Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/9e4e2149-f069-379b-b23f-4929c6eeeb6d.roa
File:                     9e4e2149-f069-379b-b23f-4929c6eeeb6d.roa (raw, json)
Hash identifier:          c52pHWhvpTcSCf2lbusGvOZY9cylvncK1w6LoguVv1U=
Subject key identifier:   4B:9D:7C:CC:2F:AA:CE:0C:9C:01:79:67:09:4C:44:21:8C:37:3B:4D
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F432858472C64C13DE049ECBC48944880
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/9e4e2149-f069-379b-b23f-4929c6eeeb6d.roa
Signing time:             Wed 11 Sep 2024 00:58:32 +0000
ROA not before:           Wed 11 Sep 2024 00:58:32 +0000
ROA not after:            Tue 10 Dec 2024 01:58:32 +0000
asID:                     834
IP address blocks:        108.165.49.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:2c:64:c1:3d:e0:49:ec:bc:48:94:48:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Sep 11 00:58:32 2024 GMT
            Not After : Dec 10 01:58:32 2024 GMT
        Subject: CN=99cd5154-1199-4fed-9acb-29ba3e23cf67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:cf:54:ab:7a:a3:00:43:f5:51:7b:aa:19:79:
                    c0:af:db:39:10:da:7c:ba:44:d8:9c:9d:00:8d:08:
                    58:57:af:02:ec:e7:95:34:63:88:fd:13:2c:e1:6f:
                    85:0a:a4:ef:73:95:8a:f7:a3:b4:13:8d:34:c7:44:
                    11:15:18:5c:f3:56:a3:26:3d:ce:67:ac:5d:08:d0:
                    cf:56:83:0f:25:23:40:6e:a8:11:5a:f1:6e:44:c8:
                    d5:c5:2f:ba:0f:d4:43:87:b2:c1:10:ec:bf:0b:77:
                    45:0f:4e:d1:1b:70:86:a1:c2:0e:0c:bd:92:3c:14:
                    e6:81:ae:5f:28:d0:5a:e9:cc:6c:1b:d3:fd:d2:1c:
                    08:f2:28:9e:00:50:c6:67:4a:0e:75:1e:06:ab:30:
                    f7:76:67:b2:e9:1e:21:f4:84:b9:06:75:30:c7:a8:
                    87:d2:46:a2:81:6f:40:55:33:f1:ce:e5:e9:db:e7:
                    16:b2:f1:17:40:36:8b:b8:de:fb:c6:59:26:e2:65:
                    2c:54:68:38:67:e3:8e:51:68:b8:fd:79:74:46:ad:
                    85:78:11:2b:b3:06:6a:61:d6:95:87:4e:56:b5:e7:
                    2e:79:4b:98:85:66:fe:90:0d:6c:18:2f:43:70:fe:
                    66:7c:b2:01:93:21:1a:d4:6b:e2:a3:10:36:12:da:
                    66:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:9D:7C:CC:2F:AA:CE:0C:9C:01:79:67:09:4C:44:21:8C:37:3B:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/9e4e2149-f069-379b-b23f-4929c6eeeb6d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.49.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:71:fe:c1:53:6d:94:f5:ee:8c:73:cd:f4:1c:c7:b5:ed:1c:
         7c:db:a1:b2:a5:cc:80:5a:38:b1:11:40:e2:c6:9e:fc:eb:af:
         ff:b0:a0:09:ba:3d:06:90:20:cb:4d:2b:67:f2:4b:71:9f:3c:
         42:9a:bd:75:49:81:12:d9:a5:a2:71:2c:4c:6c:88:13:93:ad:
         da:3c:4d:b6:da:66:c8:e3:d2:38:58:59:ed:26:2c:9f:c8:77:
         d9:a3:fb:0f:94:0c:53:49:13:69:83:8b:a1:1e:a9:4f:05:1e:
         da:18:cc:42:69:fb:89:43:64:5e:15:b0:25:e3:29:c7:49:b7:
         5b:e2:86:bc:9e:1b:0f:20:99:c6:fe:2f:d1:3c:84:7a:64:db:
         9f:ca:c7:2f:26:42:61:63:83:1a:cf:3e:87:91:6f:f9:3a:6a:
         83:ae:7a:5a:d3:fc:b2:87:85:b5:fc:e5:7e:a1:62:62:ec:47:
         cf:c0:e5:61:51:9f:92:dd:33:2e:f0:e8:73:31:73:88:f6:be:
         12:f0:32:6d:f3:79:2d:04:7d:28:22:ab:a9:97:e6:1d:9e:ae:
         99:79:f0:cc:ff:dc:86:22:83:a1:61:6a:67:2a:e8:d7:bf:5f:
         0b:91:29:d6:c2:6e:a4:d4:93:d7:f1:bb:cf:11:ce:b9:38:2a:
         ab:df:38:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:00:14 2024 by rpki-client on console-ams.rpki-client.org