Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/78f2d492-94c7-3e7a-af08-1dc43a0a853b.roa
File:                     78f2d492-94c7-3e7a-af08-1dc43a0a853b.roa (raw, json)
Hash identifier:          CfcSFTBLlm8dMd5FYYewHG2OAdZXFeKDaDqpbACxUSA=
Subject key identifier:   93:A7:5C:90:36:2E:E7:6C:0D:7D:9A:6F:30:BA:6C:21:3A:60:07:43
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285844F5CAADF201CA826CE08D7400
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/78f2d492-94c7-3e7a-af08-1dc43a0a853b.roa
Signing time:             Wed 21 Feb 2024 02:00:25 +0000
ROA not before:           Wed 21 Feb 2024 02:00:25 +0000
ROA not after:            Tue 21 May 2024 01:00:25 +0000
asID:                     4213
IP address blocks:        108.165.211.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:f5:ca:ad:f2:01:ca:82:6c:e0:8d:74:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Feb 21 02:00:25 2024 GMT
            Not After : May 21 01:00:25 2024 GMT
        Subject: CN=7ce65312-f7b9-4e1e-b3e3-7ee358b83bc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:a4:dd:c3:c2:18:53:c6:55:2d:5e:d9:c9:dc:
                    d0:09:f3:75:20:2c:73:6e:da:8e:44:d2:db:ba:6a:
                    e8:ed:29:ea:91:9c:3e:ad:27:b6:54:87:17:49:a9:
                    4a:40:82:b5:3b:da:e9:f9:a9:fb:7e:65:54:3a:47:
                    a4:04:0f:4f:bb:a1:1b:54:2f:88:ac:fc:16:db:9d:
                    b9:19:36:52:f3:6f:ea:97:ba:ca:de:db:a4:08:1b:
                    8d:2a:39:99:3e:7e:3f:79:eb:7a:05:36:25:fd:bc:
                    a4:36:69:7d:66:5a:b8:3c:16:ee:25:ee:2d:32:47:
                    cb:ae:ab:6c:b2:de:d6:36:1e:75:e7:c5:ab:91:fa:
                    32:21:36:3e:6b:5c:47:e5:b8:72:f4:6b:4c:ac:b0:
                    dc:ec:f3:57:88:4b:bb:69:75:5b:b1:30:99:c1:56:
                    e6:b5:f9:14:4b:d8:13:39:95:14:19:d6:23:ca:22:
                    dd:45:61:e8:25:96:f4:b7:cf:1d:bd:da:92:77:9c:
                    80:bd:07:24:26:d5:af:90:43:d0:95:02:07:78:39:
                    95:87:20:6d:6a:5f:a9:25:5f:59:a0:67:0e:eb:f0:
                    f8:a6:bc:58:81:ad:32:56:a8:8a:ac:a8:76:b2:bc:
                    21:90:cc:19:bc:6f:5b:6c:60:21:0c:24:91:32:e5:
                    5a:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:A7:5C:90:36:2E:E7:6C:0D:7D:9A:6F:30:BA:6C:21:3A:60:07:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/78f2d492-94c7-3e7a-af08-1dc43a0a853b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.211.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:0c:15:64:0f:15:a8:fa:46:a8:cd:a9:23:3a:86:0e:42:fd:
         7a:d8:28:01:45:46:71:55:a7:a6:35:ae:6e:40:ea:bd:70:de:
         6a:3a:6f:e5:91:47:96:48:a2:fc:a5:e8:44:3b:4d:fd:e2:0e:
         a1:aa:74:34:b9:7d:20:0d:87:86:30:8e:84:6f:8f:21:46:30:
         27:ac:82:96:56:eb:c5:a6:ec:ce:5a:e0:8c:8e:83:95:b9:ea:
         df:11:fd:ac:31:f4:75:c8:e0:dc:e5:02:cc:70:3f:05:7f:ab:
         56:58:46:30:86:c4:9e:bd:b7:15:c7:e4:43:18:98:69:c5:e6:
         b2:9f:1a:0d:63:2d:2a:bf:8f:b7:b7:6f:94:0e:ce:49:1a:48:
         83:b0:22:66:33:fc:f0:e4:53:97:2f:6f:fc:b9:e1:87:5c:97:
         ed:23:38:28:b0:e8:9e:08:01:5a:ab:17:fc:43:0d:48:c7:9c:
         22:a9:2c:77:8a:56:f4:9b:63:8c:3d:af:cd:50:d5:ff:46:d3:
         ad:09:5c:61:d2:29:78:d7:7a:09:e5:54:18:6f:73:34:1c:f1:
         f4:e1:74:0c:58:bb:b1:e5:ee:e9:38:4f:a9:9e:7b:02:9e:b1:
         cf:b4:38:d9:cb:df:7a:8d:82:ea:72:59:5a:68:bf:10:e0:a2:
         fc:b0:a7:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 17:59:03 2024 by rpki-client on console-ams.rpki-client.org