Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/88605374-a0fb-3d44-b715-4a8336f7b311.roa
File:                     88605374-a0fb-3d44-b715-4a8336f7b311.roa (raw, json)
Hash identifier:          +pftopGie06NNE8PZeLBiRL0OgxokiF49ixYDenHPCk=
Subject key identifier:   A8:65:24:E9:D9:67:01:F7:B2:05:80:EA:46:7A:A6:0C:FB:DB:6D:BE
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F432858452C1D48F586821E170F29B850
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/88605374-a0fb-3d44-b715-4a8336f7b311.roa
Signing time:             Mon 11 Mar 2024 13:00:31 +0000
ROA not before:           Mon 11 Mar 2024 13:00:31 +0000
ROA not after:            Sun 09 Jun 2024 13:00:31 +0000
asID:                     21859
IP address blocks:        108.165.158.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:2c:1d:48:f5:86:82:1e:17:0f:29:b8:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Mar 11 13:00:31 2024 GMT
            Not After : Jun  9 13:00:31 2024 GMT
        Subject: CN=24e26a79-bf91-41c8-ac42-5bec60dc7eed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:01:c4:e6:68:09:39:5c:1b:49:30:f2:d4:8a:
                    36:ad:ce:ac:d0:31:a9:a2:dd:da:59:00:a1:64:be:
                    fe:5f:fe:39:fb:d2:57:b0:5b:ef:7e:27:13:fd:47:
                    66:45:60:45:98:56:34:c4:b8:18:f6:42:36:41:86:
                    6e:2e:c9:4b:4f:cf:5d:6c:4e:06:38:bd:32:ca:b6:
                    99:be:2e:62:ca:82:24:46:99:99:13:f0:23:c2:d9:
                    04:53:bb:29:aa:c4:09:cb:95:97:9d:33:6a:c7:29:
                    3b:e1:a1:64:65:91:4a:38:d7:69:88:39:e6:af:87:
                    41:6f:87:10:f7:b5:8e:8c:cc:21:fc:67:4f:cd:a2:
                    3f:34:a2:e6:9c:fd:96:94:a8:96:54:45:b3:45:35:
                    b3:e0:5e:55:d1:8f:7a:85:66:ed:5d:06:55:98:6d:
                    99:4a:1b:5c:39:0d:6c:6f:91:13:9a:1f:06:86:50:
                    57:53:00:db:06:e1:a1:7a:45:b6:07:77:0e:e4:c3:
                    a2:a9:86:80:f4:16:4f:a0:85:85:92:aa:d0:b4:4c:
                    9a:53:fb:86:e3:da:cc:43:ca:99:33:fe:6f:c3:e2:
                    04:84:fd:f9:b9:66:cb:4c:ac:d5:26:16:9f:94:7b:
                    6e:1f:eb:88:18:5f:d1:de:76:5d:12:2f:0d:4c:b8:
                    b6:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:65:24:E9:D9:67:01:F7:B2:05:80:EA:46:7A:A6:0C:FB:DB:6D:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/88605374-a0fb-3d44-b715-4a8336f7b311.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.158.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:12:de:7b:31:09:36:cb:b6:42:86:6f:98:f9:01:8b:99:b6:
         00:79:d3:30:89:b3:9c:4b:23:b8:22:2d:6d:8c:f7:b4:80:e6:
         fe:11:ee:2a:75:fc:18:c1:36:d2:7b:51:8f:ef:b6:fa:64:c6:
         f7:26:12:fc:7b:47:e3:14:34:29:d1:6d:43:df:bd:a7:c1:55:
         97:d7:99:41:b9:b4:47:2f:c6:f8:38:75:21:8e:ea:2e:37:95:
         a7:51:71:f9:80:03:57:26:e0:2c:c2:21:53:46:ea:8e:a6:9e:
         35:78:03:6f:fb:e9:a8:57:33:1a:51:3d:06:56:a1:6a:10:72:
         9d:2e:ba:72:d1:85:f2:e8:29:40:48:16:95:70:09:54:6f:31:
         d7:b6:3f:d4:52:79:3a:58:e1:19:96:5d:c5:ea:47:55:9e:9e:
         5c:19:c2:0e:47:5b:2b:d6:2c:c7:c3:6c:2a:08:80:b1:bc:4a:
         4c:04:48:d4:fc:c7:55:ec:d8:7e:0c:cf:b5:9b:3b:22:8f:77:
         8b:cb:13:06:d2:43:a2:e9:22:18:95:f3:9a:c3:31:ca:2a:90:
         ed:e9:a4:41:1d:32:0a:3c:31:96:c6:f9:9f:63:5e:ac:fa:ce:
         5b:a0:01:1c:14:b9:06:f5:77:4b:bc:d9:ab:ec:3f:58:76:ff:
         93:3f:57:4d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEUsHUj1hoIeFw8puFAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI0MDMxMTEzMDAzMVoXDTI0MDYwOTEzMDAzMVowLzEtMCsGA1UEAxMk
MjRlMjZhNzktYmY5MS00MWM4LWFjNDItNWJlYzYwZGM3ZWVkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgAHE5mgJOVwbSTDy1Io2rc6s0DGpot3aWQCh
ZL7+X/45+9JXsFvvficT/UdmRWBFmFY0xLgY9kI2QYZuLslLT89dbE4GOL0yyraZ
vi5iyoIkRpmZE/AjwtkEU7spqsQJy5WXnTNqxyk74aFkZZFKONdpiDnmr4dBb4cQ
97WOjMwh/GdPzaI/NKLmnP2WlKiWVEWzRTWz4F5V0Y96hWbtXQZVmG2ZShtcOQ1s
b5ETmh8GhlBXUwDbBuGhekW2B3cO5MOiqYaA9BZPoIWFkqrQtEyaU/uG49rMQ8qZ
M/5vw+IEhP35uWbLTKzVJhaflHtuH+uIGF/R3nZdEi8NTLi2GQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKhlJOnZZwH3sgWA6kZ6pgz7222+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvODg2MDUzNzQtYTBmYi0z
ZDQ0LWI3MTUtNGE4MzM2ZjdiMzExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKWeMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC4S3nsxCTbLtkKGb5j5AYuZtgB50zCJs5xLI7giLW2M97SA5v4R7ip1
/BjBNtJ7UY/vtvpkxvcmEvx7R+MUNCnRbUPfvafBVZfXmUG5tEcvxvg4dSGO6i43
ladRcfmAA1cm4CzCIVNG6o6mnjV4A2/76ahXMxpRPQZWoWoQcp0uunLRhfLoKUBI
FpVwCVRvMde2P9RSeTpY4RmWXcXqR1WenlwZwg5HWyvWLMfDbCoIgLG8SkwESNT8
x1Xs2H4Mz7WbOyKPd4vLEwbSQ6LpIhiV85rDMcoqkO3ppEEdMgo8MZbG+Z9jXqz6
zlugARwUuQb1d0u82avsP1h2/5M/V00=
-----END CERTIFICATE-----
Generated at Thu May 2 20:21:15 2024 by rpki-client on console-ams.rpki-client.org