Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/9914f5f3-9c69-394b-a01f-e597788282f7.roa
File:                     9914f5f3-9c69-394b-a01f-e597788282f7.roa (raw, json)
Hash identifier:          RcBqPI4alZxOgGKrQ/zbMPykcEGQk+KleGqCORvu+6M=
Subject key identifier:   DD:F6:A0:BE:61:88:8E:5F:74:76:32:DA:15:AB:EA:28:49:7F:23:EF
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285847888655C7CC4117060540AE00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/9914f5f3-9c69-394b-a01f-e597788282f7.roa
Signing time:             Mon 14 Oct 2024 01:00:31 +0000
ROA not before:           Mon 14 Oct 2024 01:00:31 +0000
ROA not after:            Sun 12 Jan 2025 02:00:31 +0000
asID:                     26042
IP address blocks:        108.165.178.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:88:86:55:c7:cc:41:17:06:05:40:ae:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Oct 14 01:00:31 2024 GMT
            Not After : Jan 12 02:00:31 2025 GMT
        Subject: CN=95435ea0-05c8-44b8-b7ce-a17ba0434c96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:eb:a0:6f:4c:76:bf:f0:0f:ac:a6:b8:f1:01:
                    cf:c0:95:16:36:61:d6:05:16:27:eb:65:fa:59:68:
                    a4:e9:cd:bc:b9:f4:70:d0:13:0d:11:fc:76:57:81:
                    5f:b6:cb:44:00:59:dd:7b:69:82:34:8b:b0:9b:8d:
                    69:12:c7:06:4f:c4:a9:bd:2a:6c:c7:e1:2f:ce:99:
                    e4:a5:6f:07:fb:11:36:9a:91:af:4a:2d:22:d3:88:
                    1c:62:44:95:65:4e:6d:9b:ee:bb:89:10:ef:d3:01:
                    9b:08:75:73:b9:08:62:f1:cb:48:d3:dd:52:52:a6:
                    06:3a:9d:03:bc:f9:62:93:c6:47:0c:54:1b:3f:bd:
                    1d:71:de:9c:0b:82:30:d7:78:7c:84:53:01:b2:cc:
                    f2:be:38:e0:65:1e:2e:fe:29:13:75:f8:87:d1:07:
                    91:af:cc:2c:e4:41:f6:c4:e4:57:74:25:44:b4:62:
                    0f:3f:7d:61:b8:c2:29:9c:b6:ea:13:52:54:31:1c:
                    53:17:8e:df:8b:24:ba:63:52:1c:31:5e:16:89:30:
                    f0:f4:e8:b4:23:49:aa:61:dc:47:73:cc:4b:91:54:
                    99:13:60:5e:7d:15:46:36:dd:7a:09:07:85:27:d6:
                    16:0e:c2:db:b1:62:9b:b8:b2:ff:8b:11:fc:d5:90:
                    45:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:F6:A0:BE:61:88:8E:5F:74:76:32:DA:15:AB:EA:28:49:7F:23:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/9914f5f3-9c69-394b-a01f-e597788282f7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.178.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:75:9f:0b:83:45:10:e3:36:0b:da:14:5e:30:40:8d:15:34:
         e5:d8:a7:f7:dd:e5:57:bb:db:f8:9a:1c:e8:c5:90:40:67:cf:
         19:d1:fb:48:59:a1:06:cd:56:5f:bc:ed:a9:bf:49:ca:d9:9f:
         19:e6:67:55:2e:3b:63:34:d7:75:cd:6f:91:77:b7:16:37:eb:
         ea:eb:36:e3:98:4f:ac:c4:6b:46:cc:21:fd:ab:f7:d7:d1:84:
         05:6d:3c:d3:bb:c6:27:34:c9:3f:2c:a3:e6:03:5c:bb:7c:6f:
         07:7f:b7:eb:0a:b8:45:e0:e0:c2:57:61:95:d9:6d:35:85:68:
         40:3e:c6:1a:dd:51:8a:7e:7b:c8:d9:81:b0:42:af:7d:11:11:
         25:de:f5:9f:f8:e1:66:21:bf:21:57:9e:f4:09:03:59:ec:34:
         0c:9b:71:ee:c2:b2:b0:32:3c:5a:f1:18:f3:c5:9b:32:96:f9:
         de:41:f6:ea:21:fa:94:92:27:60:8e:74:40:1f:68:d2:b6:0d:
         80:91:56:9f:57:ae:e9:a5:06:62:24:28:05:ae:f1:72:5f:77:
         9d:4c:c1:6a:d0:90:be:98:e3:d2:6c:17:c4:8b:1d:5c:cb:f3:
         7a:f8:34:3a:e2:1d:da:b2:1e:99:af:3c:eb:65:08:de:ba:33:
         a3:f9:a0:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 05:50:24 2024 by rpki-client on console-fra.rpki-client.org