Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/8aacd363-019e-35bc-b0f6-7bd7f8fda15b.roa
File:                     8aacd363-019e-35bc-b0f6-7bd7f8fda15b.roa (raw, json)
Hash identifier:          DPP/0Z3rB7RqWSPmBcbnYRrZFWwpYgR0UoIyXvW5dME=
Subject key identifier:   5D:DA:2A:FE:4B:72:2E:33:2C:05:6B:A4:81:92:BD:99:AB:AE:3F:B0
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584886B075D5123D0FBAEA26FAC0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/8aacd363-019e-35bc-b0f6-7bd7f8fda15b.roa
Signing time:             Mon 13 Jan 2025 02:00:40 +0000
ROA not before:           Mon 13 Jan 2025 02:00:40 +0000
ROA not after:            Sun 13 Apr 2025 01:00:40 +0000
asID:                     62240
IP address blocks:        108.165.231.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:86:b0:75:d5:12:3d:0f:ba:ea:26:fa:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jan 13 02:00:40 2025 GMT
            Not After : Apr 13 01:00:40 2025 GMT
        Subject: CN=e827715f-8a61-4dc4-affb-123a98c3d199
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:83:12:9a:5c:5b:0e:7a:55:52:a5:7e:8f:bb:
                    c7:20:92:31:ea:0f:ff:51:89:1c:73:47:57:34:32:
                    b8:63:b1:98:6b:98:da:20:ef:33:f6:bd:1f:a6:01:
                    02:d0:a6:e4:52:05:dd:65:5d:34:74:04:bb:0e:1c:
                    ca:65:a6:09:05:cf:de:85:52:1f:91:22:d7:0f:e2:
                    6f:20:e0:0c:18:72:f6:b8:42:19:0b:cf:f4:c2:b4:
                    34:20:46:91:f4:4a:57:49:c4:db:69:82:e5:ef:ff:
                    cd:c5:ed:bd:a7:9e:73:35:80:17:a2:35:21:05:e4:
                    db:f3:0e:74:1c:0a:62:b7:ba:cd:69:32:df:23:6f:
                    ae:ee:d6:04:ba:a5:c3:52:0b:08:2a:4d:54:8f:26:
                    a2:46:7e:bf:85:6a:44:ab:17:eb:61:bb:8f:d3:8d:
                    73:7a:e7:34:b7:ea:37:c0:de:25:5d:39:e9:85:7b:
                    4c:c0:8f:28:e1:f2:c5:1b:06:99:86:8e:28:0c:fb:
                    9d:36:54:1d:7d:da:1f:08:d7:65:14:ad:a4:c4:65:
                    4d:6e:9b:20:c4:1d:6b:86:6e:15:6e:69:a4:6b:05:
                    23:4e:05:c1:98:f3:c8:0f:67:7c:88:ee:e7:81:b5:
                    30:40:b6:fa:73:5b:cb:4b:86:80:e3:77:eb:5c:e0:
                    fc:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:DA:2A:FE:4B:72:2E:33:2C:05:6B:A4:81:92:BD:99:AB:AE:3F:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/8aacd363-019e-35bc-b0f6-7bd7f8fda15b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.231.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:e1:b7:24:61:15:7b:23:1a:7b:02:e9:91:9c:c7:89:5f:2b:
         b7:d0:24:46:df:69:46:bd:26:d2:b1:17:5e:f0:63:e2:14:18:
         79:c9:de:b6:99:38:60:75:91:10:3b:8f:32:20:d6:eb:ce:46:
         d9:9e:13:6f:28:c1:b9:58:2c:40:57:e3:24:8d:9d:00:fc:b7:
         95:d8:e6:18:6b:bc:2b:cb:cc:d7:a5:58:68:48:70:21:ba:36:
         5e:38:7e:81:98:75:b1:9f:52:f9:2b:89:b6:65:d7:be:b9:04:
         38:82:af:ab:3c:80:1a:86:e5:f5:34:11:aa:d1:b8:e6:52:75:
         2f:e8:b5:f2:18:5b:84:ab:24:89:b5:e8:79:0a:48:5b:55:3a:
         d9:c9:38:2f:8e:98:5a:bc:eb:c0:4b:5c:12:6c:f7:2a:6e:89:
         1f:ac:d4:67:8d:46:ab:0d:47:19:72:c9:0c:fc:b4:ca:86:6c:
         c4:a2:50:e5:7f:e6:3c:56:15:af:e3:cc:ea:ef:01:28:95:4c:
         9a:55:2c:ec:b9:5a:29:e2:4b:b5:95:de:c4:22:8b:46:83:d6:
         3a:d6:31:de:68:49:31:7b:7f:32:26:ed:ba:69:31:fa:c2:ff:
         b3:1f:5a:40:f3:94:67:dc:66:02:20:27:5d:ae:62:82:bc:a0:
         fa:7a:b3:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:04:38 2025 by rpki-client