Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/794e595d-97cd-32aa-8bc3-4db5b70a797b.roa
File:                     794e595d-97cd-32aa-8bc3-4db5b70a797b.roa (raw, json)
Hash identifier:          YpBG5cS5herG2KmX24IQ44I4U1D2OuipZciWGnIfNqU=
Subject key identifier:   8A:D6:B9:CD:F3:48:98:33:6E:A8:57:C0:EE:3A:4C:38:B8:66:B0:16
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F432858483D52054191D46B0839E91D70
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/794e595d-97cd-32aa-8bc3-4db5b70a797b.roa
Signing time:             Tue 17 Dec 2024 19:16:27 +0000
ROA not before:           Tue 17 Dec 2024 19:16:27 +0000
ROA not after:            Mon 17 Mar 2025 18:16:27 +0000
asID:                     7979
IP address blocks:        108.165.69.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 07 Feb 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:3d:52:05:41:91:d4:6b:08:39:e9:1d:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Dec 17 19:16:27 2024 GMT
            Not After : Mar 17 18:16:27 2025 GMT
        Subject: CN=a33359c4-6a87-4aec-8a99-5701a6fd1062
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:d7:d4:16:6f:cb:6f:28:e4:3e:16:13:8a:f1:
                    89:8f:88:ee:10:87:86:80:a0:41:cf:bc:b1:62:dd:
                    da:fb:92:df:49:5c:e5:f1:93:67:f2:cd:5b:5d:7a:
                    e6:ef:73:22:1c:02:c2:69:eb:56:67:ea:17:c0:ae:
                    cc:a3:53:44:2d:df:59:6a:75:79:da:12:65:33:76:
                    bb:6a:7a:31:01:20:9a:fe:3a:57:28:d2:14:4c:8f:
                    9d:6a:4e:4c:83:ed:3b:5d:8e:62:10:40:57:f4:1f:
                    a1:c8:a8:5f:ba:7a:f6:02:03:56:f7:66:91:75:00:
                    18:af:b4:43:b0:37:a4:17:ce:d9:97:d4:56:98:96:
                    af:49:70:f5:ae:09:61:6e:df:75:ca:6e:a9:a5:6f:
                    b5:ad:32:49:ec:3e:22:b1:2e:d5:96:99:aa:53:70:
                    27:8c:57:e4:cd:a6:3e:04:01:c3:bd:8a:0c:9b:9b:
                    fa:1d:fd:35:2c:97:44:e1:78:a0:5c:60:3e:23:ec:
                    ad:c6:1c:11:3b:a8:02:34:dd:a7:ab:f7:59:65:dd:
                    e5:ba:da:c3:a6:17:59:b4:9d:d3:a8:bc:42:c5:6a:
                    08:c8:35:9c:8e:3e:8c:57:91:83:74:2e:84:06:74:
                    c0:f2:44:57:cc:0a:86:90:ca:20:13:20:67:5a:2b:
                    18:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:D6:B9:CD:F3:48:98:33:6E:A8:57:C0:EE:3A:4C:38:B8:66:B0:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/794e595d-97cd-32aa-8bc3-4db5b70a797b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.69.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:b6:e4:e9:52:8b:b8:7b:c6:2a:48:31:4e:92:f8:1a:8e:23:
         0d:95:40:a6:60:56:61:8e:44:6e:2a:b6:34:53:af:79:90:cb:
         87:75:60:79:00:3d:2b:58:cd:b9:09:f2:ee:eb:22:4b:c9:39:
         f4:ca:5e:fa:ae:7b:7f:7b:68:ab:71:d4:d8:a7:9e:a3:73:11:
         36:7b:4a:22:07:fd:b7:cf:c8:9a:50:55:f0:61:c6:ef:05:4b:
         73:11:bb:5a:6d:78:af:43:63:87:53:03:32:ce:8a:0c:28:cd:
         53:24:2c:5a:86:cd:78:cd:83:15:59:64:9d:11:1e:77:d8:68:
         04:82:b3:1f:ea:a6:f3:9a:57:81:39:c9:f1:8b:48:1f:3f:2c:
         49:c5:74:c7:f9:67:dc:0d:d8:56:85:0b:35:3e:cb:38:14:ae:
         fa:ed:b6:e1:7a:5d:1f:e6:98:cb:7a:e0:ab:b5:5b:ea:89:9f:
         66:8a:2a:75:f4:e3:c8:12:84:c2:49:95:e9:c0:f1:bd:b7:49:
         a2:76:e6:1c:73:53:9d:77:5f:dd:fd:2b:72:1e:b0:10:b1:31:
         34:fe:78:3e:29:85:7e:a3:e0:2a:ff:97:ec:f8:4f:37:8d:2f:
         8a:b5:fd:e8:cd:02:97:62:05:94:d8:0e:45:23:d6:c9:90:eb:
         56:78:21:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:50:01 2025 by rpki-client