Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/4d500dd3-2d39-3070-8ae4-006b17215c32.roa
File:                     4d500dd3-2d39-3070-8ae4-006b17215c32.roa (raw, json)
Hash identifier:          Wsa52GblE3wA9WcDpp1eQf5OydJf12mfHBMnalAwcl8=
Subject key identifier:   17:AF:F0:0B:14:70:85:CB:95:91:F7:38:FC:24:A9:A5:B4:33:53:C4
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285845840DD0E5A8EE256355C0CDC0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/4d500dd3-2d39-3070-8ae4-006b17215c32.roa
Signing time:             Fri 12 Apr 2024 01:00:26 +0000
ROA not before:           Fri 12 Apr 2024 01:00:26 +0000
ROA not after:            Thu 11 Jul 2024 01:00:26 +0000
asID:                     30633
IP address blocks:        108.165.151.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:84:0d:d0:e5:a8:ee:25:63:55:c0:cd:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Apr 12 01:00:26 2024 GMT
            Not After : Jul 11 01:00:26 2024 GMT
        Subject: CN=4d2db802-621f-4c84-825a-1a287978b925
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:a9:da:ca:2d:dd:81:97:11:d4:4b:55:b3:35:
                    5e:55:81:bb:0e:f4:7b:d0:9f:5b:6c:56:e9:41:d0:
                    e4:2a:e7:8b:e4:41:71:1e:a2:06:4a:e6:92:d7:1b:
                    f3:b0:92:78:15:35:57:65:dc:59:ae:71:0b:70:8a:
                    32:80:8e:3d:88:93:90:ea:99:f0:f6:0d:88:c9:2f:
                    c6:8a:35:e0:99:2a:d2:6a:98:84:25:e7:2a:3f:f0:
                    65:c8:fc:bc:aa:c9:bc:3f:78:66:11:c1:5a:44:fb:
                    06:ab:66:f5:64:21:f2:ec:3a:da:4a:13:12:2c:c3:
                    fc:c7:40:04:5f:6b:be:e5:ca:1f:f3:f4:fa:3a:3f:
                    35:b7:77:76:19:d5:26:8e:fe:07:33:e5:a4:5f:a2:
                    e8:ef:6f:c3:05:f3:66:46:48:0b:16:75:dc:e2:1a:
                    79:6b:57:65:ec:39:61:de:bd:9d:27:65:3e:93:27:
                    6b:e5:94:47:65:00:9c:e0:c9:9b:62:ea:c2:12:e7:
                    dd:97:c7:42:09:3b:5d:ad:98:60:83:69:53:f4:f2:
                    8c:70:c0:f0:93:c5:ab:f1:11:9e:66:8a:3f:ef:30:
                    aa:44:05:ca:7b:23:f5:8c:e6:1b:77:3c:7f:cc:ea:
                    25:8e:b7:e0:73:8b:84:42:2d:f2:b7:47:f3:b2:b8:
                    cc:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:AF:F0:0B:14:70:85:CB:95:91:F7:38:FC:24:A9:A5:B4:33:53:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/4d500dd3-2d39-3070-8ae4-006b17215c32.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.151.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:b7:bb:2e:53:6c:af:9f:45:98:a4:fb:3c:00:b3:16:aa:a6:
         18:62:75:ee:27:8b:d5:27:0b:10:a1:7b:f4:d5:1a:61:e0:dc:
         7d:b7:81:37:3c:d2:79:00:1d:1e:dd:14:b1:35:aa:8f:2a:e5:
         26:b3:56:a1:c3:9f:e2:c5:1d:48:2f:0e:e7:f6:14:22:79:72:
         a4:70:86:f3:94:9f:5b:67:9f:02:64:9a:a4:e4:e1:bd:a6:34:
         7b:8c:30:20:0a:2e:7b:f7:16:f3:eb:7d:28:7b:bc:ce:fc:84:
         d1:d0:8d:dc:a0:3a:05:eb:ff:96:96:b1:3d:74:53:34:b3:75:
         82:cb:3a:bb:2e:bf:ed:a8:2f:d5:c6:fc:58:c4:65:15:48:07:
         46:d5:f0:28:62:25:09:1a:13:1d:6c:61:c6:99:e5:df:9f:ae:
         86:00:8b:f9:f5:bf:44:4a:7a:48:1c:8d:42:24:fe:1d:c2:3b:
         91:ab:20:af:56:d8:97:17:d2:d6:8a:d9:05:dd:c4:98:f4:81:
         42:c8:12:9c:e6:dc:90:b9:7d:b8:ac:73:62:30:26:61:f6:d3:
         a9:60:75:0c:20:f5:0e:37:7c:54:13:f2:4b:98:0e:08:aa:4b:
         01:db:07:3a:39:23:75:86:5e:42:2b:d1:a9:c6:f6:e2:5e:87:
         32:c6:3e:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 02:06:27 2024 by rpki-client on console-ams.rpki-client.org