Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/7b485731-1d51-3943-acc4-974602c8c083.roa
File:                     7b485731-1d51-3943-acc4-974602c8c083.roa (raw, json)
Hash identifier:          lhQ3Raa+hfK4RIP+AmBDnBkG4RHUldf15CrezHRJAWM=
Subject key identifier:   62:65:9A:C6:CB:D1:60:D1:BF:7F:FC:37:D2:B0:8E:B4:E5:29:53:BF
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584511B5789FB831EF5BEEAE6500
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/7b485731-1d51-3943-acc4-974602c8c083.roa
Signing time:             Sat 02 Mar 2024 02:00:26 +0000
ROA not before:           Sat 02 Mar 2024 02:00:26 +0000
ROA not after:            Fri 31 May 2024 01:00:26 +0000
asID:                     25846
IP address blocks:        108.165.113.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:11:b5:78:9f:b8:31:ef:5b:ee:ae:65:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Mar  2 02:00:26 2024 GMT
            Not After : May 31 01:00:26 2024 GMT
        Subject: CN=57c6e537-e3a6-4bb7-861d-ec01b3b9c5bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:c5:14:25:cd:96:42:ac:35:aa:3e:c3:b0:3b:
                    65:f6:50:57:bb:1d:93:03:d1:01:57:17:cd:aa:22:
                    69:c4:af:65:b7:93:8b:c3:c0:40:c6:b4:b1:49:ec:
                    62:fb:f5:6a:86:c1:c7:6b:76:be:d7:4f:59:8e:e1:
                    a0:78:bb:a6:10:3f:14:3e:22:56:ce:67:80:a7:36:
                    62:2c:bc:23:cb:d5:80:12:8e:91:79:89:0b:99:b0:
                    b2:20:e9:a2:e9:c1:3a:5a:92:35:2d:e0:09:55:71:
                    57:73:ab:aa:42:70:03:7c:dc:38:2e:3c:52:4f:ae:
                    e1:46:89:10:2e:ea:be:29:a7:8b:53:4d:24:61:ea:
                    ec:60:29:0e:c9:5f:82:0f:0f:25:7f:b9:ef:58:f5:
                    45:e0:72:68:48:ff:9b:90:47:c2:3d:05:af:15:d3:
                    9c:bd:20:82:5b:d1:19:98:3e:2f:0b:1c:cd:fc:81:
                    83:4b:ac:d4:58:a7:c1:48:25:f5:b6:95:ac:63:fc:
                    20:5b:6d:81:5c:08:ca:af:22:fe:98:13:b3:d2:c7:
                    35:9f:61:25:27:3e:c0:45:39:d1:c5:ff:ca:62:33:
                    be:24:89:63:0f:a6:2e:5a:31:d2:56:57:f4:8b:45:
                    e2:ed:3b:a9:e3:c6:f1:3b:8d:48:62:00:c8:6f:4d:
                    c2:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:65:9A:C6:CB:D1:60:D1:BF:7F:FC:37:D2:B0:8E:B4:E5:29:53:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/7b485731-1d51-3943-acc4-974602c8c083.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.113.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:c5:52:a1:4d:21:45:f9:30:bc:ad:92:a1:6b:78:cb:29:b5:
         a2:ab:c9:79:85:f3:26:0d:84:58:a6:d4:db:36:72:4b:63:e9:
         88:ee:a3:e4:95:75:4f:b5:9f:7e:f4:6a:56:ca:08:fe:4f:ff:
         4a:42:70:c5:e8:5e:92:cf:2e:6b:7d:35:c7:cb:18:a5:80:c0:
         7e:ab:62:30:c6:ac:c4:01:f2:55:b1:62:2c:db:06:cf:5a:8e:
         d6:71:d4:d7:ca:63:f4:96:c5:9d:24:0e:e0:83:80:76:e8:03:
         48:56:ac:8b:e4:60:b6:54:85:2c:8f:ac:20:16:14:cd:6d:57:
         28:d3:a1:af:23:9d:93:a3:05:6d:67:73:7b:1f:cd:87:1f:55:
         ef:0a:91:24:6d:03:f2:9c:fa:db:62:1d:ca:7a:f5:19:c6:fb:
         8c:f4:99:2a:30:64:09:d2:59:1b:e4:e5:d2:92:74:5d:5c:10:
         4f:e2:7a:32:0f:09:68:7a:68:94:d9:59:88:f9:b3:d5:18:a8:
         cd:4d:a0:7f:64:28:db:8a:36:26:f0:71:66:f2:f4:d8:55:72:
         a4:e9:ed:d3:f5:73:34:66:dd:88:a5:cc:16:2e:c8:67:ae:06:
         23:c4:34:2e:17:68:37:37:cb:11:69:b6:8f:35:61:bd:cd:dd:
         6a:13:a8:a9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEURtXifuDHvW+6uZQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI0MDMwMjAyMDAyNloXDTI0MDUzMTAxMDAyNlowLzEtMCsGA1UEAxMk
NTdjNmU1MzctZTNhNi00YmI3LTg2MWQtZWMwMWIzYjljNWJjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkcUUJc2WQqw1qj7DsDtl9lBXux2TA9EBVxfN
qiJpxK9lt5OLw8BAxrSxSexi+/VqhsHHa3a+109ZjuGgeLumED8UPiJWzmeApzZi
LLwjy9WAEo6ReYkLmbCyIOmi6cE6WpI1LeAJVXFXc6uqQnADfNw4LjxST67hRokQ
Luq+KaeLU00kYersYCkOyV+CDw8lf7nvWPVF4HJoSP+bkEfCPQWvFdOcvSCCW9EZ
mD4vCxzN/IGDS6zUWKfBSCX1tpWsY/wgW22BXAjKryL+mBOz0sc1n2ElJz7ARTnR
xf/KYjO+JIljD6YuWjHSVlf0i0Xi7Tup48bxO41IYgDIb03C5wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGJlmsbL0WDRv3/8N9KwjrTlKVO/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvN2I0ODU3MzEtMWQ1MS0z
OTQzLWFjYzQtOTc0NjAyYzhjMDgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKVxMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGbFUqFNIUX5MLytkqFreMsptaKryXmF8yYNhFim1Ns2cktj6Yjuo+SV
dU+1n370albKCP5P/0pCcMXoXpLPLmt9NcfLGKWAwH6rYjDGrMQB8lWxYizbBs9a
jtZx1NfKY/SWxZ0kDuCDgHboA0hWrIvkYLZUhSyPrCAWFM1tVyjToa8jnZOjBW1n
c3sfzYcfVe8KkSRtA/Kc+ttiHcp69RnG+4z0mSowZAnSWRvk5dKSdF1cEE/iejIP
CWh6aJTZWYj5s9UYqM1NoH9kKNuKNibwcWby9NhVcqTp7dP1czRm3YilzBYuyGeu
BiPENC4XaDc3yxFpto81Yb3N3WoTqKk=
-----END CERTIFICATE-----
Generated at Fri May 3 21:45:41 2024 by rpki-client on console-fra.rpki-client.org