Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/401383d9-9785-3012-bf67-2d148788aff4.roa
File:                     401383d9-9785-3012-bf67-2d148788aff4.roa (raw, json)
Hash identifier:          3rEDhdkb+lSvHK43lyj2aVPSX3OaUQ05UbdMBa+exsk=
Subject key identifier:   DE:73:6F:A2:F8:9F:37:14:A3:D1:1E:C5:51:A6:52:11:AC:5B:FB:D9
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584746EB5AE58D52421DC1DB8E80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/401383d9-9785-3012-bf67-2d148788aff4.roa
Signing time:             Fri 20 Sep 2024 13:00:42 +0000
ROA not before:           Fri 20 Sep 2024 13:00:42 +0000
ROA not after:            Thu 19 Dec 2024 14:00:42 +0000
asID:                     210356
IP address blocks:        108.165.179.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:46:eb:5a:e5:8d:52:42:1d:c1:db:8e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Sep 20 13:00:42 2024 GMT
            Not After : Dec 19 14:00:42 2024 GMT
        Subject: CN=81e0a087-06b7-461e-bd56-f4c4494259f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:17:9a:93:da:49:88:d4:3c:61:f9:9d:0b:0c:
                    80:30:bc:57:2c:79:ed:a0:b8:04:0f:b3:e6:a9:17:
                    0c:b7:d0:6a:d9:f9:32:3a:f6:22:7e:d3:16:c3:74:
                    54:88:5c:a0:77:9c:05:7a:0d:40:db:a2:c0:13:6b:
                    bf:72:e7:9e:5e:3f:a8:8c:cf:02:19:0b:a7:ee:1f:
                    f1:d0:04:2d:be:1c:63:75:da:e0:6a:17:cb:6e:db:
                    1c:87:d1:48:37:9b:ab:39:db:27:28:fc:de:4f:46:
                    9e:25:e9:7e:52:c3:3a:f3:99:d6:ad:88:54:91:df:
                    46:0f:e4:53:96:e1:ad:48:af:66:b9:48:48:8f:ec:
                    61:72:c0:4a:1c:e8:5c:f8:ea:af:ce:26:dd:8f:a4:
                    ab:ad:1a:6a:2b:82:6c:20:b1:17:6b:02:11:e3:99:
                    10:dd:40:36:b0:66:58:d6:d3:8c:a5:12:1a:11:30:
                    12:81:05:a5:e9:df:1e:9b:82:a4:ad:d0:0f:21:23:
                    9d:17:79:f7:28:6f:de:98:d0:b9:02:8e:0a:fa:9e:
                    a9:9c:d1:73:98:b5:31:18:65:c7:72:71:7e:64:e8:
                    c5:06:f3:a4:99:c5:9a:99:f3:ba:0f:c2:14:b6:d4:
                    f5:cc:ec:f4:85:9b:e1:1e:65:52:ca:24:3f:89:43:
                    89:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:73:6F:A2:F8:9F:37:14:A3:D1:1E:C5:51:A6:52:11:AC:5B:FB:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/401383d9-9785-3012-bf67-2d148788aff4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.179.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:0f:e8:3e:ed:91:38:90:30:38:ba:2f:f7:72:d7:a6:54:b4:
         d6:1a:57:32:97:6d:42:5b:34:15:43:13:b3:84:b8:9c:78:90:
         40:dd:51:68:ba:de:a7:0a:b7:69:76:1d:5a:5e:92:06:da:64:
         86:f2:71:5c:d1:8a:92:69:62:3a:db:03:75:98:4e:0f:31:0f:
         73:18:bf:15:f8:3a:72:64:5c:43:50:04:a8:d7:fc:53:b0:5a:
         56:09:db:da:4c:a8:c6:41:bb:ed:46:51:f6:1f:33:a5:fd:c5:
         d2:22:47:37:57:4b:b6:df:47:34:6b:7e:2b:03:c3:b0:72:3e:
         5e:78:85:de:ef:67:b3:e4:84:f9:aa:e8:ef:3b:a5:a2:b6:0e:
         e5:7f:a5:b0:02:e1:a0:55:bb:9c:d8:fb:a1:2a:ba:31:d1:2f:
         8f:b4:80:de:14:6b:d0:66:e5:e2:5a:db:c4:fd:b7:ab:fd:58:
         6f:0d:0a:4f:05:4a:d2:16:be:ad:e9:35:5a:2f:7e:16:c2:21:
         1a:81:bd:9d:cf:3f:6a:22:53:d8:69:3c:2d:31:ee:22:e8:cf:
         bd:a7:f0:9e:a2:fc:de:45:12:b5:22:0c:56:81:18:0f:c2:94:
         6e:c4:f5:62:e0:49:0a:62:bb:18:74:ad:c8:12:5e:d6:24:e5:
         4e:12:0c:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:32:13 2024 by rpki-client on console-fra.rpki-client.org