Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/19816533-5a79-36e9-91ab-ba17c3b4ee20.roa
File:                     19816533-5a79-36e9-91ab-ba17c3b4ee20.roa (raw, json)
Hash identifier:          fjPRg4ewWlnZPQ9ldsrvRQUf4utF9Xo6wRK3M28JC6Y=
Subject key identifier:   4C:24:D3:21:46:BC:51:23:9E:35:9A:71:63:71:B3:7A:BE:1F:0E:03
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F432858452C1D476C8777C1DC7B2A19C0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/19816533-5a79-36e9-91ab-ba17c3b4ee20.roa
Signing time:             Mon 11 Mar 2024 13:00:31 +0000
ROA not before:           Mon 11 Mar 2024 13:00:31 +0000
ROA not after:            Sun 09 Jun 2024 13:00:31 +0000
asID:                     21859
IP address blocks:        108.165.116.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:2c:1d:47:6c:87:77:c1:dc:7b:2a:19:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Mar 11 13:00:31 2024 GMT
            Not After : Jun  9 13:00:31 2024 GMT
        Subject: CN=09d6c19b-2fba-47f9-91b7-be261ec37929
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:d9:15:fc:38:1b:00:5a:9e:15:71:2a:97:dc:
                    88:45:c2:39:31:2e:7a:35:b5:4c:24:5e:b7:d7:a7:
                    33:91:12:41:44:50:05:b9:ac:30:7b:f3:d4:66:54:
                    b2:c5:e5:77:b6:cb:e1:95:1d:f0:b3:5f:3d:99:9c:
                    cf:65:48:e5:40:69:84:d0:33:03:3c:df:7a:7b:34:
                    54:db:64:cd:98:a3:42:48:b0:b7:a7:20:fc:e7:54:
                    fe:da:60:61:e9:10:88:2c:8a:e5:74:b1:6c:4f:9c:
                    f7:3e:fc:d2:a3:89:d6:3e:7a:31:1f:16:1e:25:85:
                    49:1a:7b:60:c2:e3:79:b6:79:5c:50:a9:e2:25:57:
                    47:12:14:25:5a:c7:db:5d:62:66:1a:a5:c0:36:32:
                    29:72:34:47:9e:f7:82:d4:4a:4c:fa:b1:9f:01:94:
                    46:7f:83:96:3e:3d:76:e4:c8:03:95:8d:4d:6d:6a:
                    2e:d7:9b:d1:ad:7d:4d:75:bd:f9:e9:b0:76:25:1a:
                    60:fc:7e:28:0a:32:78:9e:f4:6d:6e:6e:12:66:e3:
                    47:b2:ce:36:1b:6f:95:47:bd:a0:65:70:b7:33:ae:
                    ee:e4:cf:a2:f3:59:64:5d:3b:cc:b5:dc:5f:47:7d:
                    29:9d:1b:1b:ea:a2:c7:02:c7:35:f8:66:00:06:85:
                    0a:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:24:D3:21:46:BC:51:23:9E:35:9A:71:63:71:B3:7A:BE:1F:0E:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/19816533-5a79-36e9-91ab-ba17c3b4ee20.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.116.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:28:ce:ef:35:39:bc:c1:42:a9:47:9f:97:97:2a:cf:26:ee:
         41:ad:af:e2:51:3b:47:33:a7:35:02:2a:a8:7f:47:3f:7c:37:
         fd:41:3c:ae:9e:f0:2a:59:bf:7e:38:03:5a:ce:53:1e:91:91:
         28:59:61:65:68:4c:3f:ee:83:32:d5:a0:64:16:94:4a:68:de:
         eb:c4:19:1b:12:d1:0a:0c:25:a5:9b:55:68:26:e1:a0:fa:e0:
         49:ba:b4:b9:2c:71:3b:24:74:3d:33:3b:8a:d9:c0:d2:50:63:
         42:68:6b:80:b7:ac:ab:2f:a4:b9:1d:47:90:8c:5c:e0:8f:1b:
         24:ed:c8:ac:f5:bf:b9:10:c3:04:2a:ee:04:ea:50:30:ba:ef:
         88:26:8e:eb:a5:d1:82:64:0b:b8:0d:f5:7d:f8:3b:a9:e9:00:
         7a:ce:12:c4:23:36:1b:56:00:12:f1:8a:88:26:8e:42:57:a6:
         f7:f1:92:2d:2f:0f:a2:11:71:a1:d8:c8:73:94:b1:3a:70:d7:
         44:f1:1e:98:b0:c0:c1:bb:8d:f1:7d:96:0e:8f:73:99:28:9f:
         ca:01:1b:63:4c:29:fa:57:df:f8:50:0c:6b:ca:e5:2f:b3:16:
         96:72:ad:47:1c:5d:c1:f5:53:ef:6f:1e:ac:f6:aa:a5:a1:16:
         27:ef:f7:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 18:02:34 2024 by rpki-client on console-fra.rpki-client.org