Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/16ab9708-41a0-3e84-a745-d298063d5abc.roa
File:                     16ab9708-41a0-3e84-a745-d298063d5abc.roa (raw, json)
Hash identifier:          IMbPiwwjRSglgq0EHesK4dCBM/0bA0v0TtujGDJd7/g=
Subject key identifier:   A8:23:17:EE:F2:DA:55:1D:1D:51:08:79:6A:FA:7A:30:02:D9:A5:FE
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F432858471D0B1993B050DEF6E21FFD80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/16ab9708-41a0-3e84-a745-d298063d5abc.roa
Signing time:             Thu 05 Sep 2024 13:00:41 +0000
ROA not before:           Thu 05 Sep 2024 13:00:41 +0000
ROA not after:            Wed 04 Dec 2024 14:00:41 +0000
asID:                     23470
IP address blocks:        108.165.237.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:1d:0b:19:93:b0:50:de:f6:e2:1f:fd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Sep  5 13:00:41 2024 GMT
            Not After : Dec  4 14:00:41 2024 GMT
        Subject: CN=23cbc022-ec7e-4e8b-95b0-2c6ba3e731e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:03:1f:c2:0c:5d:85:09:b9:57:9e:9b:5a:0b:
                    3c:d4:cb:05:6d:1c:60:2b:56:f2:61:04:f5:40:2e:
                    c0:8d:9f:ca:bb:f0:47:57:75:84:35:17:28:86:39:
                    ac:65:f4:d1:ba:04:7d:b4:29:b7:65:ca:2d:f4:c3:
                    47:21:f2:04:9a:00:f9:56:09:a1:6f:5f:6a:4a:dc:
                    d3:6e:6c:4e:2d:b9:5b:47:2e:c1:c6:5a:23:e3:95:
                    94:a6:c8:35:7c:9f:6c:d7:d3:0e:47:e9:27:22:8e:
                    43:68:01:cb:3b:7c:f1:21:62:79:1f:41:23:9c:3f:
                    72:d1:0e:fb:1f:d7:16:ea:18:74:f9:79:da:69:11:
                    18:4a:9c:9a:d9:77:29:75:f9:d7:2c:4f:84:38:8a:
                    71:f4:a0:30:35:67:b4:7f:4b:c0:b1:0f:76:47:18:
                    1f:52:5c:4d:a1:3a:2d:d3:34:1d:5c:14:8e:f9:07:
                    df:e7:68:ff:f0:06:e2:62:39:71:8c:a5:32:97:b8:
                    ee:ce:2f:c1:b3:51:5c:0a:00:70:63:69:32:4f:9a:
                    ab:db:61:b0:5b:31:41:e8:aa:78:8e:d8:07:43:0c:
                    29:a3:8e:43:8b:9b:97:08:7c:ed:ed:da:5a:6b:de:
                    91:42:b2:c8:31:e4:83:76:54:e7:3d:39:b0:e9:2c:
                    d4:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:23:17:EE:F2:DA:55:1D:1D:51:08:79:6A:FA:7A:30:02:D9:A5:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/16ab9708-41a0-3e84-a745-d298063d5abc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.237.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:fe:ce:b1:52:3c:44:34:5f:92:b4:a2:5a:db:1f:7b:30:77:
         15:62:ea:b1:d4:86:0c:e7:df:af:43:c5:2b:dd:4c:8f:a3:41:
         23:6d:a8:02:60:22:b0:96:2e:f6:ae:1e:10:d0:ae:f9:76:b0:
         ab:fc:63:a8:21:53:f2:c2:85:f4:50:2d:27:a2:5e:c8:1d:e3:
         99:48:da:35:cf:6d:b6:d9:12:60:9b:d0:b4:1e:ff:ca:7b:c2:
         1e:94:20:d8:4e:72:e5:58:aa:e9:84:24:40:ec:49:75:74:02:
         cb:06:ad:57:c3:01:a4:24:ec:74:d3:c9:b0:75:e2:cf:35:38:
         fe:bf:5a:35:65:9c:a7:43:64:89:69:e9:99:25:ec:41:39:df:
         83:d6:ec:4d:bb:dc:a2:fe:5f:fc:b9:6f:05:7a:83:27:07:c5:
         7e:4f:26:af:e7:16:75:04:cd:23:b8:1c:2b:11:24:ae:5a:23:
         a3:3a:26:7a:82:33:59:a8:ab:ac:fc:e3:e1:df:b2:01:d5:99:
         94:94:8d:fe:6a:6c:74:ca:76:c1:0c:e5:7a:2f:73:27:13:d7:
         00:e1:00:0f:5a:ca:fc:77:4e:17:78:52:40:05:87:f9:26:5d:
         77:f5:0c:26:c2:1a:0a:66:94:d3:20:d6:d0:29:d1:83:cd:ed:
         ef:a5:18:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:15:31 2024 by rpki-client on console-fra.rpki-client.org