Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/6ed068fb-e777-3264-b447-dc622312f0ff.roa
File:                     6ed068fb-e777-3264-b447-dc622312f0ff.roa (raw, json)
Hash identifier:          l7mWOJTGE7QqW5ve05fPbJYPCvA90JybzjoS0Bf0dUs=
Subject key identifier:   92:EB:6B:1A:F3:13:BF:91:C5:CB:33:B1:8B:53:BE:BF:59:B5:BF:5F
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F432858481B8B3A9E2087AD9304488A00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/6ed068fb-e777-3264-b447-dc622312f0ff.roa
Signing time:             Thu 05 Dec 2024 16:54:14 +0000
ROA not before:           Thu 05 Dec 2024 16:54:14 +0000
ROA not after:            Wed 05 Mar 2025 16:54:14 +0000
asID:                     134351
IP address blocks:        108.165.81.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 07 Feb 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:1b:8b:3a:9e:20:87:ad:93:04:48:8a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Dec  5 16:54:14 2024 GMT
            Not After : Mar  5 16:54:14 2025 GMT
        Subject: CN=4625435d-3067-43e0-8759-1c4858a3e06c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:f3:4e:ea:b3:19:dd:08:15:f4:4d:e0:5f:ad:
                    4c:c8:ab:58:30:25:44:3b:5e:d7:27:f4:90:3a:f3:
                    4d:26:1a:1c:8c:40:5a:a0:bc:4f:44:71:ea:81:db:
                    5c:62:4d:56:43:14:9e:1e:24:4e:9e:5e:9a:7f:fe:
                    27:70:b0:1c:30:19:f0:ec:a5:df:60:ab:ce:40:6d:
                    2f:99:2d:f8:e9:f6:c0:8b:dc:3b:ec:f6:62:4c:ea:
                    a1:f0:92:d9:33:d8:69:f0:4d:1b:88:f6:2b:d6:40:
                    f0:f8:4f:55:9c:d6:3d:a9:4a:7c:e9:77:67:d5:42:
                    ca:d8:c9:44:d6:ec:cc:c1:ec:b0:c5:79:c9:a4:e9:
                    18:f6:d3:fd:b8:ce:3b:c0:8e:8e:2d:f4:33:26:c9:
                    17:ce:71:ce:99:8a:bb:23:f4:dd:55:a7:c8:aa:6d:
                    18:5b:c0:a7:18:2e:06:7e:a5:94:91:3b:c3:39:22:
                    50:b8:cf:63:46:e4:a7:27:92:7a:72:f8:36:1d:8b:
                    1c:93:78:ca:48:c7:29:4a:f1:ed:b3:c8:fd:ea:86:
                    8b:22:fb:70:1e:56:5c:05:c7:29:7a:f8:93:49:28:
                    7f:1d:45:95:b6:a4:85:a0:64:df:17:75:88:21:6c:
                    00:2f:78:7c:df:b9:09:9c:c1:a2:b8:f0:9a:6e:e2:
                    e8:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:EB:6B:1A:F3:13:BF:91:C5:CB:33:B1:8B:53:BE:BF:59:B5:BF:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/6ed068fb-e777-3264-b447-dc622312f0ff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.81.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:dc:6b:46:0d:92:3d:63:d8:ab:73:2a:92:4c:4c:b8:69:35:
         f1:64:94:38:2e:e5:30:15:7f:ec:ee:f7:99:b2:6d:e4:a6:54:
         f9:58:e6:a9:10:90:35:a6:0f:65:f4:d2:21:97:6e:65:2a:e0:
         ba:c6:f1:5f:c2:bd:e1:b9:b3:39:71:db:4f:e7:88:09:70:fa:
         aa:c8:c6:b6:5e:22:d9:0f:ea:1a:70:46:c7:3c:0c:e8:85:7e:
         b4:56:9e:af:38:7e:04:97:00:89:9d:cf:a4:80:4b:8a:b4:10:
         5d:c5:b6:48:72:e2:8c:d2:62:3b:3f:26:3d:d7:a7:8e:ca:7f:
         60:ee:7d:a6:ca:d6:41:8b:26:e9:db:47:d8:8b:fd:b8:59:1d:
         be:46:b6:22:a7:9a:45:69:ef:c8:f4:34:6c:33:0a:10:01:93:
         22:66:e4:d4:22:fc:72:27:9b:52:c7:42:7e:6f:87:98:1f:ae:
         01:14:8f:e2:32:84:5f:0c:7f:bc:7d:ce:30:3c:92:46:f7:a9:
         7a:b4:51:5c:f4:60:b7:5e:65:86:11:b2:75:02:cb:2e:74:ad:
         0e:36:2a:02:19:c0:c7:71:df:21:45:3f:b9:51:6f:ed:42:7f:
         68:77:b8:49:ef:2e:a6:61:f0:8d:99:20:b2:ca:8b:cb:c3:8d:
         0d:80:6f:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:45:16 2025 by rpki-client