Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/13539442-a710-3e8e-a6c4-2bcc5a412d50.roa
File:                     13539442-a710-3e8e-a6c4-2bcc5a412d50.roa (raw, json)
Hash identifier:          QMg/H2WtPfTUhx3gilwrc8Iuci8cTIM3hISJws8B3qQ=
Subject key identifier:   9D:71:00:44:9A:79:B6:A9:EA:6C:23:9A:EB:EB:21:E1:01:CF:0D:FB
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584529528CF840D8F5A1B3F82800
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/13539442-a710-3e8e-a6c4-2bcc5a412d50.roa
Signing time:             Sun 10 Mar 2024 13:00:31 +0000
ROA not before:           Sun 10 Mar 2024 13:00:31 +0000
ROA not after:            Sat 08 Jun 2024 13:00:31 +0000
asID:                     3356
IP address blocks:        108.165.205.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:29:52:8c:f8:40:d8:f5:a1:b3:f8:28:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Mar 10 13:00:31 2024 GMT
            Not After : Jun  8 13:00:31 2024 GMT
        Subject: CN=62f7a20f-687d-46bf-aca2-cb1de77e3f18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:d6:cc:0a:93:fd:74:b8:2d:3d:f5:42:41:d9:
                    0e:30:b5:05:69:0f:27:cf:1d:7d:94:a6:99:75:ee:
                    fd:d7:01:6f:97:5e:4d:94:a9:e3:af:ed:c6:90:91:
                    b7:80:9c:62:c0:e4:0a:ef:a2:2a:ac:23:6a:58:84:
                    11:5f:cb:41:e3:47:28:da:82:fd:4b:29:05:e7:2a:
                    2b:54:52:ed:e3:77:d6:b4:7c:ad:d6:ed:b6:17:72:
                    1d:43:8a:6c:6c:5e:6d:2b:60:49:9f:15:b8:a8:fe:
                    ce:fa:64:ba:31:8e:5d:e8:2b:28:87:0b:fa:3a:6e:
                    60:ee:a5:1c:cc:04:5c:85:fb:c8:7f:59:7d:af:df:
                    63:e2:69:50:7f:33:58:58:9f:fc:86:7c:43:f8:49:
                    38:82:54:b5:43:d0:27:78:5e:5b:82:39:a7:d6:fb:
                    81:53:10:32:5f:43:b7:d3:15:8b:87:97:6a:89:c5:
                    9a:cf:ab:f4:e7:ab:02:81:65:a5:87:f1:42:bd:79:
                    ad:5a:22:06:a6:c1:98:d9:f9:17:a1:ad:ca:6c:09:
                    78:48:17:91:b4:4e:cd:3e:7d:fe:58:c1:9c:b5:a4:
                    82:da:92:58:5d:06:10:4c:09:e5:fe:05:c9:07:f8:
                    f9:f2:90:06:e6:60:fa:26:33:25:db:6a:41:c9:56:
                    14:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:71:00:44:9A:79:B6:A9:EA:6C:23:9A:EB:EB:21:E1:01:CF:0D:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/13539442-a710-3e8e-a6c4-2bcc5a412d50.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.205.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:51:48:63:cb:26:9c:15:56:e5:ab:09:98:50:52:34:36:ac:
         2c:3b:3f:d2:13:e6:d9:e7:87:c6:06:05:77:c2:a1:3f:64:cd:
         bd:69:f0:fd:11:f1:0f:62:d9:0c:6e:4c:06:d3:fc:f9:fa:e5:
         59:cc:b0:d0:44:b9:77:17:48:24:f1:53:2d:af:bd:ca:2b:7d:
         9e:ef:67:85:9b:2f:77:3a:4b:7a:29:fb:ba:90:05:c9:cd:7a:
         1a:76:da:17:5a:c6:ed:2c:c6:74:98:9f:bb:4e:ff:d1:52:57:
         4a:eb:7a:c8:2d:52:61:0b:87:26:3d:6d:a1:7a:18:36:00:56:
         18:26:77:33:d9:8b:98:b4:51:06:c1:ec:23:a2:65:96:2a:01:
         ab:a1:95:ec:b5:69:6c:cf:d9:a6:4b:45:80:b1:46:49:f3:0e:
         39:d5:ea:7c:0f:0f:14:dc:50:67:da:ce:32:9a:52:cc:83:45:
         78:64:75:70:a2:8e:dd:8f:3b:8c:9d:5b:c9:1b:6e:f4:b2:4c:
         b0:8a:ea:a5:60:41:d4:e4:2b:bd:fe:fe:55:8d:6e:aa:71:60:
         cc:0f:fd:0a:1e:5e:1f:cf:ee:bf:fe:47:cb:5d:c5:0a:61:59:
         45:2d:7f:dd:87:01:96:0a:8c:d1:50:4f:8a:5f:14:73:40:95:
         be:f3:6c:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 20:21:08 2024 by rpki-client on console-ams.rpki-client.org