Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/7f62a312-33e6-3264-a815-8df2f04489bc.roa
File:                     7f62a312-33e6-3264-a815-8df2f04489bc.roa (raw, json)
Hash identifier:          k1ZyCIO87iEfeNEDLYnePCHx2Mzs9uUyZxd7HVUSvCE=
Subject key identifier:   46:6D:CE:46:9D:79:3E:54:4D:AB:44:51:EB:54:F7:AD:0A:50:7E:A8
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285845B7B37D1FC6162773BD26FE00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/7f62a312-33e6-3264-a815-8df2f04489bc.roa
Signing time:             Tue 30 Apr 2024 13:00:34 +0000
ROA not before:           Tue 30 Apr 2024 13:00:34 +0000
ROA not after:            Mon 29 Jul 2024 13:00:34 +0000
asID:                     9009
IP address blocks:        108.165.88.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:b7:b3:7d:1f:c6:16:27:73:bd:26:fe:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Apr 30 13:00:34 2024 GMT
            Not After : Jul 29 13:00:34 2024 GMT
        Subject: CN=10f1cfd3-b63c-4ca0-9748-05d7ba452a52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:5e:16:8e:cb:23:f4:9f:a8:f6:05:16:a0:91:
                    c0:7b:d4:9d:d8:26:65:0d:5e:90:a0:7b:4a:8d:60:
                    f1:8d:34:0a:8b:fb:83:b3:77:20:07:47:2f:09:f7:
                    1d:94:be:d1:af:97:ec:64:18:e0:f5:e6:b9:a5:ef:
                    f2:05:a3:76:74:50:f2:56:8f:7e:c5:00:9c:64:17:
                    67:0c:18:0c:87:00:fd:3b:df:fd:18:49:6d:93:5c:
                    33:c7:d3:e1:75:26:c8:05:31:64:57:6f:e8:9a:80:
                    b7:36:e9:6d:64:b7:7b:bd:32:41:89:c5:b9:86:97:
                    4e:1a:cd:2a:17:c2:fe:d3:ea:3e:43:78:f6:4e:8b:
                    2f:a7:b8:87:04:0c:ab:42:a3:29:7d:b6:c7:1b:e7:
                    a3:a4:af:ae:c0:76:ae:38:28:9f:95:ed:a7:69:29:
                    d9:ee:53:a1:0b:0a:bb:c9:de:0b:2f:57:ed:86:b1:
                    20:f2:e5:9c:7b:a2:d0:e2:a5:5a:da:65:31:69:ef:
                    b1:f2:51:93:34:1a:eb:27:a8:53:d4:a6:04:0a:ee:
                    02:56:ca:6d:79:8a:01:e4:bb:ca:88:db:f4:2b:9d:
                    82:31:13:3e:01:85:ff:79:f5:2d:4c:82:43:25:25:
                    27:15:58:83:bd:c4:93:39:7f:29:da:8c:99:2a:87:
                    0d:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:6D:CE:46:9D:79:3E:54:4D:AB:44:51:EB:54:F7:AD:0A:50:7E:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/7f62a312-33e6-3264-a815-8df2f04489bc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.88.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:6b:6a:e8:8c:cd:18:74:6a:e4:dc:eb:26:e4:2a:21:54:20:
         7c:b7:f6:6e:71:b6:b2:aa:ef:81:2a:a0:a2:7c:1a:68:f0:60:
         45:22:88:55:92:04:c0:1b:bd:1c:2d:db:82:bc:ad:ac:c4:5b:
         93:08:e7:72:d5:ae:95:7e:38:de:28:40:a9:be:a0:43:86:87:
         fe:c6:81:c5:e0:4c:a3:e5:2a:55:17:5e:cc:0a:67:d0:e9:88:
         32:00:13:86:bd:70:ce:f1:92:9c:04:f5:54:75:8a:ca:3e:94:
         50:03:7c:cd:a6:24:60:b5:2c:48:d1:bb:e5:22:1d:8d:b3:51:
         c5:77:bd:49:0d:7d:8c:1f:64:f0:61:ab:4b:b7:16:3c:6b:72:
         87:06:3f:7a:04:0f:00:10:7f:cf:ba:bc:8f:66:04:91:7d:9b:
         a6:75:9c:f3:e8:2b:24:61:65:3c:be:bd:48:61:af:28:bd:60:
         79:03:dd:6e:31:60:b6:9b:41:89:14:ca:53:fe:e3:48:5c:0e:
         50:fe:2e:c2:8a:dd:68:f5:db:3a:ce:cd:06:c8:d1:58:66:70:
         83:fd:ff:25:0e:4b:62:4e:00:f6:bc:cb:9b:33:1c:8c:f9:08:
         44:7f:e2:c7:73:c8:e4:9c:60:f3:a1:f3:2f:69:38:0e:fc:de:
         4d:4d:6f:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 02:55:51 2024 by rpki-client on console-fra.rpki-client.org