Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/5dd2178d-8a28-3c98-9933-aa86b137128f.roa
File:                     5dd2178d-8a28-3c98-9933-aa86b137128f.roa (raw, json)
Hash identifier:          XRfLxRK/nPiVX7fDKEug1yz/IBhb9L8UxM1xdB+6pcw=
Subject key identifier:   E3:E4:49:3E:2F:C0:47:53:85:F5:BB:FD:9A:C7:08:D1:49:B3:EA:A2
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285847CE6F4F1EAE08CC5BAFC7BE80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/5dd2178d-8a28-3c98-9933-aa86b137128f.roa
Signing time:             Fri 08 Nov 2024 02:00:27 +0000
ROA not before:           Fri 08 Nov 2024 02:00:27 +0000
ROA not after:            Thu 06 Feb 2025 02:00:27 +0000
asID:                     135391
IP address blocks:        108.165.86.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ce:6f:4f:1e:ae:08:cc:5b:af:c7:be:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Nov  8 02:00:27 2024 GMT
            Not After : Feb  6 02:00:27 2025 GMT
        Subject: CN=f35fcffe-ca2c-498b-9031-d1e514e473ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:54:af:14:c7:de:e4:d6:f1:19:58:e8:00:dd:
                    c0:36:5d:39:3f:22:7a:e6:e4:4a:45:2f:12:62:86:
                    6c:d7:37:56:e7:0b:0f:83:c7:0e:83:9f:ff:23:19:
                    e5:3b:24:05:59:b0:d1:bc:fb:0f:3e:38:9c:b7:68:
                    2a:6f:f3:96:58:77:4c:74:4b:0c:39:68:f0:66:ec:
                    d4:f1:94:48:42:62:fe:be:c9:95:7a:25:ac:25:ce:
                    df:f3:2b:ec:4a:8a:95:2e:d5:6c:f1:b7:af:22:0c:
                    77:9c:d7:70:f2:d4:7b:3e:3c:49:e3:41:47:6b:fb:
                    5c:8f:54:f7:be:13:8e:d3:d9:48:d6:7e:09:74:5c:
                    0c:bb:29:ae:db:03:dd:62:dd:8a:c5:69:10:08:54:
                    34:ce:fc:1d:bc:9b:3b:15:e8:d5:0c:5b:57:b1:e4:
                    ff:dd:45:54:5f:b8:86:1a:e1:dc:07:d6:52:39:91:
                    f2:63:79:39:7b:af:6c:08:d4:7d:2f:59:3d:63:ac:
                    54:61:47:04:ab:1d:ac:3b:31:ad:cc:18:97:d9:0b:
                    bb:27:dc:5c:ba:0d:21:1a:b4:42:0c:b3:bc:40:e0:
                    f6:78:3f:e1:af:08:07:5f:9f:c8:18:c1:2f:5c:8b:
                    54:96:e7:cd:91:ae:64:07:6c:05:c8:7e:bd:d5:c2:
                    82:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:E4:49:3E:2F:C0:47:53:85:F5:BB:FD:9A:C7:08:D1:49:B3:EA:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/5dd2178d-8a28-3c98-9933-aa86b137128f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.86.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:25:3d:1f:64:23:72:7e:b0:d6:e1:54:c4:f0:04:6d:f7:26:
         3c:33:49:80:a8:8d:33:2c:a2:b4:f8:2f:0c:36:86:58:02:a8:
         bd:92:82:ae:f6:7b:ce:5d:19:be:0e:02:0e:5d:62:f2:5a:f3:
         c9:50:19:bb:cc:7a:42:04:44:4e:a6:22:7d:36:60:60:e1:b0:
         49:a2:36:18:16:10:c4:93:5a:cc:2e:24:39:e8:78:53:7f:0a:
         f0:3c:77:d6:78:42:b4:13:45:7c:63:82:0c:90:7a:2f:eb:6d:
         d6:88:e0:a7:91:6b:44:57:a0:9d:a7:ba:8e:77:71:b2:fd:96:
         42:05:65:d7:85:03:a3:4f:97:0a:ac:5d:93:e3:40:1b:77:a0:
         8d:0c:75:55:88:c8:ed:79:a3:a5:ba:11:64:55:a9:54:43:64:
         56:13:df:f4:a4:77:7c:69:a4:1d:fb:e2:48:c5:e6:85:ef:ed:
         f1:8c:cf:6a:31:cf:16:51:b4:81:88:e4:94:86:82:62:64:f0:
         1b:06:61:56:82:ad:ed:18:b8:6b:ac:e4:ea:13:5d:cb:78:6d:
         f4:be:ce:af:7b:14:00:a0:3f:14:bd:a3:3d:09:6c:0a:f5:21:
         a3:0a:35:42:f6:45:1e:9d:ff:6a:4d:95:e7:fc:0b:3e:e1:70:
         74:46:54:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:32:15 2024 by rpki-client on console-fra.rpki-client.org