Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/4918d1a7-f1ab-34bb-a468-8b0083b2d7ac.roa
File:                     4918d1a7-f1ab-34bb-a468-8b0083b2d7ac.roa (raw, json)
Hash identifier:          emFSLHv8xRFR7bra/Xj+tLF5JdRo70GnslM0PD7AUPw=
Subject key identifier:   17:D4:E0:1F:8F:18:30:56:C2:BE:41:6A:F6:B9:0B:3D:A9:7F:6B:9B
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285847D40493854BCC34BF528C6080
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/4918d1a7-f1ab-34bb-a468-8b0083b2d7ac.roa
Signing time:             Sun 10 Nov 2024 02:00:27 +0000
ROA not before:           Sun 10 Nov 2024 02:00:27 +0000
ROA not after:            Sat 08 Feb 2025 02:00:27 +0000
asID:                     212238
IP address blocks:        108.165.218.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:d4:04:93:85:4b:cc:34:bf:52:8c:60:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Nov 10 02:00:27 2024 GMT
            Not After : Feb  8 02:00:27 2025 GMT
        Subject: CN=909a9356-0e3a-4230-8694-4858e8bc9acb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:19:ac:97:e6:50:83:c7:82:0f:2d:02:4d:8b:
                    fc:e3:b8:6a:79:59:7f:2a:f9:18:2d:c4:10:7e:0e:
                    a4:92:ad:88:f4:6b:bd:94:1c:c7:fc:e8:32:3c:53:
                    52:41:5d:9d:19:a1:2a:9f:9b:dd:13:75:dd:2f:ba:
                    f2:14:14:93:e2:37:7b:a0:e5:62:53:24:04:c1:20:
                    44:97:7e:93:d9:ac:24:c5:a4:70:fc:da:67:39:cf:
                    3d:e9:24:cb:b9:19:49:28:b8:1e:a8:52:13:bb:a3:
                    21:ae:08:6c:e8:48:21:82:ca:b2:0b:18:f8:74:1e:
                    93:5d:f2:2e:db:8b:83:65:1e:7d:0e:c4:25:58:1b:
                    71:57:85:d7:e2:86:a6:8c:1d:c2:a1:01:59:1f:e5:
                    52:3b:60:c4:67:c0:e1:b2:71:00:37:e0:02:9d:01:
                    2c:a0:89:25:74:ed:be:ca:2e:4b:91:ea:54:5c:0a:
                    c0:3a:7d:c7:8b:7e:2e:a7:47:0b:ce:c8:a9:6d:7f:
                    ba:81:94:44:96:d4:fa:11:d2:a0:5e:34:0c:0d:84:
                    e7:1c:46:46:ad:5e:61:eb:3f:dd:c9:fd:0b:65:02:
                    29:f5:79:0e:8d:f8:8e:c2:9c:09:ad:3b:4d:ed:1d:
                    17:1f:5d:0c:53:2f:be:4d:c2:bd:80:1e:73:b6:0d:
                    d4:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:D4:E0:1F:8F:18:30:56:C2:BE:41:6A:F6:B9:0B:3D:A9:7F:6B:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/4918d1a7-f1ab-34bb-a468-8b0083b2d7ac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.218.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:74:dc:36:9e:47:94:35:3b:f2:dc:89:28:6f:0c:bd:75:48:
         d1:ad:50:ac:7c:e3:65:75:f0:04:b7:b9:32:26:36:44:42:72:
         fc:c2:7f:8d:77:ff:f0:bd:87:94:a2:9b:27:0b:f0:b7:07:a4:
         88:82:c7:55:ee:d6:df:4c:a3:00:60:36:e7:18:7a:f1:91:27:
         75:d8:b5:64:69:96:9d:90:44:59:4c:90:e3:27:15:a1:e1:52:
         83:20:d8:11:41:25:1d:20:b3:8a:43:04:48:80:45:57:45:10:
         a3:aa:5b:de:02:ac:d7:13:4e:99:43:0f:63:a8:d3:99:f2:72:
         b9:6b:97:fd:bc:74:66:65:84:c6:66:a3:41:e4:73:25:34:2b:
         af:22:c3:47:19:25:47:9e:20:87:90:35:4a:7f:59:40:3d:8c:
         d6:7d:70:f5:a5:18:6d:62:be:f9:d4:97:82:f7:94:9b:cc:3e:
         9c:0a:49:df:43:02:b5:6b:d5:e9:cb:98:5d:14:74:ce:be:f3:
         82:ae:a2:8c:4f:dd:90:ac:3f:be:12:f2:87:39:94:47:3f:d3:
         46:c2:da:ab:f6:22:8f:39:70:11:df:73:4b:ff:b7:cc:15:1a:
         f5:da:ef:30:ac:cb:30:6f:9a:c4:7f:e2:84:6d:4f:80:12:d4:
         1e:cd:16:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:18:00 2024 by rpki-client on console-fra.rpki-client.org