Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/1d877079-3a76-3faa-befa-a9fb6ba4b2f2.roa
File:                     1d877079-3a76-3faa-befa-a9fb6ba4b2f2.roa (raw, json)
Hash identifier:          EK9n55AkxjkW1a2d1dDvF4ZADMkVvY06VqVs6XGgbT8=
Subject key identifier:   68:D1:F4:19:BF:78:5A:0B:93:22:58:93:C6:E0:41:2A:14:FA:81:69
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584769D0E80D16187B57B31A8840
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/1d877079-3a76-3faa-befa-a9fb6ba4b2f2.roa
Signing time:             Thu 03 Oct 2024 01:00:31 +0000
ROA not before:           Thu 03 Oct 2024 01:00:31 +0000
ROA not after:            Wed 01 Jan 2025 02:00:31 +0000
asID:                     22168
IP address blocks:        108.165.44.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:69:d0:e8:0d:16:18:7b:57:b3:1a:88:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Oct  3 01:00:31 2024 GMT
            Not After : Jan  1 02:00:31 2025 GMT
        Subject: CN=03f8d55b-b1aa-4434-8f18-c543c86810e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:8e:c8:a6:f0:5b:73:b6:f0:7e:8a:ef:da:d9:
                    d8:54:06:78:ab:e9:20:79:ec:87:c5:ba:dd:eb:f9:
                    65:23:03:64:75:03:83:4c:76:8e:69:ff:62:81:ef:
                    62:6c:b1:48:7b:01:3f:95:83:a5:08:0a:a6:c1:7b:
                    ff:80:85:42:11:31:df:9c:cf:da:e5:fc:db:24:7e:
                    b1:cd:7a:82:3f:68:34:9c:74:23:f3:16:37:b1:cc:
                    ea:e4:da:f6:4f:e7:f0:b7:6e:89:68:7f:0e:8b:c5:
                    42:d4:50:13:ec:d2:30:b5:a2:c9:22:51:40:ff:d2:
                    39:e2:f4:f2:98:54:36:3f:16:b7:44:13:44:0b:78:
                    7d:eb:86:b5:92:75:1b:97:60:55:a1:83:32:79:4b:
                    90:fb:27:64:57:96:bc:c0:fb:10:41:c4:86:59:c9:
                    3a:6e:91:0b:2c:14:87:31:6f:ad:26:11:7a:72:7b:
                    26:7c:66:fc:c3:37:0f:b8:0e:ca:47:0e:15:05:c4:
                    2c:34:ff:be:db:ca:f6:33:16:a7:03:69:b8:49:64:
                    bf:56:d9:cf:02:51:45:01:e9:f6:a5:b5:94:9a:2f:
                    60:dd:06:82:1c:31:01:40:6a:fb:c3:6f:55:89:56:
                    1f:c6:27:11:b4:09:ac:2b:c2:24:37:49:34:38:38:
                    87:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:D1:F4:19:BF:78:5A:0B:93:22:58:93:C6:E0:41:2A:14:FA:81:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/1d877079-3a76-3faa-befa-a9fb6ba4b2f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.44.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:91:98:02:1a:d0:4e:7e:ee:b1:f9:92:85:f2:f1:6f:e9:d3:
         55:68:51:a5:c7:68:ad:0b:32:8b:8b:d6:bc:75:86:ef:9e:5d:
         fc:86:70:6e:b9:c6:df:aa:9a:ef:5d:f0:19:ff:8f:f4:11:fa:
         9e:e1:33:0b:53:ee:8a:b1:b3:11:d8:6f:26:bb:e9:24:08:e1:
         63:31:15:0d:c2:53:06:c0:5b:51:c0:b9:1c:88:e6:6f:ed:6c:
         a2:d3:67:23:6a:8b:4f:4f:fc:01:a4:d1:79:1f:15:d6:b8:cf:
         54:0f:7f:f0:bd:86:fc:e3:0a:3b:fa:89:47:5d:c0:85:d5:30:
         d2:09:ce:b2:6a:35:9d:ba:8b:f0:df:e3:a8:e1:22:0e:93:d6:
         2f:4d:37:1e:30:70:6a:23:30:8f:97:68:38:39:e5:45:df:33:
         77:f0:3f:b3:4e:49:34:2c:4b:a6:70:3a:d0:cd:c6:15:90:59:
         ca:5d:87:78:d1:9d:51:b3:7d:7e:e6:de:c1:bd:7b:cd:35:fa:
         2d:5c:bd:96:84:b5:0f:21:f8:2b:f9:ae:84:e3:27:71:4c:2d:
         70:f9:d8:0d:30:67:24:6e:d6:55:31:44:93:b7:70:9f:da:31:
         16:1b:33:00:f2:d6:fb:89:34:42:30:82:87:28:14:b3:2c:c1:
         9f:2a:d3:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:41:45 2024 by rpki-client on console-ams.rpki-client.org