Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/32ece056-7ecc-3bea-a3dd-f0cbdc0752c3.roa
File:                     32ece056-7ecc-3bea-a3dd-f0cbdc0752c3.roa (raw, json)
Hash identifier:          6rsJhvY55wB8WMwZEQtrBKnDyU3nBxl5z+1BCfVRkOI=
Subject key identifier:   33:5F:11:10:D9:F8:D9:8C:AA:75:ED:79:76:C3:97:ED:D7:B6:DD:12
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F432858481310F0FE47993C7028E9C200
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/32ece056-7ecc-3bea-a3dd-f0cbdc0752c3.roa
Signing time:             Mon 02 Dec 2024 16:01:23 +0000
ROA not before:           Mon 02 Dec 2024 16:01:23 +0000
ROA not after:            Sun 02 Mar 2025 16:01:23 +0000
asID:                     401152
IP address blocks:        108.165.177.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 07 Feb 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:13:10:f0:fe:47:99:3c:70:28:e9:c2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Dec  2 16:01:23 2024 GMT
            Not After : Mar  2 16:01:23 2025 GMT
        Subject: CN=05b59c42-6429-4cc8-b8f5-5f0a8a61374a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:ab:82:25:9c:f9:df:79:09:8d:37:28:5e:91:
                    e1:f2:8d:1c:3c:31:44:9c:49:c1:6f:b4:cb:98:2a:
                    c9:22:67:f6:b9:62:9a:3a:b4:63:a6:e5:c5:ef:dd:
                    0b:6c:e1:f3:9a:40:ff:39:a3:72:10:45:97:f5:44:
                    d6:67:f9:11:3e:ba:65:3b:86:31:3b:21:ff:ab:b7:
                    90:fc:33:f0:ac:78:a4:ef:e6:a7:73:ee:2b:8b:cf:
                    dd:e5:2d:5c:f2:7c:f1:84:57:ba:ee:df:e1:61:e1:
                    fa:e7:f4:1b:d9:63:83:da:f7:7a:64:81:14:d9:66:
                    65:a5:b2:5a:33:55:b5:6b:4a:bc:12:4b:dc:3f:f6:
                    41:56:d4:4e:1a:e2:ba:a1:64:35:67:0f:6b:11:2e:
                    78:ff:4b:6a:3e:95:e1:44:1b:4f:ff:bf:bb:43:f2:
                    c7:5f:6e:57:06:39:b4:26:1c:7c:9e:7f:ac:dd:17:
                    a9:74:02:73:98:0f:12:95:c3:0c:3e:d8:02:c7:3c:
                    76:d2:4a:99:54:7c:2e:f2:b3:f3:8e:71:01:93:c3:
                    19:7d:e3:4d:81:0d:6b:71:2b:bb:f4:d2:17:d4:7a:
                    16:a4:60:4e:f8:bf:25:e8:0d:3a:f9:58:bd:84:c7:
                    3c:6c:26:f6:b8:b5:b3:99:e5:27:75:5e:31:fc:ff:
                    27:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:5F:11:10:D9:F8:D9:8C:AA:75:ED:79:76:C3:97:ED:D7:B6:DD:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/32ece056-7ecc-3bea-a3dd-f0cbdc0752c3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.177.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:96:02:1b:21:d4:fe:20:b0:c0:c1:43:61:0b:9f:98:dc:61:
         97:a7:3c:63:4b:24:4e:97:44:c1:4d:64:1b:c5:e4:64:1b:2e:
         28:5a:4e:b7:18:b0:f8:76:c3:c7:1a:8e:0b:e1:37:a5:d1:d2:
         52:1b:40:e6:7e:9a:d2:e7:2c:bc:b3:9f:82:86:bd:e4:ca:9b:
         18:af:fe:68:e2:b9:0e:35:45:e0:e3:ec:b1:54:d7:09:5e:ad:
         5e:5d:de:35:50:9b:a2:15:1f:3b:64:0f:07:5b:12:99:71:8b:
         f3:25:66:89:af:41:dd:a2:60:39:a5:cc:9e:81:78:c4:35:d5:
         b4:17:fb:e7:35:be:12:86:67:b5:52:b4:6c:00:ae:e9:61:fc:
         9a:a9:ec:88:d3:78:1c:10:78:95:ad:f3:b2:4c:dd:cc:c0:41:
         d2:af:79:2d:26:41:3b:90:b5:f2:3f:bc:a1:24:74:f0:30:40:
         ec:66:e5:f2:5b:75:e7:91:6d:0f:c7:5d:3e:5b:b7:da:18:c4:
         8e:de:80:f2:0f:39:f2:7d:7f:aa:9b:54:c5:dc:e8:a6:90:3b:
         22:c2:58:50:01:ed:f0:1e:cc:de:c2:64:43:a6:3e:bc:09:8a:
         a0:a6:b1:a9:ef:28:93:b9:54:0d:52:74:09:b4:0a:94:f1:bd:
         88:67:d8:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:50:01 2025 by rpki-client