Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/91dfef52-b4dc-3561-8384-4763a863db3b.roa
File:                     91dfef52-b4dc-3561-8384-4763a863db3b.roa (raw, json)
Hash identifier:          0iDYXy9e5/EtZHFeVS64zP0OfoxhC2OfLu7qwr2Gjgg=
Subject key identifier:   E1:03:E6:6C:8D:3E:7C:82:0F:7F:45:E2:7C:BF:55:51:24:AF:21:B3
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F432858479EDBD90C9944D075106BBBC0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/91dfef52-b4dc-3561-8384-4763a863db3b.roa
Signing time:             Tue 22 Oct 2024 01:00:31 +0000
ROA not before:           Tue 22 Oct 2024 01:00:31 +0000
ROA not after:            Mon 20 Jan 2025 02:00:31 +0000
asID:                     26548
IP address blocks:        108.165.77.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:9e:db:d9:0c:99:44:d0:75:10:6b:bb:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Oct 22 01:00:31 2024 GMT
            Not After : Jan 20 02:00:31 2025 GMT
        Subject: CN=c5133fbc-c837-47b7-ba02-ab58bc9e5b0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:b9:1d:c4:a4:9b:99:41:1e:c9:97:a6:25:f5:
                    38:2f:c1:6d:76:d3:6c:7c:bb:15:aa:eb:d7:c7:24:
                    d3:be:62:47:62:d5:5b:5e:8e:cf:6d:27:3c:d1:d6:
                    a7:5b:f1:10:b9:18:cf:42:54:12:39:d7:26:33:d7:
                    f9:cd:93:32:f0:c4:91:0c:f4:16:0d:2e:34:1a:e5:
                    69:10:5e:eb:bd:f1:de:66:96:3d:55:eb:f0:e0:17:
                    16:87:d7:47:80:44:89:b1:d8:e2:55:89:2b:11:90:
                    cb:5c:59:e7:fe:48:1a:00:cf:72:e4:d3:6e:7d:57:
                    80:6c:ef:31:8e:93:a0:cc:0a:c4:d9:e6:aa:bb:b9:
                    7b:0c:29:cf:b2:1a:85:c8:b3:2b:2a:94:e7:fa:f7:
                    36:5e:3f:1c:b0:ee:fe:ee:9e:34:ed:ed:76:b2:29:
                    0a:41:16:29:83:70:9c:97:c9:05:12:07:83:9e:77:
                    79:59:a1:43:f4:6e:85:50:3f:51:70:61:dc:20:7c:
                    df:d0:cb:3a:71:71:1f:a8:f4:1a:36:71:6b:fc:cf:
                    fa:89:62:f7:31:5d:a1:43:e2:b0:d7:6b:02:80:cf:
                    52:43:fa:e7:a5:12:db:6c:5d:52:ca:77:01:d6:69:
                    2c:d7:71:06:b5:92:db:7a:86:58:65:0c:13:10:ca:
                    5c:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:03:E6:6C:8D:3E:7C:82:0F:7F:45:E2:7C:BF:55:51:24:AF:21:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/91dfef52-b4dc-3561-8384-4763a863db3b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.77.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:16:1a:68:af:63:21:cb:b1:75:fb:d5:ef:77:f9:ef:19:9e:
         bf:0f:8c:1c:af:d0:85:c2:60:8a:32:50:cd:12:dc:0a:52:fa:
         b8:70:cb:c9:3a:1d:81:11:3f:3c:b4:d8:fd:f8:b3:d0:d0:a6:
         8b:0b:a2:59:88:53:91:e1:15:a5:47:75:ac:49:a5:8a:a2:a4:
         0b:90:da:5a:26:f3:5b:c1:c5:4f:c4:2c:0c:bb:8b:2f:ed:64:
         0d:e7:9e:0f:0f:67:87:5a:5a:2d:ee:00:75:1a:59:26:35:4d:
         2d:03:5e:04:27:88:0d:76:29:42:92:1c:33:97:d4:f8:b3:c6:
         08:44:59:19:33:14:d0:a3:3f:15:4f:b1:7c:fe:ad:b2:f3:6a:
         7a:92:49:9b:be:bf:b1:42:a9:f2:7f:c1:68:fa:63:8c:fb:c9:
         cf:ed:f4:15:d7:5c:ac:fd:c4:0d:d2:24:af:fe:57:68:a1:9c:
         24:62:51:c8:61:76:3d:51:58:9b:d5:45:f1:99:c3:d5:59:40:
         45:f4:90:c9:56:52:36:6c:c7:6d:aa:a8:74:62:2b:b9:b9:a0:
         0d:54:43:41:8d:a8:3e:29:91:90:d8:98:ac:ab:25:72:fe:d1:
         46:b0:1a:ba:12:ff:48:a8:ad:87:f9:11:90:09:62:b2:fb:3e:
         b2:2e:71:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:18:11 2024 by rpki-client on console-fra.rpki-client.org