Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/90083c0c-bb73-3a86-a832-9fa0277e8b2a.roa
File:                     90083c0c-bb73-3a86-a832-9fa0277e8b2a.roa (raw, json)
Hash identifier:          pwhcDkta0R4k88KzCtYT915YjXmxmeYYdYPE37rDsEY=
Subject key identifier:   D4:75:56:A4:48:81:98:B9:56:6A:A3:13:BA:5F:6E:B4:0C:C7:1B:49
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285844D71520E9F4D336BFAA091600
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/90083c0c-bb73-3a86-a832-9fa0277e8b2a.roa
Signing time:             Sat 10 Feb 2024 02:00:26 +0000
ROA not before:           Sat 10 Feb 2024 02:00:26 +0000
ROA not after:            Fri 10 May 2024 01:00:26 +0000
asID:                     212238
IP address blocks:        108.165.79.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:d7:15:20:e9:f4:d3:36:bf:aa:09:16:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Feb 10 02:00:26 2024 GMT
            Not After : May 10 01:00:26 2024 GMT
        Subject: CN=295b9ee3-f425-4ea2-a4e9-ea16ebafcdb8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:94:04:1a:7f:04:8e:f9:ae:fa:da:c7:7b:f5:
                    97:4e:64:9c:5e:71:9e:1e:a9:4b:b0:98:df:66:21:
                    a3:b5:48:3b:6d:9d:67:b0:4d:7e:a1:50:e2:b8:bb:
                    52:64:cf:99:47:1f:05:cb:ec:00:1b:00:1b:74:23:
                    c3:fc:b1:d0:9a:bf:ba:26:c9:c2:05:d3:ff:68:08:
                    52:ae:cf:4d:45:75:35:85:5c:f6:d3:3e:f6:b8:62:
                    49:7d:46:ce:1e:16:f3:a7:35:42:aa:6c:aa:39:a1:
                    6c:d1:27:9b:43:17:48:e0:1e:87:23:10:36:2f:08:
                    25:2c:45:26:dc:71:be:c6:26:99:60:92:0c:24:2a:
                    b7:d6:37:03:22:a7:52:22:b0:48:29:24:fb:c4:92:
                    f7:11:78:a9:e2:37:3d:60:f5:d3:5a:e5:47:2a:35:
                    27:21:1b:28:32:30:f7:90:8f:7a:31:fb:6e:68:ed:
                    ab:ab:81:c6:f2:02:9a:ec:9a:0f:3d:b7:b1:d6:4a:
                    78:6b:62:75:72:8f:73:37:2b:a1:d5:35:bb:87:86:
                    bf:78:8f:23:b7:94:5e:d6:eb:6e:ce:80:1c:e2:a7:
                    32:c9:6a:99:88:02:5f:ab:97:01:3f:4b:c4:50:12:
                    aa:31:fe:96:ec:f6:ba:73:81:bb:73:76:ef:77:89:
                    00:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:75:56:A4:48:81:98:B9:56:6A:A3:13:BA:5F:6E:B4:0C:C7:1B:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/90083c0c-bb73-3a86-a832-9fa0277e8b2a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.79.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:9d:7b:0b:56:b2:bc:90:63:1f:3c:57:c0:99:23:7e:79:a9:
         b4:d3:dc:70:fa:05:4c:02:61:37:73:2d:b5:d9:e4:42:74:0d:
         b7:74:02:04:5d:f8:eb:41:72:40:c8:94:92:9d:7e:ff:a9:62:
         da:0a:56:db:8d:d9:da:13:c7:ee:bc:62:fe:76:0d:55:97:9c:
         c4:86:32:aa:6a:a4:b9:c2:58:a4:8b:1f:f6:d8:14:ea:a6:ba:
         2f:6a:6e:c0:e3:8c:32:ed:93:82:2e:67:21:d8:fa:74:1f:d4:
         18:d3:b9:dd:18:fd:69:ff:67:25:7f:63:b7:fd:66:d9:72:19:
         a9:3c:19:75:0f:cd:db:3d:f6:5d:09:07:1b:9e:74:28:23:8c:
         52:de:e8:cc:cc:35:1b:30:03:32:9a:53:8e:5a:33:2b:2c:0b:
         09:8f:d5:d6:b0:d9:69:72:21:81:a6:94:ad:e1:a6:b1:bb:a1:
         5c:9d:c0:6d:38:e9:4c:c7:fe:dd:92:41:b0:0b:d0:8d:a3:2e:
         06:d7:8d:a6:af:40:fa:6a:4b:e9:44:92:1c:7d:76:39:24:53:
         5d:34:38:5b:80:5e:1c:4e:09:bc:3d:92:cb:c7:0d:b6:70:49:
         b2:e6:58:33:13:2c:bc:34:79:1b:29:dd:ee:3d:13:32:a3:d9:
         f6:a2:a8:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 03:23:09 2024 by rpki-client on console-ams.rpki-client.org