Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/12fc4be4-3d5b-366a-ad43-dd4389a0ad27.roa
File:                     12fc4be4-3d5b-366a-ad43-dd4389a0ad27.roa (raw, json)
Hash identifier:          VWmWp5gw/ZmXJ6+T6k6mdNjNFlUr2wtZDVXw/i810mA=
Subject key identifier:   DC:85:53:4C:36:BF:B8:DC:E6:B2:0F:2C:7B:9D:DC:5E:A5:DF:34:53
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285845304D3C9023060612D936B37C
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/12fc4be4-3d5b-366a-ad43-dd4389a0ad27.roa
Signing time:             Wed 13 Mar 2024 01:00:26 +0000
ROA not before:           Wed 13 Mar 2024 01:00:26 +0000
ROA not after:            Tue 11 Jun 2024 01:00:26 +0000
asID:                     212609
IP address blocks:        108.165.210.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:30:4d:3c:90:23:06:06:12:d9:36:b3:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Mar 13 01:00:26 2024 GMT
            Not After : Jun 11 01:00:26 2024 GMT
        Subject: CN=c7df8227-a20e-4626-b07b-2b49490c73d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:e8:84:fe:30:8a:de:01:8c:be:22:a7:26:5d:
                    c6:9e:d6:69:2c:22:ff:87:4e:6d:ac:26:d8:80:9d:
                    bc:4e:34:88:5c:47:d2:3d:22:ef:91:be:e3:3c:96:
                    d2:b6:43:2f:b1:36:b7:61:4b:7b:7b:78:fb:87:47:
                    8d:b6:f2:e7:42:f5:f7:6e:b0:1f:f6:3a:3e:c9:20:
                    75:8a:e4:e1:2e:da:ad:b4:74:4e:45:f8:de:51:d2:
                    b3:2e:bd:64:7e:23:e7:8a:7d:af:b4:6b:97:ba:81:
                    90:01:3a:a5:ba:df:cf:51:5a:c9:b8:a5:8f:9d:41:
                    19:3b:92:f6:71:9f:3a:e9:2b:40:f2:22:6f:95:53:
                    7c:9b:61:51:74:3b:a6:59:50:16:12:21:03:dc:ba:
                    36:7f:59:65:97:e6:ca:a8:c6:32:68:47:3e:b2:d0:
                    86:c9:69:21:86:85:c4:3b:a6:53:27:0b:70:44:8b:
                    10:0b:1d:d6:ea:5d:da:99:7e:2b:24:f0:83:06:76:
                    3e:f5:0e:5d:de:6c:a7:48:92:4a:4c:1b:c9:33:69:
                    3b:f0:ae:c8:d9:2e:e4:7c:15:cd:49:3c:ea:e5:44:
                    1f:66:7c:12:6f:bb:59:d3:f6:30:eb:a5:0a:d4:eb:
                    c9:e6:44:98:76:2f:68:cd:4c:25:d0:b6:21:ae:c8:
                    9e:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:85:53:4C:36:BF:B8:DC:E6:B2:0F:2C:7B:9D:DC:5E:A5:DF:34:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/12fc4be4-3d5b-366a-ad43-dd4389a0ad27.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.210.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:ba:29:a5:7a:81:2e:a7:d6:74:33:bd:ec:bf:c8:25:8d:e4:
         5e:ca:75:1b:a3:d3:25:49:41:af:17:4a:16:87:f9:e0:5f:cf:
         18:c2:59:34:cd:3e:29:4e:ab:e9:64:fa:7f:bd:9d:18:f0:b9:
         d2:f0:4c:ae:79:7d:10:58:1d:a1:bb:93:ac:11:f0:99:c5:6d:
         08:f1:84:ad:07:a6:45:db:e8:95:2d:93:a3:5d:80:19:05:f6:
         a1:c5:fe:e8:63:e5:af:3b:ca:61:85:51:43:17:ae:6f:c4:d3:
         66:42:21:3a:59:14:be:0b:82:59:f5:fb:2c:bd:2d:8d:24:7b:
         4e:50:60:87:06:b8:da:88:87:2e:50:2a:5d:58:7b:38:33:7e:
         bc:92:b5:f5:6f:4a:fe:ac:cd:ed:93:89:f0:19:49:ac:43:c3:
         0a:de:99:03:12:90:00:f4:5d:3c:3b:40:fa:93:8b:32:ba:cf:
         b7:20:0d:40:93:1e:59:6b:0b:31:6e:c1:71:99:eb:0b:b1:9c:
         20:b9:33:bc:ec:46:d4:94:0a:32:22:21:46:dc:36:1b:17:2b:
         fb:5a:d4:d0:9d:27:a4:60:86:50:89:94:d3:bc:a0:f1:9f:17:
         bb:cd:23:ae:99:df:55:92:b1:cd:fa:9a:db:7c:bb:8b:07:4a:
         ae:46:91:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 02:06:23 2024 by rpki-client on console-ams.rpki-client.org