Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/5b764fc1-9acb-315e-a16e-e01dbb44df77.roa
File:                     5b764fc1-9acb-315e-a16e-e01dbb44df77.roa (raw, json)
Hash identifier:          nyDe0sd71jpXxBxSSLDJZpqu0Jmutlw7Y9QAiGrltDk=
Subject key identifier:   CF:C9:9C:EF:8A:23:59:00:15:E3:70:A1:12:79:83:66:87:99:03:72
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285847A08B4F074DC459E8D02A9DE0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/5b764fc1-9acb-315e-a16e-e01dbb44df77.roa
Signing time:             Tue 22 Oct 2024 15:29:59 +0000
ROA not before:           Tue 22 Oct 2024 15:29:59 +0000
ROA not after:            Mon 20 Jan 2025 16:29:59 +0000
asID:                     11798
IP address blocks:        108.165.83.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:a0:8b:4f:07:4d:c4:59:e8:d0:2a:9d:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Oct 22 15:29:59 2024 GMT
            Not After : Jan 20 16:29:59 2025 GMT
        Subject: CN=8b171a9e-4b3c-44c2-a329-8defabf606bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:33:f3:ad:00:1f:36:88:7d:47:5d:f8:21:64:
                    3e:07:d9:ef:b7:9a:33:68:a1:62:2d:4e:21:a8:ee:
                    6f:92:70:0b:91:f6:83:86:22:f9:15:b7:d1:3f:d3:
                    62:a2:f1:02:81:1b:7e:79:7e:04:64:2b:49:ea:cc:
                    96:2a:1f:4c:f9:a5:ff:a4:b7:b3:30:5b:3a:2e:1f:
                    71:56:b8:41:07:00:13:2f:0c:70:39:60:dd:11:40:
                    dd:70:b4:20:52:1b:49:ed:03:9f:c2:1a:77:b2:2b:
                    b0:ee:7c:d0:54:8e:3f:66:4f:f1:67:05:65:42:83:
                    b9:86:1f:62:ea:15:a1:0e:bd:a7:24:41:22:0d:a6:
                    f0:96:ca:38:e5:d5:5c:b2:d6:36:d3:fc:bf:2e:73:
                    ab:52:43:4c:47:28:7b:9c:98:8c:6c:c0:34:53:ad:
                    c1:b2:69:d5:6b:fe:2c:59:e2:81:bc:02:b5:ea:50:
                    d9:bc:0b:b5:0c:eb:aa:91:ce:b6:23:05:01:6b:e2:
                    7f:ae:b8:68:a4:eb:4e:5d:89:6c:8f:17:ac:28:9b:
                    8b:2c:a9:16:6a:a2:75:3d:89:3d:af:04:61:39:1a:
                    4c:50:0f:27:59:80:3f:d8:8a:73:e9:c1:dc:3d:ae:
                    10:bd:95:90:52:95:ad:6a:4d:a6:1b:59:3c:66:e2:
                    7e:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:C9:9C:EF:8A:23:59:00:15:E3:70:A1:12:79:83:66:87:99:03:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/5b764fc1-9acb-315e-a16e-e01dbb44df77.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.83.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:a9:ad:ec:32:5d:86:6f:a2:fe:7f:33:29:fc:56:22:d8:9d:
         d7:95:f1:4d:cc:1a:31:08:d2:ee:69:dc:d4:c5:5a:bd:1c:5f:
         71:8e:56:88:8d:85:bc:fb:d7:d5:03:d5:aa:4f:80:5f:22:2b:
         ab:26:32:71:f7:d4:36:0d:da:fa:d7:ce:58:de:b4:df:8b:0b:
         ef:29:c2:8a:12:21:a8:b7:c0:de:5f:09:4f:0d:06:0f:68:79:
         7d:ad:66:b9:73:2a:91:66:e4:27:33:8a:f8:d0:e0:16:fc:d9:
         42:e4:25:3c:03:52:cb:49:25:85:27:82:e6:82:80:de:5f:41:
         6a:e0:13:b1:ee:6c:a3:21:2e:71:4f:1c:c5:fb:da:d9:1c:47:
         ae:71:ab:b4:23:95:28:46:bc:7c:94:7d:22:02:3f:e5:1a:b0:
         95:29:01:8a:38:ce:f3:8b:f8:4a:58:40:86:6a:79:03:2a:d6:
         5a:0b:0f:91:09:9a:34:c9:af:df:49:53:2c:91:40:cb:cf:35:
         8f:34:2b:cc:94:b3:94:a5:9e:71:7f:15:7f:59:4d:cd:1b:cf:
         ec:93:c1:5d:25:4f:f9:fd:62:a9:a2:09:49:99:70:87:f4:92:
         77:7f:fc:f1:74:d9:5f:bc:74:8e:96:cb:17:7d:2f:57:7c:0d:
         82:3e:3d:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:37:41 2024 by rpki-client on console-ams.rpki-client.org