Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/476bd808-22ee-3fb9-a672-04b849f47ec4.roa
File:                     476bd808-22ee-3fb9-a672-04b849f47ec4.roa (raw, json)
Hash identifier:          ksUeCqPEBS6jYJepAMpHpCVjDuB7jRYsr2aiT9sLmnc=
Subject key identifier:   C3:DF:49:36:CA:33:9B:25:61:80:60:4D:A6:82:36:96:4F:29:35:E5
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285848CB1662A9593B0509C9DB3AF8
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/476bd808-22ee-3fb9-a672-04b849f47ec4.roa
Signing time:             Thu 06 Feb 2025 14:00:52 +0000
ROA not before:           Thu 06 Feb 2025 14:00:52 +0000
ROA not after:            Wed 07 May 2025 13:00:52 +0000
asID:                     20068
IP address blocks:        108.165.135.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 09 Feb 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:cb:16:62:a9:59:3b:05:09:c9:db:3a:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Feb  6 14:00:52 2025 GMT
            Not After : May  7 13:00:52 2025 GMT
        Subject: CN=6cfd346b-2005-4415-8ae3-f3e2dab17e59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:b1:ee:7b:f6:05:51:29:f7:c5:3d:04:a4:a9:
                    b0:bc:f6:ce:01:31:58:d5:52:f8:21:7e:53:98:0a:
                    59:b2:dc:91:d4:8a:75:2b:f1:ff:3e:c0:59:2b:8b:
                    53:60:c6:52:dd:55:62:59:42:cd:06:d9:ee:6f:8e:
                    38:98:aa:60:6e:02:a6:c6:27:11:d5:ba:69:26:ce:
                    71:e4:6e:4e:3e:19:ad:8f:45:db:80:e2:0d:95:cb:
                    33:66:64:bb:85:b9:3e:ef:52:b4:ba:cc:73:19:fd:
                    d9:8a:b3:b4:50:dc:ac:6f:61:69:d2:90:b9:12:7e:
                    99:d7:5c:e4:39:e6:00:6a:77:3f:40:5c:a6:93:98:
                    ba:03:54:46:1e:da:80:6b:74:10:81:c5:84:f1:c5:
                    1c:30:f7:9e:d0:db:31:02:06:41:3a:01:be:81:0f:
                    46:4c:d8:fb:0a:e6:9d:2f:57:c3:7c:a1:e0:73:a9:
                    92:d5:53:51:5b:62:a1:f7:e0:65:0b:74:a2:a9:c2:
                    df:33:27:21:45:62:26:e2:cc:09:65:8d:c4:59:36:
                    2c:4d:21:a1:21:1d:20:ab:ba:3e:79:11:bc:45:bb:
                    73:70:f8:cb:24:8d:04:c8:a2:26:61:7b:0e:02:fb:
                    ba:b4:a1:ce:2a:70:3b:72:34:8c:65:76:43:05:42:
                    a0:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:DF:49:36:CA:33:9B:25:61:80:60:4D:A6:82:36:96:4F:29:35:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/476bd808-22ee-3fb9-a672-04b849f47ec4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.135.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:21:25:dc:1e:6c:0f:04:e6:70:8a:77:2c:6c:47:ff:0a:df:
         71:9c:86:e8:e5:56:5b:c5:ea:6d:96:ed:0a:b5:78:d9:38:f4:
         db:f1:c2:cc:86:61:b1:c2:e3:cd:f2:4a:4b:14:a8:fd:6c:2e:
         e4:01:80:d4:db:f7:c1:9b:df:c2:16:bd:67:38:0a:76:31:d1:
         78:20:e2:a3:1d:06:4c:3e:fe:fb:16:6f:00:7a:69:d0:12:a6:
         9c:3b:77:38:98:ac:85:ed:18:95:37:db:b6:e0:3c:50:33:40:
         c0:c6:82:45:50:41:2b:14:c6:26:9f:bb:b1:ab:84:26:16:a2:
         41:4f:35:5b:fb:1e:e8:0d:55:f0:73:18:14:f6:cd:bb:49:b4:
         11:56:e4:c5:fd:1d:ef:82:e2:1f:5e:5e:05:30:6f:89:cb:28:
         68:ad:ea:2d:a5:ea:75:4f:f5:79:dd:d9:53:54:2e:42:34:21:
         a9:b1:26:ed:ff:6b:79:42:55:61:36:a5:19:95:82:de:f9:50:
         cb:ba:83:61:d6:34:85:e8:8e:3b:bf:a7:7b:9b:f7:35:76:79:
         a9:f5:86:66:4c:c4:b7:18:be:55:13:10:3f:14:18:cd:86:f8:
         cd:fc:58:c7:c1:06:c2:4b:e5:6d:45:49:27:f2:18:b8:6d:23:
         62:37:d1:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 7 11:24:44 2025 by rpki-client