Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/5c0dd09c-77cb-353f-9dfb-10f5c91bb809.roa
File:                     5c0dd09c-77cb-353f-9dfb-10f5c91bb809.roa (raw, json)
Hash identifier:          TCyCnm6HK/KvHFOB81GfOiZiG41WQRVmDQK00An+AQo=
Subject key identifier:   56:26:72:2F:DB:38:12:CA:0A:D3:85:48:E6:9F:1F:97:AA:95:72:D4
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584869DE1F5EF3701B993D359D80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/5c0dd09c-77cb-353f-9dfb-10f5c91bb809.roa
Signing time:             Thu 02 Jan 2025 18:14:19 +0000
ROA not before:           Thu 02 Jan 2025 18:14:19 +0000
ROA not after:            Wed 02 Apr 2025 17:14:19 +0000
asID:                     10103
IP address blocks:        108.165.60.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 07 Feb 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:69:de:1f:5e:f3:70:1b:99:3d:35:9d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jan  2 18:14:19 2025 GMT
            Not After : Apr  2 17:14:19 2025 GMT
        Subject: CN=18eb67f7-f113-4e54-869e-376d2baf97f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:60:08:80:99:e3:2b:82:e2:a0:80:30:41:2e:
                    89:76:bb:9c:88:f7:16:3f:be:d3:c6:e2:bd:b4:4a:
                    62:0c:c0:50:eb:49:6c:d6:e0:f6:28:8e:5c:01:c3:
                    17:68:6a:8b:76:13:ed:fb:73:52:d9:ba:10:24:56:
                    6b:2d:b4:8d:5a:55:61:7b:13:fd:a8:33:0a:3c:9a:
                    a6:db:dd:17:25:9c:99:09:75:9a:d5:ca:98:64:5a:
                    45:fe:85:85:77:57:9a:2c:ae:3b:fa:a9:ff:39:5e:
                    46:02:09:6f:00:d2:f9:a7:cf:59:0a:4d:34:53:5c:
                    9f:02:08:be:af:a8:e9:bf:01:40:8f:2c:df:b4:9c:
                    40:c9:78:ef:9b:bb:3a:ad:00:fa:c2:7f:14:d3:02:
                    05:49:45:d3:e7:bb:98:8a:4f:72:ac:e8:7a:38:ff:
                    55:b5:c9:ae:dc:5f:8a:de:5b:e6:a6:9f:9a:67:8e:
                    db:42:2e:d8:fd:24:d4:c2:10:ed:ed:80:78:4e:74:
                    d5:2c:11:74:5a:48:b3:ac:fa:5d:cf:8d:9e:c6:c4:
                    37:af:50:0a:26:8b:2f:4f:34:3e:b5:97:00:0a:f6:
                    02:36:5e:a7:0a:8c:13:a3:44:72:3b:e2:b7:1e:d4:
                    91:c0:08:ec:65:f6:26:ca:fa:03:6e:35:64:7c:03:
                    15:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:26:72:2F:DB:38:12:CA:0A:D3:85:48:E6:9F:1F:97:AA:95:72:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/5c0dd09c-77cb-353f-9dfb-10f5c91bb809.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.60.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:c4:f4:e1:52:47:d8:f0:64:82:6a:71:c0:f9:04:ff:81:c6:
         a1:32:95:8a:c1:4f:d3:f1:cc:55:37:1f:d1:e6:41:a6:d4:6a:
         a5:3a:0d:1e:1e:ff:4e:7f:76:ae:85:b5:51:be:28:0a:53:9c:
         53:8c:4b:81:22:02:1f:b9:7e:b7:96:20:15:99:49:0f:e4:40:
         f1:2c:57:e6:14:a0:a3:34:d3:65:19:0e:61:c7:47:11:99:bf:
         40:31:07:c2:55:f2:b1:bf:0e:39:d8:5d:a1:71:64:70:19:bc:
         ed:c6:ac:14:1f:9f:52:fb:35:a6:df:48:ca:7c:47:7c:31:10:
         7a:99:01:64:db:12:30:e7:80:49:f3:d8:62:2c:ea:01:cc:21:
         84:a3:ed:91:c6:df:57:e7:28:ea:6a:e8:31:04:e0:45:91:b3:
         87:ff:f3:96:ce:fa:6e:21:b4:c9:b2:b7:a5:3a:cb:c8:2c:5a:
         17:aa:0f:57:3c:cb:9a:ba:bd:8e:4c:25:9f:74:f9:cd:86:cf:
         23:51:99:c6:cf:ea:06:ee:d5:c0:91:3e:07:40:de:84:7c:8a:
         7b:f4:9b:15:e6:86:1e:07:36:69:3a:6b:fd:e4:86:f0:54:fb:
         28:91:f8:b9:36:a3:46:1e:a6:fe:33:48:33:e4:7b:c5:23:22:
         5b:e5:e5:62
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhp3h9e83AbmT01nYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI1MDEwMjE4MTQxOVoXDTI1MDQwMjE3MTQxOVowLzEtMCsGA1UEAxMk
MThlYjY3ZjctZjExMy00ZTU0LTg2OWUtMzc2ZDJiYWY5N2Y2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArmAIgJnjK4LioIAwQS6JdruciPcWP77TxuK9
tEpiDMBQ60ls1uD2KI5cAcMXaGqLdhPt+3NS2boQJFZrLbSNWlVhexP9qDMKPJqm
290XJZyZCXWa1cqYZFpF/oWFd1eaLK47+qn/OV5GAglvANL5p89ZCk00U1yfAgi+
r6jpvwFAjyzftJxAyXjvm7s6rQD6wn8U0wIFSUXT57uYik9yrOh6OP9Vtcmu3F+K
3lvmpp+aZ47bQi7Y/STUwhDt7YB4TnTVLBF0WkizrPpdz42exsQ3r1AKJosvTzQ+
tZcACvYCNl6nCowTo0RyO+K3HtSRwAjsZfYmyvoDbjVkfAMVTwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFYmci/bOBLKCtOFSOafH5eqlXLUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvNWMwZGQwOWMtNzdjYi0z
NTNmLTlkZmItMTBmNWM5MWJiODA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBbKU8MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJHE9OFSR9jwZIJqccD5BP+BxqEylYrBT9PxzFU3H9HmQabUaqU6DR4e
/05/dq6FtVG+KApTnFOMS4EiAh+5freWIBWZSQ/kQPEsV+YUoKM002UZDmHHRxGZ
v0AxB8JV8rG/DjnYXaFxZHAZvO3GrBQfn1L7NabfSMp8R3wxEHqZAWTbEjDngEnz
2GIs6gHMIYSj7ZHG31fnKOpq6DEE4EWRs4f/85bO+m4htMmyt6U6y8gsWheqD1c8
y5q6vY5MJZ90+c2GzyNRmcbP6gbu1cCRPgdA3oR8inv0mxXmhh4HNmk6a/3khvBU
+yiR+Lk2o0Yepv4zSDPke8UjIlvl5WI=
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:45:18 2025 by rpki-client