Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/1892106b-0bb9-393f-ade0-d4f42bb2a548.roa
File:                     1892106b-0bb9-393f-ade0-d4f42bb2a548.roa (raw, json)
Hash identifier:          AWjW/RrYYhDkZiXzyuMhePfGistzt+PLOoFChgtorJw=
Subject key identifier:   53:7F:9F:11:5B:C1:F8:B8:68:3F:81:7D:F6:93:1B:A7:CC:9A:45:13
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285845777DCF86B3BA2402D9502F40
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/1892106b-0bb9-393f-ade0-d4f42bb2a548.roa
Signing time:             Sun 07 Apr 2024 13:00:32 +0000
ROA not before:           Sun 07 Apr 2024 13:00:32 +0000
ROA not after:            Sat 06 Jul 2024 13:00:32 +0000
asID:                     174
IP address blocks:        108.165.239.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:77:7d:cf:86:b3:ba:24:02:d9:50:2f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Apr  7 13:00:32 2024 GMT
            Not After : Jul  6 13:00:32 2024 GMT
        Subject: CN=6a935e68-ecd8-447b-b2af-1723b19b5648
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:c2:1b:20:84:c3:82:8b:5b:d0:a9:3d:be:33:
                    69:30:a3:7e:40:a8:05:63:d6:a3:d9:ae:94:67:56:
                    74:aa:3f:a3:93:df:33:5d:a8:c7:96:92:e5:0f:03:
                    11:1b:73:ee:81:9e:e3:0d:d8:c2:99:99:35:3a:e0:
                    9f:d6:3b:d6:10:b2:f9:60:09:5b:eb:3f:38:d6:79:
                    2b:d8:87:1e:11:30:b4:03:c5:9a:8b:47:67:4a:1e:
                    b1:ea:0a:4b:22:2f:5e:4c:1b:96:b9:30:84:d7:10:
                    bd:8e:75:25:f3:06:c7:a0:4b:39:cb:b7:f2:d7:3a:
                    bc:54:e1:69:26:a5:3f:c7:76:8c:70:29:88:98:1b:
                    44:77:10:b8:42:be:c2:e9:43:b5:e6:e7:00:fa:d8:
                    b8:1a:f2:77:c5:98:ea:c1:c0:75:4e:13:f2:da:d9:
                    24:e6:e2:3b:5f:3a:35:df:b9:6e:cb:09:df:e9:6d:
                    c6:c5:81:54:22:82:e5:ae:34:67:fb:ce:14:a1:8a:
                    df:33:35:6d:28:96:9e:27:95:2e:89:2c:63:79:10:
                    44:cf:be:97:43:bf:b1:c6:e1:4e:74:a0:1e:7f:2d:
                    e4:47:48:8c:d1:0e:65:99:e4:1c:18:f8:d4:58:78:
                    02:1d:9d:1d:4f:8b:ec:0b:91:c8:d7:c9:86:11:68:
                    96:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:7F:9F:11:5B:C1:F8:B8:68:3F:81:7D:F6:93:1B:A7:CC:9A:45:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/1892106b-0bb9-393f-ade0-d4f42bb2a548.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.239.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:70:01:c1:ef:c6:0b:b2:f4:c7:a8:a4:7b:ef:4f:78:08:92:
         93:60:3a:df:7b:9f:fb:98:90:1f:5c:c0:46:e7:7a:62:9f:82:
         04:3b:ac:fb:d6:c6:64:c8:ea:dd:9f:eb:f1:44:87:10:68:48:
         d4:40:16:d5:5f:53:d8:4e:f3:41:80:52:a0:42:c2:3c:58:6d:
         77:b1:25:ec:e9:63:cd:4b:71:6b:a9:cc:d2:53:bf:d5:85:aa:
         e3:d6:96:63:79:03:aa:a5:8c:77:05:c1:ae:98:20:09:12:c1:
         ce:1e:0b:e5:93:49:4f:13:db:f6:9f:ec:46:0f:e6:38:4c:a2:
         c9:38:9e:f5:bd:9b:e6:5c:36:df:c4:ce:6a:1f:6c:bd:ce:d5:
         f0:99:e9:d2:6d:fd:28:dd:c1:e2:12:9b:56:90:a9:6d:8c:7e:
         45:5c:17:25:96:97:de:fe:df:ae:13:54:e6:7e:61:6e:ef:71:
         f9:6d:60:5d:46:5c:95:01:41:01:dc:9f:7c:64:81:eb:ba:61:
         3b:cc:47:91:5e:44:9e:eb:c9:26:03:b4:ae:ed:2a:6d:6b:e4:
         44:23:b5:dc:e3:8b:40:f8:0f:e2:c0:2d:34:fa:1a:3e:a8:dd:
         f7:85:1a:68:1e:69:5f:da:e5:54:e9:13:27:8c:42:8f:45:a9:
         bd:53:27:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 15:28:53 2024 by rpki-client on console-ams.rpki-client.org