Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/9ac19443-d22d-34c6-aa9c-716f114f3b4f.roa
File:                     9ac19443-d22d-34c6-aa9c-716f114f3b4f.roa (raw, json)
Hash identifier:          SD5vtwxHFyKU3Jib+3X19FO4S403kDvmMR1a6RvvRvw=
Subject key identifier:   CE:06:E5:AE:ED:D1:10:E9:7A:B4:DC:0E:6F:10:EC:62:DE:51:21:AC
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F432858477230E170C8631F00C74D5468
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/9ac19443-d22d-34c6-aa9c-716f114f3b4f.roa
Signing time:             Sun 06 Oct 2024 01:00:31 +0000
ROA not before:           Sun 06 Oct 2024 01:00:31 +0000
ROA not after:            Sat 04 Jan 2025 02:00:31 +0000
asID:                     63801
IP address blocks:        108.165.56.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:72:30:e1:70:c8:63:1f:00:c7:4d:54:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Oct  6 01:00:31 2024 GMT
            Not After : Jan  4 02:00:31 2025 GMT
        Subject: CN=ef8a7c88-94f8-4b4b-84d4-e5faf031b0ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:d8:e4:e5:f0:06:22:b7:18:98:bf:f4:c0:11:
                    45:2d:95:53:62:c6:d0:d1:47:94:1a:13:86:d0:73:
                    e5:82:13:c5:2d:ee:7d:1e:65:90:2a:58:37:2d:4f:
                    7e:bb:4c:4d:1d:ac:9b:cf:6f:e1:1a:5b:b6:17:5f:
                    f5:63:26:a5:58:32:4b:c3:1b:52:c0:c5:24:07:af:
                    19:9b:96:9e:74:de:56:49:ca:3b:c1:a0:11:88:a9:
                    72:e6:1d:28:2e:d7:d9:e8:76:c3:36:36:cc:bb:7d:
                    86:8f:3c:d5:92:ca:39:d2:82:19:39:d7:2d:ab:d3:
                    31:1d:58:fa:22:a4:c1:1c:bd:35:ad:e0:b0:ee:45:
                    47:6e:cd:d1:b7:86:99:55:be:b2:77:e5:f2:f4:cb:
                    28:a7:75:a2:bc:a4:84:9d:da:26:bc:a1:3c:66:4e:
                    35:de:d8:5d:0c:4f:65:06:6d:5c:24:31:f9:c7:13:
                    f6:d2:04:b4:af:5d:5e:48:86:7a:e0:91:2e:d4:70:
                    97:b0:ac:0b:39:c1:8a:5c:e7:2b:e4:f3:13:54:56:
                    5c:1b:96:1f:43:5d:d9:43:a8:e0:fa:38:92:6e:6c:
                    55:e5:85:a7:34:e9:0c:23:31:36:02:74:00:04:16:
                    4b:d5:7c:ee:bd:0c:41:07:24:0b:b8:55:4d:3b:46:
                    64:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:06:E5:AE:ED:D1:10:E9:7A:B4:DC:0E:6F:10:EC:62:DE:51:21:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/9ac19443-d22d-34c6-aa9c-716f114f3b4f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.56.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:06:da:6b:e0:71:71:d8:1c:bb:79:42:7a:c7:18:11:cd:02:
         15:fe:9d:ea:1a:ed:0e:d4:57:28:85:f4:53:4a:41:99:ac:82:
         b2:56:79:48:13:48:d4:bf:91:03:24:8f:7a:66:c6:e7:d0:a7:
         6c:88:93:39:28:5b:ad:93:ff:73:3b:db:6c:f5:95:d1:ab:bf:
         05:f0:d7:a8:d0:64:7d:a4:76:96:03:bc:c7:f2:bc:fd:67:53:
         71:c8:88:42:1d:66:99:a3:d3:2e:84:4a:8a:05:25:f5:c6:3c:
         c0:c0:d5:f2:ad:47:ec:43:fb:05:2e:c4:a3:ce:ac:90:4d:a1:
         79:e9:5e:84:15:9d:d6:f9:d7:81:40:26:eb:aa:9e:d2:57:2c:
         68:9b:20:91:db:71:00:66:2f:91:7c:27:47:ea:15:6c:32:bc:
         36:a6:51:d7:6b:80:2d:68:b5:a9:88:ba:8d:1c:b8:8f:83:19:
         0a:68:7b:fc:c3:fb:bf:9d:70:01:ec:7c:cc:2d:51:bc:75:58:
         a7:77:00:b7:41:e6:a3:d4:04:c1:32:41:b6:1b:db:de:95:ff:
         6b:e0:06:b8:ba:fa:1d:32:41:19:f1:e0:39:c3:8c:43:fc:24:
         f6:1c:4c:a8:61:0b:83:dc:4b:06:37:95:26:ed:a0:55:f3:79:
         47:a1:d5:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:37:45 2024 by rpki-client on console-ams.rpki-client.org