Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/6fcacb0c-38fe-39af-b1bf-b03b8ac4ae75.roa
File:                     6fcacb0c-38fe-39af-b1bf-b03b8ac4ae75.roa (raw, json)
Hash identifier:          wiVhZw1zjptR4Bu3ASsp6J1GVXTbr6qrjTraThvzN04=
Subject key identifier:   6D:B2:C8:C7:64:09:8E:CF:51:5C:83:80:5F:ED:37:67:2F:CE:10:4F
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285847CA3F8675DE08A2D25728EE40
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/6fcacb0c-38fe-39af-b1bf-b03b8ac4ae75.roa
Signing time:             Wed 06 Nov 2024 14:00:41 +0000
ROA not before:           Wed 06 Nov 2024 14:00:41 +0000
ROA not after:            Tue 04 Feb 2025 14:00:41 +0000
asID:                     21859
IP address blocks:        108.165.131.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ca:3f:86:75:de:08:a2:d2:57:28:ee:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Nov  6 14:00:41 2024 GMT
            Not After : Feb  4 14:00:41 2025 GMT
        Subject: CN=1cdea67c-6006-4604-82a1-4c6de9993cec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:75:61:af:2a:4e:3a:e9:ea:9c:ad:a0:ba:c4:
                    01:51:26:20:4c:b5:ae:39:73:c3:17:8c:a3:d9:8a:
                    2f:39:6f:14:65:75:af:ea:eb:c9:69:f7:a0:e8:14:
                    5b:71:94:a1:c7:cb:5f:cd:83:af:9a:86:48:d4:da:
                    4d:7b:95:32:1a:28:89:15:18:a7:72:08:86:61:96:
                    fc:6b:77:c5:71:12:64:4f:27:85:2d:85:87:35:76:
                    35:69:95:97:86:01:2b:02:12:21:cf:0f:1c:81:3a:
                    6e:a5:92:65:5f:bf:96:a6:4a:20:84:ec:0f:7c:2d:
                    c0:33:20:9a:d7:8b:de:59:d9:fa:4c:50:bf:46:ab:
                    f3:31:8f:58:aa:fb:78:0e:ac:4e:aa:f4:e1:72:39:
                    c3:99:90:2c:86:2d:9f:17:ea:80:10:8e:86:27:f7:
                    3e:06:53:8c:53:57:c2:f1:c0:33:37:7f:00:cd:2e:
                    63:42:cc:d0:94:f6:dd:4f:4d:5d:27:ec:eb:0b:12:
                    46:1e:da:b7:e5:8b:63:40:a2:60:18:41:09:52:e5:
                    f7:00:19:fd:48:14:1c:f8:75:7a:8c:93:bb:b8:08:
                    db:ec:8d:e5:3e:62:a1:e4:60:d0:7f:d6:d3:48:f5:
                    85:b8:f3:97:d1:b3:4b:fe:b3:fd:ad:db:5a:2b:95:
                    c0:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:B2:C8:C7:64:09:8E:CF:51:5C:83:80:5F:ED:37:67:2F:CE:10:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/6fcacb0c-38fe-39af-b1bf-b03b8ac4ae75.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.131.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:97:ad:e3:44:67:39:7c:25:cc:8d:9b:31:39:77:47:23:02:
         23:2f:c1:05:24:9b:d3:f4:62:2d:04:37:46:5e:26:fd:81:54:
         81:c4:97:92:b9:df:34:e8:10:5d:d3:0e:8a:f4:51:2f:9a:72:
         7c:ef:75:c7:54:5b:b5:3b:68:65:2a:49:54:e7:0b:27:7e:2a:
         6a:10:5f:9f:4a:ef:19:5c:88:0c:c6:e8:43:95:fa:c3:cc:fd:
         e7:6a:5c:c5:1f:75:1f:e9:b8:8a:2c:a2:38:cf:d8:62:c9:53:
         d1:a8:6b:be:bf:a3:b3:2e:56:fb:9d:74:10:b3:e1:0a:e6:7b:
         dd:4c:30:dd:3f:84:de:d2:c1:18:f1:ad:80:6b:48:61:be:49:
         f9:30:a0:f6:7f:33:02:db:95:23:cc:a4:03:48:b6:63:1c:19:
         3b:49:94:ea:8e:53:81:40:2c:60:ce:00:fb:14:bc:1c:ed:b0:
         e1:c8:47:e3:27:2f:c8:10:fd:ec:d2:93:6c:13:f7:00:7d:b3:
         2c:a5:a7:01:eb:ce:0c:af:b6:1a:c4:de:87:8a:fe:b6:e5:aa:
         fe:65:fd:d5:ee:2b:94:ea:22:61:b5:a3:6a:0c:35:0f:ae:b5:
         78:7c:4e:a1:b8:ea:5e:d8:eb:0e:37:1d:9b:b4:f5:c1:21:28:
         c9:ea:6f:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:15:38 2024 by rpki-client on console-fra.rpki-client.org