Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/6ad28f96-5834-3cee-aa48-fb1aac830ce2.roa
File:                     6ad28f96-5834-3cee-aa48-fb1aac830ce2.roa (raw, json)
Hash identifier:          mPFTB/54Qlpw1hMogg+e5GVFTG5Z01PFByEigs3w0AM=
Subject key identifier:   2A:32:14:9C:54:19:F3:5E:00:B4:68:18:48:2E:0E:1A:DD:FC:7D:6A
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285847F584F81E6F0E63CE67768300
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/6ad28f96-5834-3cee-aa48-fb1aac830ce2.roa
Signing time:             Fri 22 Nov 2024 02:00:40 +0000
ROA not before:           Fri 22 Nov 2024 02:00:40 +0000
ROA not after:            Thu 20 Feb 2025 02:00:40 +0000
asID:                     200017
IP address blocks:        108.165.208.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:f5:84:f8:1e:6f:0e:63:ce:67:76:83:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Nov 22 02:00:40 2024 GMT
            Not After : Feb 20 02:00:40 2025 GMT
        Subject: CN=743cfd4d-c309-4a79-bd03-b9849b1da30f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:61:d6:f1:8f:b7:1a:f3:af:ea:98:6a:e2:38:
                    44:15:1e:5f:69:dc:99:dc:99:d4:62:a2:f6:09:31:
                    7a:e4:b1:94:db:7b:d2:0a:af:d0:1b:54:a7:1a:39:
                    38:bd:05:2c:35:9e:95:4e:47:cb:28:3c:ed:ec:c0:
                    fe:ac:b3:b9:a0:76:b7:2f:6a:25:c0:62:04:b5:f1:
                    f8:0c:e2:68:3f:1b:a9:56:ca:bc:5d:57:ad:78:d9:
                    a3:23:f8:fe:fc:fb:95:f4:67:3d:25:a1:41:11:2f:
                    ea:db:25:4a:9c:cc:2a:61:77:8d:5b:c7:86:9c:49:
                    32:22:9e:78:95:2f:5f:33:6e:53:58:9f:f6:01:f9:
                    9f:3c:86:7c:ea:10:c2:0f:0a:9a:db:51:8c:e5:bc:
                    33:43:5d:b7:4d:6c:b1:bf:81:95:34:e3:17:dc:f9:
                    42:a0:7f:eb:d3:5a:8b:4e:af:c8:75:4a:d3:2f:6c:
                    89:5d:78:b5:1f:97:55:ed:45:d9:8b:28:91:13:96:
                    87:e8:d2:49:61:c0:e3:f7:5b:b6:7e:74:ac:b2:21:
                    a0:c6:f3:1e:12:b0:0d:80:5b:2c:3f:91:f7:9f:f3:
                    bb:58:2a:6e:e1:06:48:07:bb:5d:8e:67:23:e9:37:
                    e7:65:59:a3:b8:0e:5b:39:83:10:41:64:02:22:22:
                    70:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:32:14:9C:54:19:F3:5E:00:B4:68:18:48:2E:0E:1A:DD:FC:7D:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/6ad28f96-5834-3cee-aa48-fb1aac830ce2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.208.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:03:5a:1f:2d:32:33:a0:fe:a8:00:40:b8:b5:8e:f1:e2:b1:
         6c:71:e5:63:c7:32:9d:d4:b1:67:52:99:79:48:24:b3:bc:cb:
         b2:b3:c2:3e:58:0a:be:33:c3:74:2e:3e:93:24:65:af:8f:cd:
         94:cd:88:2c:85:9f:2f:28:85:e0:13:f7:15:db:49:db:a1:89:
         98:0e:1d:0e:72:07:66:85:4f:ef:43:a0:9a:0f:82:c5:60:0a:
         d3:99:b1:95:6e:67:4c:f2:29:e2:41:2e:47:86:66:54:be:2f:
         a0:38:99:7d:95:20:a1:6c:ea:4f:99:86:de:9c:62:4d:f5:52:
         57:93:f4:e6:3f:38:76:f4:c5:6b:04:90:13:e4:37:76:11:a2:
         2b:f2:a8:54:dd:de:cd:66:17:13:4a:ec:b8:dc:4e:b0:40:9e:
         07:1e:9c:3a:f1:88:29:0a:bf:82:34:61:fd:f4:12:a3:67:10:
         eb:4c:8d:e3:a8:cd:fd:b9:91:d1:f3:a7:11:cd:f2:aa:c8:98:
         21:c7:54:06:7f:f2:fc:3a:81:36:6a:88:17:42:cd:2a:ae:1f:
         bb:1c:63:cf:93:81:d5:cb:c7:60:14:09:af:5a:bf:da:69:2a:
         ce:d1:11:5c:1e:4f:65:d5:74:ca:ad:d9:13:e1:e0:a5:37:bd:
         bb:8d:cd:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:37:42 2024 by rpki-client on console-ams.rpki-client.org