Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/78f5b43a-72b8-311c-832e-c605bdb6c502.roa
File:                     78f5b43a-72b8-311c-832e-c605bdb6c502.roa (raw, json)
Hash identifier:          rO63J9l1pZQF+KOwuOuG2drgw/rhRNkR61fIwMtjoDo=
Subject key identifier:   6A:F7:3E:FF:25:B6:71:0C:D1:14:11:C6:5A:7E:2B:0C:A7:2E:A2:07
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285847CA3F86B88C9A6A21AD0D3760
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/78f5b43a-72b8-311c-832e-c605bdb6c502.roa
Signing time:             Wed 06 Nov 2024 14:00:41 +0000
ROA not before:           Wed 06 Nov 2024 14:00:41 +0000
ROA not after:            Tue 04 Feb 2025 14:00:41 +0000
asID:                     21859
IP address blocks:        108.165.141.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ca:3f:86:b8:8c:9a:6a:21:ad:0d:37:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Nov  6 14:00:41 2024 GMT
            Not After : Feb  4 14:00:41 2025 GMT
        Subject: CN=bbd1d739-3f19-4467-805d-2da00c4595fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:a2:34:e8:ab:4a:55:f5:af:d1:02:f0:9e:b9:
                    0c:3a:a9:fd:ef:9f:c1:7b:de:44:cb:9a:5b:90:46:
                    d4:74:f1:86:42:1a:38:e2:00:d3:2c:3d:a4:d8:76:
                    0c:c7:48:8f:cb:08:e7:0a:91:1a:ec:d1:33:55:8b:
                    fb:93:8d:d6:55:d7:b0:4c:b0:05:4a:35:23:3e:79:
                    0e:e8:55:7d:d5:9a:47:ee:3c:f9:96:9d:34:e8:34:
                    4f:5e:c8:5f:6d:43:7a:c0:48:4d:68:30:5f:be:cd:
                    ea:6d:da:9b:c3:f1:31:38:f5:fd:8b:69:4c:d6:d1:
                    10:df:f8:a9:87:33:76:40:a0:3d:44:f1:c2:15:75:
                    d7:55:ce:a5:85:b8:d2:66:e8:cc:1a:97:8a:2e:7a:
                    14:71:db:7e:fd:cd:3d:d6:bf:4f:d0:3a:5e:e9:de:
                    11:f0:64:17:9b:41:12:7b:ea:43:77:d6:2d:ff:6a:
                    88:d7:1a:ee:b3:b3:f6:f0:4b:83:78:29:e4:15:8a:
                    89:ec:ac:c8:b6:bf:7f:3c:2e:71:2d:d7:93:cd:53:
                    31:b3:5d:d8:58:e6:a1:d0:2f:f0:74:54:9a:3a:8d:
                    43:66:89:4a:8b:55:c0:57:9e:f1:9c:62:bc:67:c5:
                    3e:fa:ad:bb:e5:a9:cd:18:70:92:f9:c0:6e:34:35:
                    28:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:F7:3E:FF:25:B6:71:0C:D1:14:11:C6:5A:7E:2B:0C:A7:2E:A2:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/78f5b43a-72b8-311c-832e-c605bdb6c502.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.141.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:66:97:00:42:6c:1d:a5:56:9b:53:c3:bb:1d:9d:fc:76:ed:
         14:17:10:3f:0e:29:6b:8d:e6:e0:17:1e:54:2f:2c:1c:05:da:
         5e:14:da:1c:5a:a4:98:fd:f0:84:5a:48:05:6a:06:0c:ca:e6:
         13:13:4c:3c:c7:91:b7:0a:7b:a3:7f:d0:f4:8b:ca:ae:6c:d7:
         ca:73:5d:05:ba:8b:7d:49:bc:8b:ce:2e:93:1b:15:6e:bd:c0:
         9d:5b:bd:4a:62:a1:3f:a3:ad:60:3b:a9:b7:5f:4c:e5:99:fc:
         ef:09:77:99:2a:cc:f3:2c:6c:2a:bf:1c:c5:6c:c0:6d:ce:81:
         be:af:23:69:d9:47:88:b5:89:28:94:f7:a2:bb:ab:fc:bb:ad:
         43:ce:cb:3f:84:04:b8:45:39:9b:36:cd:23:3d:ab:af:ff:00:
         64:d1:1c:3b:aa:0d:c2:8d:10:e7:f8:a5:c6:6c:f5:bb:86:a6:
         a8:68:e9:33:d4:5f:00:dc:92:b3:04:3c:e1:57:37:5e:3e:1f:
         55:38:8e:5b:6f:60:0e:96:6b:73:89:13:4f:9e:75:d3:db:4e:
         32:ec:32:9e:d4:63:33:fd:1b:4d:4c:f1:02:8a:85:e1:e0:9a:
         c4:7f:5a:8d:f1:b0:63:12:e1:b9:cf:50:c0:7f:65:99:0b:75:
         e2:82:40:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:54:11 2024 by rpki-client on console-ams.rpki-client.org