8d:ff:d6:a1:51:f3:45:7d:2c:c3:84:09:36:33:1c:
                    44:1d:b3:f2:b6:8f:28:eb:dd:57:3d:e3:45:f3:3c:
                    1f:47:d7:f3:b9:13:50:d4:8d:ee:4a:a5:e0:2c:de:
                    44:47:2a:ef:16:4d:d4:15:c2:12:70:31:99:3f:ed:
                    51:2c:55:62:66:de:ac:fd:a8:76:3f:ef:e1:c3:ed:
                    df:11:68:3e:8b:b7:ef:1e:82:d1:0b:24:32:16:6a:
                    e1:8f:9d:91:10:21:c2:fe:9f:a4:ce:e1:71:40:0b:
                    43:1f:ac:50:9d:dc:4b:33:63:6d:af:ab:30:ea:96:
                    1c:fe:bb:11:af:d7:0a:fd:96:48:ad:0a:e7:4e:29:
                    0a:01:82:ef:47:85:58:01:fc:f5:04:4e:ca:1d:b4:
                    28:b2:4d:01:f6:4a:3b:f4:72:09:4b:f8:e3:79:9e:
                    6b:bb:68:bd:92:ba:4b:a1:f7:10:29:90:7f:e2:9b:
                    2a:90:a1:a2:4c:57:a5:27:05:6b:72:f1:6d:49:1e:
                    1c:96:83:3b:3a:b0:91:5d:13:77:2a:6a:4e:0c:03:
                    60:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:35:F0:93:EB:21:F9:9B:49:8A:B0:A8:93:F9:78:B8:A1:93:59:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/10d276ab-f751-35f0-a3e9-575d8f2ceb3e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.214.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:4c:45:13:95:02:aa:e5:62:c4:82:11:65:fe:31:28:7c:7b:
         88:d1:93:9e:45:ac:d5:8d:51:87:d9:69:dc:02:ec:9d:1b:e5:
         dc:7f:90:23:56:6f:b6:cb:e9:12:2f:01:ea:59:62:24:4d:d7:
         ee:5f:af:ba:74:dc:af:6f:03:23:c1:fd:f5:ae:e0:66:aa:ef:
         78:21:31:34:3c:f5:f2:1e:ef:38:2a:68:08:08:d5:fd:38:5e:
         81:9b:d0:7a:30:67:58:c8:f0:ee:af:53:bb:3b:2c:91:46:c7:
         da:dd:95:dc:31:d1:12:75:44:77:8a:11:0f:d7:fc:af:09:b7:
         bb:24:17:8f:91:68:1f:7e:11:3b:79:16:54:26:97:8e:bc:8f:
         1d:12:0f:a6:11:16:22:b2:7e:72:14:e6:95:7e:8a:fb:c5:f1:
         5b:82:52:fa:ea:f0:0a:8c:3e:d9:bf:43:39:5d:b7:30:d2:ab:
         ba:7b:0c:cc:8f:52:5c:61:d8:38:73:a4:aa:83:0b:06:d9:2a:
         53:da:a7:bd:a6:04:1b:b3:d5:d7:05:b3:f3:56:3a:77:14:ad:
         5f:d9:01:68:bd:35:93:2b:19:12:c6:63:8b:76:0e:12:71:3c:
         59:70:ab:ca:68:18:e4:9b:59:8a:25:a1:96:03:c5:82:1b:65:
         eb:8d:d4:85
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEUwTTxblD9jxqlaSQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI0MDMxMzAxMDAyNloXDTI0MDYxMTAxMDAyNlowLzEtMCsGA1UEAxMk
MzcxYTNhMWQtZmNjNy00MGQ0LWI1ODAtZGE2MDhiNDEyZGI2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiuEjn/jrkc6F4T8EyfUU74zhBZEApIpEqGzo
hAaSJrsfo5rgeJaG9VHMRrmN/9ahUfNFfSzDhAk2MxxEHbPyto8o691XPeNF8zwf
R9fzuRNQ1I3uSqXgLN5ERyrvFk3UFcIScDGZP+1RLFViZt6s/ah2P+/hw+3fEWg+
i7fvHoLRCyQyFmrhj52RECHC/p+kzuFxQAtDH6xQndxLM2Ntr6sw6pYc/rsRr9cK
/ZZIrQrnTikKAYLvR4VYAfz1BE7KHbQosk0B9ko79HIJS/jjeZ5ru2i9krpLofcQ
KZB/4psqkKGiTFelJwVrcvFtSR4cloM7OrCRXRN3KmpODANg7wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNQ18JPrIfmbSYqwqJP5eLihk1lRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvMTBkMjc2YWItZjc1MS0z
NWYwLWEzZTktNTc1ZDhmMmNlYjNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKXWMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG5MRROVAqrlYsSCEWX+MSh8e4jRk55FrNWNUYfZadwC7J0b5dx/kCNW
b7bL6RIvAepZYiRN1+5fr7p03K9vAyPB/fWu4Gaq73ghMTQ89fIe7zgqaAgI1f04
XoGb0HowZ1jI8O6vU7s7LJFGx9rdldwx0RJ1RHeKEQ/X/K8Jt7skF4+RaB9+ETt5
FlQml468jx0SD6YRFiKyfnIU5pV+ivvF8VuCUvrq8AqMPtm/QzldtzDSq7p7DMyP
Ulxh2DhzpKqDCwbZKlPap72mBBuz1dcFs/NWOncUrV/ZAWi9NZMrGRLGY4t2DhJx
PFlwq8poGOSbWYoloZYDxYIbZeuN1IU=
-----END CERTIFICATE-----
Generated at Fri May 3 17:58:51 2024 by rpki-client on console-ams.rpki-client.org