Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/6916269e-d570-328d-972c-711c6fef01e2.roa
File:                     6916269e-d570-328d-972c-711c6fef01e2.roa (raw, json)
Hash identifier:          Kyp9Ph+q10XpjuT8I7rS20Jj9SkQ4Gz6crorITplkH0=
Subject key identifier:   3B:78:45:30:21:2C:B3:B2:F2:22:C8:5B:CD:F9:9B:C3:8A:3E:41:88
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285845883DE0AFAA803A71C0653200
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/6916269e-d570-328d-972c-711c6fef01e2.roa
Signing time:             Sat 13 Apr 2024 13:00:34 +0000
ROA not before:           Sat 13 Apr 2024 13:00:34 +0000
ROA not after:            Fri 12 Jul 2024 13:00:34 +0000
asID:                     399641
IP address blocks:        108.165.62.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:88:3d:e0:af:aa:80:3a:71:c0:65:32:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Apr 13 13:00:34 2024 GMT
            Not After : Jul 12 13:00:34 2024 GMT
        Subject: CN=f9e3b99c-161b-4d3d-b8ff-b07b9339604d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:e8:14:c8:cf:86:bb:e3:25:84:e6:ed:82:a3:
                    12:68:22:65:27:49:76:16:17:cf:7c:74:80:08:cd:
                    d2:49:af:4b:d6:23:d1:52:48:dc:d8:b3:23:2b:78:
                    ed:7b:4e:cd:17:c4:18:d3:5d:a7:52:a6:75:7d:d5:
                    2d:17:5e:ab:d4:1b:03:d5:3b:51:96:aa:67:9a:46:
                    24:ff:3f:fb:d8:6b:49:9e:21:2b:b1:2a:8b:51:89:
                    0c:79:3d:c0:32:36:f2:55:c6:c5:4d:7f:9c:cc:3b:
                    48:54:2e:b2:da:9d:8f:f3:7c:f5:70:b5:91:95:8f:
                    10:ed:2c:4e:23:bb:2a:73:e5:23:5c:ff:52:e6:3a:
                    87:2f:44:af:be:59:bc:de:59:20:ef:e9:7f:42:81:
                    1f:1c:e1:13:1e:da:51:f8:91:11:92:9b:d9:86:41:
                    84:55:58:9e:6c:5d:8a:d2:8b:06:51:0f:27:12:20:
                    4d:bf:41:c8:6b:ee:31:9e:1c:71:0b:01:be:51:2e:
                    06:51:1b:66:ea:46:dc:1a:35:8a:5b:00:97:af:4c:
                    e4:68:cd:d1:29:07:a0:2b:ea:76:3c:92:ba:8e:cd:
                    1f:94:eb:74:fc:33:07:43:80:8a:3b:8f:91:ee:bc:
                    c4:eb:99:4b:22:9d:39:01:7c:33:12:16:e2:2d:31:
                    94:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:78:45:30:21:2C:B3:B2:F2:22:C8:5B:CD:F9:9B:C3:8A:3E:41:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/6916269e-d570-328d-972c-711c6fef01e2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.62.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:02:57:28:b8:2c:7b:f0:86:4d:99:82:ac:34:b8:4d:8c:28:
         ee:a0:a9:6e:85:30:d1:1c:cc:7b:68:16:2f:e0:bd:75:c0:0e:
         8f:cb:a9:b9:e0:ec:af:c4:64:ba:f8:76:2d:f3:66:ac:ba:05:
         00:d0:59:2a:cb:bc:58:86:09:0c:6d:c6:b9:19:c0:6f:cb:11:
         d0:2d:fd:be:da:72:e5:e4:31:7e:d4:2e:42:0e:14:ae:0e:22:
         25:b9:ee:53:d0:ee:e6:3c:4d:a3:4f:b7:b7:c0:8d:ac:e1:d8:
         f5:b6:cc:7a:0c:61:ff:ef:cd:83:85:4f:c2:46:d3:59:66:ca:
         1c:97:05:f0:95:37:32:84:ad:87:a1:54:b4:64:7e:51:5c:66:
         51:3d:4f:37:f9:5d:98:05:88:94:0d:fc:ac:97:d6:c0:6a:c9:
         7b:3f:b4:ea:07:34:3e:ba:02:42:bd:a1:89:80:b1:cc:75:1d:
         4f:ba:c0:b2:d8:e2:71:77:6b:62:89:5a:f6:df:3f:fc:3d:e0:
         4b:63:ca:80:06:f0:4f:2f:c2:a1:29:58:df:6e:97:78:84:9b:
         6a:18:b6:e4:c7:2e:a7:3a:02:cd:4e:af:01:da:ca:53:89:02:
         a2:df:d2:5e:b3:43:43:3a:5b:37:48:24:fc:57:a9:7a:15:70:
         7a:68:84:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 02:06:29 2024 by rpki-client on console-ams.rpki-client.org