Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/9d36c441-bb72-3de7-8151-728f47715443.roa
File:                     9d36c441-bb72-3de7-8151-728f47715443.roa (raw, json)
Hash identifier:          +QXnqpeIO/pWiw0BTl0VJfoD/xzwEzXSOThym7lJ3mM=
Subject key identifier:   5F:9A:56:3B:D0:A3:D3:CA:91:FA:E0:97:66:10:6D:5B:FB:BF:AD:A0
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F432858478F812119716426281493D780
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/9d36c441-bb72-3de7-8151-728f47715443.roa
Signing time:             Wed 16 Oct 2024 13:00:43 +0000
ROA not before:           Wed 16 Oct 2024 13:00:43 +0000
ROA not after:            Tue 14 Jan 2025 14:00:43 +0000
asID:                     834
IP address blocks:        108.165.37.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:8f:81:21:19:71:64:26:28:14:93:d7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Oct 16 13:00:43 2024 GMT
            Not After : Jan 14 14:00:43 2025 GMT
        Subject: CN=c54a2ff5-7021-4f62-9943-a51a1ae787fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:eb:e7:89:2d:a5:6c:2b:5e:60:77:66:27:3f:
                    86:ee:33:ec:e1:d3:0b:96:90:98:8b:81:b8:6b:88:
                    45:b3:1d:a9:ef:88:56:9d:56:a9:c1:6d:1f:0c:09:
                    38:9c:03:ab:a3:3f:9b:56:63:2d:d6:e0:e8:5c:3b:
                    35:8f:84:9f:30:c7:6c:06:bc:95:9b:0e:77:dc:b3:
                    18:e9:73:a4:76:84:ab:01:0c:8b:d8:24:24:98:24:
                    20:d2:a0:03:77:07:4d:a9:f2:df:4e:d2:ea:59:ab:
                    3c:b6:ca:51:e8:a5:cd:1e:fd:03:7e:e3:cc:be:0b:
                    80:90:f4:bb:44:1e:93:f6:8a:c5:e0:53:cf:a6:f3:
                    26:4c:f1:2f:54:a4:7c:ff:57:ee:2e:a4:cb:35:56:
                    7d:7f:4a:01:c4:1f:8c:26:00:f8:74:0f:17:05:06:
                    7d:71:95:f4:d7:8b:db:49:e2:a5:ff:9c:a6:83:9c:
                    a8:3e:fd:94:56:b8:fc:12:19:4d:c7:09:40:1b:ca:
                    23:1a:48:88:0a:dc:09:aa:2c:12:a7:76:22:83:98:
                    50:9a:8d:25:17:d6:0c:42:a2:a0:2f:fa:53:41:12:
                    80:e3:fe:5d:e8:af:ab:96:b3:88:3e:9b:67:21:eb:
                    01:be:ba:c0:ec:bf:0b:e6:67:3a:9a:4a:1c:e6:e2:
                    b4:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:9A:56:3B:D0:A3:D3:CA:91:FA:E0:97:66:10:6D:5B:FB:BF:AD:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/9d36c441-bb72-3de7-8151-728f47715443.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.37.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:80:18:ed:11:31:c7:d9:2c:c8:45:64:6e:64:dd:57:6b:6e:
         68:a7:19:5d:04:ce:bd:5b:2d:63:34:c2:02:6a:cf:1b:e5:95:
         1c:f1:2c:6e:a6:34:e1:55:a9:80:a3:49:27:6a:87:f3:f9:43:
         5a:01:54:12:b3:b3:b7:b2:e8:8d:3c:da:bc:c9:05:ed:f6:a6:
         39:a9:13:9f:62:c7:11:d3:9e:02:c7:5e:34:08:1e:2a:ed:3c:
         d8:ea:08:88:59:0c:05:fe:19:6c:52:7f:52:e0:09:aa:81:fd:
         61:f3:9d:45:db:9f:5a:eb:46:79:16:23:f2:f1:35:b9:ec:4c:
         9f:4b:ba:36:f7:25:27:51:14:86:a8:83:be:78:3d:bc:6c:f6:
         9d:1e:e4:7a:e5:e7:83:02:54:6f:de:59:b8:ce:2e:fa:d9:b7:
         c5:d3:02:7a:77:55:4c:72:cc:0f:6b:25:0c:2d:8f:94:f8:05:
         18:5f:8d:e2:3e:00:52:29:71:38:62:fc:26:9e:ae:99:88:86:
         04:ff:16:6f:7d:e4:c8:be:91:2a:f1:44:e7:a7:3e:9f:64:93:
         c7:07:a4:f1:68:ce:e0:3c:5c:a0:74:92:68:fc:a7:a1:8d:fa:
         a3:ca:bc:d2:48:38:ac:d1:23:1f:f2:3c:02:ed:87:e3:60:77:
         b6:8e:ff:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 01:40:30 2024 by rpki-client on console-fra.rpki-client.org