Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/42e5af0b-d77e-300d-8f28-7eeb84be08d4.roa
File:                     42e5af0b-d77e-300d-8f28-7eeb84be08d4.roa (raw, json)
Hash identifier:          G3cMvD6d21X4v8BHVHuXZf3M7riVzvVcnBXI5bZ3zCE=
Subject key identifier:   45:06:02:9E:6D:C7:E3:5D:68:DE:57:0C:4C:72:2B:27:26:3F:1B:05
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584746EB5B328176920B24148CE0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/42e5af0b-d77e-300d-8f28-7eeb84be08d4.roa
Signing time:             Fri 20 Sep 2024 13:00:42 +0000
ROA not before:           Fri 20 Sep 2024 13:00:42 +0000
ROA not after:            Thu 19 Dec 2024 14:00:42 +0000
asID:                     212335
IP address blocks:        108.165.35.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:46:eb:5b:32:81:76:92:0b:24:14:8c:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Sep 20 13:00:42 2024 GMT
            Not After : Dec 19 14:00:42 2024 GMT
        Subject: CN=f5893112-216f-4c4b-a872-c384d8bbf478
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:6e:dc:52:bb:3d:8d:c1:92:c8:7e:57:06:46:
                    6c:a7:e9:f7:c1:cd:21:fc:d3:45:b8:e7:b6:27:c8:
                    42:78:48:7e:92:e0:34:5e:c3:bf:0a:43:29:03:b6:
                    5e:71:de:1f:06:f5:42:72:0c:da:af:38:68:e1:50:
                    96:82:be:6d:bd:5d:ce:1c:c0:35:cd:94:ea:27:6f:
                    8f:e7:3c:3e:2a:36:80:ed:b6:7c:7d:06:13:64:ae:
                    98:37:ae:21:02:35:dd:7c:1a:d9:6c:1d:90:07:91:
                    66:f3:51:78:9d:5c:93:a8:09:3d:db:b0:de:a4:77:
                    50:d6:00:85:d1:b6:0a:a0:37:16:fc:ff:46:40:ba:
                    63:b6:c5:32:bc:80:0c:1e:43:7c:f1:49:5b:ad:a4:
                    bf:3e:7b:9c:e5:9f:56:d9:63:d0:70:fd:96:09:d2:
                    94:6a:0a:ed:8f:47:80:22:67:d3:61:19:1f:0b:44:
                    b0:cc:60:5e:77:f2:8e:06:90:91:dc:43:0b:5f:b6:
                    b2:dc:fe:ff:93:13:91:3e:4c:1f:c1:08:fc:5c:60:
                    e4:24:de:50:55:48:e4:59:f9:1f:ff:d4:dc:ea:91:
                    c1:55:3b:ea:d6:b3:47:bb:77:29:f3:d8:91:9a:b9:
                    37:39:38:a4:49:1e:d8:f7:e4:b5:7f:dd:91:bc:fa:
                    b7:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:06:02:9E:6D:C7:E3:5D:68:DE:57:0C:4C:72:2B:27:26:3F:1B:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/42e5af0b-d77e-300d-8f28-7eeb84be08d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.35.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:39:1d:6e:9e:52:bd:d0:a5:dc:24:1a:b8:ef:51:d8:80:63:
         4f:4e:de:be:75:0b:66:89:eb:3e:a5:87:73:17:c6:4b:e2:25:
         8b:e3:5f:ca:7e:e3:e7:57:73:63:d1:08:9b:1e:e8:85:20:c0:
         f0:51:cd:7f:19:1e:02:5c:63:55:04:92:c2:80:29:43:1a:c7:
         a5:db:af:98:94:25:85:95:a8:a1:f7:71:be:42:2a:97:93:d0:
         fb:6e:19:fb:d4:6f:b6:af:af:bd:6c:66:0e:7a:18:f2:3a:aa:
         e4:f2:3f:15:00:d0:d0:e0:49:7c:2f:38:4b:18:8d:51:e3:2e:
         e9:97:ed:12:8a:b5:57:c1:dc:e9:37:79:73:c6:01:dc:70:df:
         85:07:5e:8a:9c:d9:1f:df:2f:9e:bd:c7:92:0b:52:4f:27:d8:
         27:a8:b7:c8:f9:93:05:b1:50:1b:93:bd:ab:64:c9:66:fa:a6:
         e2:2f:64:b7:94:98:b6:6d:6e:76:fd:ce:87:84:f4:70:d5:b3:
         6f:86:e6:10:e8:9c:a5:14:1f:55:6c:28:8a:ec:00:bc:c0:78:
         b5:93:bd:71:ad:72:6a:34:f0:80:06:a6:69:3d:55:12:33:04:
         e9:95:76:ec:1d:33:94:52:03:44:f5:05:30:d0:06:34:91:f8:
         40:ae:18:d7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdG61sygXaSCyQUjOAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI0MDkyMDEzMDA0MloXDTI0MTIxOTE0MDA0MlowLzEtMCsGA1UEAxMk
ZjU4OTMxMTItMjE2Zi00YzRiLWE4NzItYzM4NGQ4YmJmNDc4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApG7cUrs9jcGSyH5XBkZsp+n3wc0h/NNFuOe2
J8hCeEh+kuA0XsO/CkMpA7Zecd4fBvVCcgzarzho4VCWgr5tvV3OHMA1zZTqJ2+P
5zw+KjaA7bZ8fQYTZK6YN64hAjXdfBrZbB2QB5Fm81F4nVyTqAk927DepHdQ1gCF
0bYKoDcW/P9GQLpjtsUyvIAMHkN88UlbraS/Pnuc5Z9W2WPQcP2WCdKUagrtj0eA
ImfTYRkfC0SwzGBed/KOBpCR3EMLX7ay3P7/kxORPkwfwQj8XGDkJN5QVUjkWfkf
/9Tc6pHBVTvq1rNHu3cp89iRmrk3OTikSR7Y9+S1f92RvPq30wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEUGAp5tx+NdaN5XDExyKycmPxsFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvNDJlNWFmMGItZDc3ZS0z
MDBkLThmMjgtN2VlYjg0YmUwOGQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKUjMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFk5HW6eUr3QpdwkGrjvUdiAY09O3r51C2aJ6z6lh3MXxkviJYvjX8p+
4+dXc2PRCJse6IUgwPBRzX8ZHgJcY1UEksKAKUMax6Xbr5iUJYWVqKH3cb5CKpeT
0PtuGfvUb7avr71sZg56GPI6quTyPxUA0NDgSXwvOEsYjVHjLumX7RKKtVfB3Ok3
eXPGAdxw34UHXoqc2R/fL569x5ILUk8n2Ceot8j5kwWxUBuTvatkyWb6puIvZLeU
mLZtbnb9zoeE9HDVs2+G5hDonKUUH1VsKIrsALzAeLWTvXGtcmo08IAGpmk9VRIz
BOmVduwdM5RSA0T1BTDQBjSR+ECuGNc=
-----END CERTIFICATE-----
Generated at Fri Nov 22 05:50:18 2024 by rpki-client on console-fra.rpki-client.org