Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2c1b693b-a133-3cab-9b5d-c979a05ad6c5.roa
File:                     2c1b693b-a133-3cab-9b5d-c979a05ad6c5.roa (raw, json)
Hash identifier:          9oIIwnNZCNDBWCWKoe7Ka2XRcDQc425wiIWWkjhquV0=
Subject key identifier:   F6:E9:14:19:79:5B:3C:82:E7:14:2B:57:DB:44:9A:B4:AA:D7:72:4C
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285848A9962E9D8999761ACD816540
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2c1b693b-a133-3cab-9b5d-c979a05ad6c5.roa
Signing time:             Sat 25 Jan 2025 14:00:52 +0000
ROA not before:           Sat 25 Jan 2025 14:00:52 +0000
ROA not after:            Fri 25 Apr 2025 13:00:52 +0000
asID:                     21859
IP address blocks:        108.165.98.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 19 Feb 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a9:96:2e:9d:89:99:76:1a:cd:81:65:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jan 25 14:00:52 2025 GMT
            Not After : Apr 25 13:00:52 2025 GMT
        Subject: CN=c49ecc2c-614a-4ef8-a2e0-979d34831928
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:a1:a3:68:c6:6b:5f:0b:47:61:53:39:5d:be:
                    8c:93:3e:6d:5a:f4:32:ae:63:3f:bf:c4:d3:b0:ea:
                    47:b6:85:f5:be:b8:c7:54:e5:ba:32:17:9b:18:60:
                    bc:3f:c3:6b:c4:f0:29:91:c6:06:4a:d1:61:2c:47:
                    c5:6f:50:06:d7:09:a2:c6:2c:40:9b:3c:0e:c9:23:
                    9b:7f:b7:9f:3b:ae:d8:cd:3b:14:df:f5:91:f4:43:
                    5e:f4:51:60:1d:f9:66:23:ab:cf:e1:32:99:2b:70:
                    fd:f6:3d:70:1e:6a:e9:15:3e:df:16:8c:12:db:aa:
                    b6:fa:80:a9:8f:6e:03:bd:ee:b4:be:fc:d9:1e:6e:
                    c2:33:65:31:8b:8b:b4:8e:49:c6:b5:b1:31:35:76:
                    c4:1e:4f:5e:ec:22:d9:f5:01:fd:ea:4a:ba:9f:57:
                    f8:18:6b:1b:d9:64:db:f6:81:f0:d1:93:f7:a3:b1:
                    2e:9a:7b:3e:ba:5c:5a:14:5f:ce:ff:24:8e:b2:a5:
                    6b:50:39:31:85:c9:94:a2:1b:33:54:f4:d9:af:ed:
                    67:9c:ba:9f:be:e0:34:a0:f0:52:0c:95:25:ff:1b:
                    d1:96:d4:04:8e:6f:44:8e:c3:cc:93:9c:ac:b9:d4:
                    63:01:dc:b8:52:96:c5:be:50:a3:b0:46:7e:7d:e7:
                    59:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:E9:14:19:79:5B:3C:82:E7:14:2B:57:DB:44:9A:B4:AA:D7:72:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2c1b693b-a133-3cab-9b5d-c979a05ad6c5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.98.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:39:f5:16:9a:61:fe:61:f1:43:ec:64:8b:bf:8c:dd:24:60:
         32:57:15:5a:85:8b:3a:7a:4d:36:da:f5:a0:47:09:ea:a1:d6:
         0c:e6:dd:bb:13:99:18:a1:bb:e5:03:5c:fd:14:10:34:b4:30:
         7a:30:7a:e7:7a:53:c1:a9:25:15:c8:f4:1b:60:9c:cc:43:30:
         b2:2c:af:1e:ff:a1:41:96:f6:57:51:a9:70:01:3c:39:44:75:
         4b:bc:e3:c4:9c:fa:58:97:d1:62:d5:4d:c4:91:3d:19:ea:56:
         a9:c6:a0:e5:57:f6:0e:8d:fb:0d:62:b0:91:6b:fa:84:20:cd:
         3f:2d:3b:38:8a:1f:79:0e:f9:60:80:ec:95:33:05:1b:29:e3:
         96:23:e4:06:fb:fa:aa:a4:5a:70:94:88:e3:24:9c:84:aa:ab:
         8e:98:59:31:b8:95:0b:2c:41:94:56:e8:37:20:9b:9c:65:90:
         bf:a0:df:67:46:db:3c:94:5d:e4:f7:25:79:2f:6a:e5:a8:3f:
         c1:a4:49:3e:45:a5:3c:73:e1:57:97:71:d6:9f:ac:69:9a:6b:
         af:04:6a:48:26:96:57:97:6c:97:9c:07:0a:be:9e:99:d4:31:
         ef:8a:cd:e8:25:8b:6a:77:e2:fc:87:90:78:e8:51:c3:45:42:
         06:c9:bb:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:44:10 2025 by rpki-client