Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/7ab2678c-54aa-3d98-a18d-23d851082af3.roa
File:                     7ab2678c-54aa-3d98-a18d-23d851082af3.roa (raw, json)
Hash identifier:          zSo2FX7hxNDmIAYfQArCkN28kGDkYNHNvzqDmNsGkMo=
Subject key identifier:   E3:BB:A5:7E:9D:8F:3C:FA:73:41:72:4A:E2:68:14:46:92:32:C7:6C
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584548081E874B1684B1B0DF0BD8
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/7ab2678c-54aa-3d98-a18d-23d851082af3.roa
Signing time:             Thu 21 Mar 2024 13:00:33 +0000
ROA not before:           Thu 21 Mar 2024 13:00:33 +0000
ROA not after:            Wed 19 Jun 2024 13:00:33 +0000
asID:                     20473
IP address blocks:        108.165.150.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:48:08:1e:87:4b:16:84:b1:b0:df:0b:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Mar 21 13:00:33 2024 GMT
            Not After : Jun 19 13:00:33 2024 GMT
        Subject: CN=0fa302f1-0e4a-4dcc-ab92-55f2529d8638
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:fd:25:7a:26:ff:56:28:14:ff:d9:94:02:86:
                    38:d4:b1:26:7a:d2:c4:77:c2:8e:51:6a:58:00:2f:
                    06:ad:e2:8e:3e:a2:8e:a0:e1:c1:49:ba:0c:de:39:
                    2a:04:7d:df:3b:9b:a5:66:0d:b5:83:99:99:56:3b:
                    8f:ea:a5:44:c2:3b:6d:24:76:9f:3c:e6:72:71:e1:
                    a4:8e:93:9e:0a:32:35:99:a1:e0:85:84:31:98:e5:
                    3c:5d:59:f2:2a:91:ae:44:f3:5f:6a:40:c7:5e:80:
                    1c:c6:7b:ff:bd:c5:c9:03:51:b1:9d:c8:b6:4d:d7:
                    d5:07:7b:12:dc:49:77:0c:2c:01:97:5d:60:7d:3e:
                    cd:55:7d:73:f7:d7:e2:7b:de:75:2d:10:c2:50:e5:
                    66:91:f4:c5:ce:fd:88:75:b0:6f:f0:34:04:9a:e3:
                    19:f5:24:8d:87:62:8d:e7:02:fa:af:b6:65:74:9d:
                    ad:0e:31:5c:a5:b6:38:ce:a8:3b:50:85:3c:d5:08:
                    ab:23:53:4d:b3:a8:10:10:c7:5d:d5:83:cc:61:1e:
                    1c:67:e5:b6:1e:cb:0f:9b:b5:cd:7b:29:ae:13:c9:
                    4c:ad:93:55:46:c7:4c:48:d3:ac:0b:77:e6:65:e1:
                    00:17:c4:f9:b7:e8:a0:73:86:13:fe:29:50:55:b5:
                    54:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:BB:A5:7E:9D:8F:3C:FA:73:41:72:4A:E2:68:14:46:92:32:C7:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/7ab2678c-54aa-3d98-a18d-23d851082af3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.150.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:54:04:f9:3f:14:2e:64:e1:af:e3:5c:2a:a3:aa:c2:a6:c3:
         08:3e:ad:90:02:00:19:86:5e:44:b5:1d:e9:94:71:72:d7:d8:
         1a:ad:91:15:b0:25:4d:ec:ce:3a:22:0d:9c:77:c8:0d:be:53:
         88:e4:1d:7a:0e:30:c5:b6:f3:dd:58:da:ec:6e:56:e6:d7:7d:
         f0:0d:26:1c:56:47:fc:38:3a:51:d3:23:49:24:e1:91:81:ad:
         da:6a:16:e1:b9:c8:2c:8a:15:0f:a2:1a:c7:9a:52:50:ae:58:
         77:5e:67:44:d0:e5:1c:5b:e1:85:0a:0e:0f:f9:9a:85:ce:be:
         a5:dc:fa:60:37:a8:46:f8:c4:ce:1b:79:2a:c2:26:27:ee:3f:
         6f:96:c8:a8:64:6b:c0:ab:86:ab:0b:71:ee:f8:3c:f9:86:61:
         44:4f:8b:33:d5:d5:9e:70:a0:a8:95:8f:39:66:ea:c8:21:9c:
         17:bb:c9:3e:5a:a0:2c:61:dd:14:9c:69:dc:ab:32:8e:e0:c7:
         9c:f7:15:05:7e:ac:4d:f3:46:98:03:72:a2:28:ad:fa:97:1c:
         c3:2a:88:f9:4d:61:c7:4f:89:90:45:c0:f7:9a:2d:a7:33:f1:
         7a:bb:81:04:2e:7a:47:57:d3:95:b4:fe:27:59:3e:3f:7e:bb:
         df:bc:95:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 11:11:52 2024 by rpki-client on console-ams.rpki-client.org