Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2e32ca48-574e-3f1b-81a7-cab1d7fa534e.roa
File:                     2e32ca48-574e-3f1b-81a7-cab1d7fa534e.roa (raw, json)
Hash identifier:          n7WAhwla+O85OAcSSUnPfGa9Q+rLdhS60uqhF1+XIic=
Subject key identifier:   36:6A:D5:5C:A4:5F:FB:6E:71:D9:12:3C:CD:60:C8:17:BB:A3:17:2D
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285847CA3F8714B7306D094F3F3D00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2e32ca48-574e-3f1b-81a7-cab1d7fa534e.roa
Signing time:             Wed 06 Nov 2024 14:00:41 +0000
ROA not before:           Wed 06 Nov 2024 14:00:41 +0000
ROA not after:            Tue 04 Feb 2025 14:00:41 +0000
asID:                     21859
IP address blocks:        108.165.198.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ca:3f:87:14:b7:30:6d:09:4f:3f:3d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Nov  6 14:00:41 2024 GMT
            Not After : Feb  4 14:00:41 2025 GMT
        Subject: CN=c340d041-c021-4428-aad7-6f5a58950b72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:ec:01:13:79:f6:28:e1:74:10:26:83:d9:bf:
                    cc:a7:a4:a7:83:87:d2:55:4f:58:ab:ae:c3:c7:ff:
                    d9:d2:38:8b:64:9e:9b:f9:bb:83:42:63:41:65:bf:
                    86:4a:c4:8a:13:78:bc:9e:21:b7:03:59:57:d2:a2:
                    bf:ac:b4:f0:ca:6d:62:c5:d6:ca:a7:47:e3:6b:8f:
                    5d:d0:57:90:1d:90:02:2f:0d:de:73:f5:65:44:bb:
                    69:19:e0:4e:da:4c:f6:32:ec:e3:dc:31:99:15:75:
                    38:3c:f9:d4:74:0b:02:5b:92:bb:a4:1a:41:16:d2:
                    33:44:07:1c:24:09:39:b9:35:cd:6c:67:f2:65:2f:
                    ba:50:ba:5d:b7:c4:32:e6:cd:04:44:4c:46:6b:4f:
                    cc:19:5a:03:71:97:c0:18:db:a4:05:0a:e2:d0:7a:
                    b3:4f:3b:62:45:00:02:e4:61:61:4f:f3:2e:59:5e:
                    ed:f3:aa:a2:5d:ad:96:ef:88:2f:d8:ab:d6:6c:fc:
                    05:44:5a:9b:f1:5a:58:c1:7c:5b:56:d3:6c:10:48:
                    40:d0:66:46:0f:e8:e5:80:eb:8f:c5:7b:03:94:b1:
                    97:62:3f:ea:21:19:63:6b:f9:75:c5:c5:a3:23:04:
                    55:ed:03:4d:2a:5f:03:ed:18:61:fa:bc:f5:45:58:
                    3c:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:6A:D5:5C:A4:5F:FB:6E:71:D9:12:3C:CD:60:C8:17:BB:A3:17:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2e32ca48-574e-3f1b-81a7-cab1d7fa534e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.198.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:0a:5e:6d:30:3f:7e:90:b6:ab:b1:84:e9:88:9b:e4:ed:3b:
         dc:1d:a8:4d:ac:97:75:7c:63:c5:b6:a7:e4:b9:49:5f:f4:c6:
         4c:37:84:a0:ac:64:df:36:c3:ed:3d:21:13:84:42:64:7a:9e:
         c0:d0:0c:6f:59:03:ac:ca:bd:f0:6b:ff:fe:84:9c:cd:5a:80:
         14:75:07:b7:6c:a2:ae:01:09:28:ec:64:71:00:76:0a:99:f9:
         44:d8:9b:e6:d3:f9:ff:e4:bb:5e:8a:28:93:ed:8a:a5:32:8a:
         8b:cf:4f:97:7a:07:8c:2a:ae:e6:84:72:2e:91:7c:95:41:a6:
         8a:48:36:b0:83:74:5d:dc:6e:c7:56:53:f4:ff:ac:05:b8:6d:
         82:d7:18:ee:93:34:65:ef:3f:2a:cf:5b:0e:8d:8d:d2:46:5c:
         90:68:e7:56:40:5d:0a:0c:ff:4e:63:13:12:a3:66:22:58:5f:
         9d:f0:0f:a5:38:0e:e9:19:a9:00:6e:d6:67:d6:01:3f:72:a7:
         76:d9:34:50:ae:8d:43:f6:fe:2b:36:9c:a0:92:bf:4f:57:ed:
         df:cb:72:be:09:23:e5:e7:da:d1:5b:97:53:33:18:38:8f:e9:
         91:f7:cb:e8:f7:97:8e:36:d6:00:63:81:6d:ea:69:bf:c1:d5:
         6b:a7:23:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:15:33 2024 by rpki-client on console-fra.rpki-client.org