Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/a1ad8cbb-d712-3d3e-9864-a69606095b05.roa
File:                     a1ad8cbb-d712-3d3e-9864-a69606095b05.roa (raw, json)
Hash identifier:          wpjyKZ/FUt8TeON9Fqx/sOj+f86AxC99ZuLKmYyfXCg=
Subject key identifier:   85:ED:51:78:B0:46:E8:30:5D:45:6E:9D:67:03:4C:E1:09:A7:C3:69
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F432858467F4F632C349E7A47B0E42200
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/a1ad8cbb-d712-3d3e-9864-a69606095b05.roa
Signing time:             Thu 11 Jul 2024 01:00:26 +0000
ROA not before:           Thu 11 Jul 2024 01:00:26 +0000
ROA not after:            Wed 09 Oct 2024 01:00:26 +0000
asID:                     14445
IP address blocks:        108.165.83.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 28 Jul 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:7f:4f:63:2c:34:9e:7a:47:b0:e4:22:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jul 11 01:00:26 2024 GMT
            Not After : Oct  9 01:00:26 2024 GMT
        Subject: CN=379f646c-5acc-4a42-842a-fd3f4d973cb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:6a:91:7f:75:14:fb:e5:3e:a5:79:98:4a:e9:
                    f2:47:d4:09:f9:2c:e5:69:70:0f:2e:29:41:06:f4:
                    64:1c:da:67:a4:00:67:02:98:c5:30:74:87:cf:58:
                    22:5c:bd:83:ca:c3:bb:c0:33:75:61:95:84:ff:d9:
                    51:a8:6d:64:bd:ba:d6:3e:fb:46:1a:8e:2a:7b:85:
                    80:dd:7b:3c:f2:df:44:32:63:3f:59:aa:e6:41:d8:
                    e3:c9:65:28:b1:a7:b7:f0:64:6c:9f:9f:94:84:74:
                    5d:7e:5a:cd:73:4d:c8:c7:53:04:fa:71:34:f3:07:
                    53:ec:6a:e4:73:9a:89:54:1b:4c:13:e7:73:d3:2d:
                    bb:ae:e0:c8:af:1c:d2:86:ca:76:d5:dd:12:8a:e2:
                    75:28:21:eb:fc:c9:d5:ee:7b:d0:2b:38:07:f4:cc:
                    62:ec:d2:4e:ec:53:8d:11:b9:7a:88:99:37:3c:fa:
                    37:5a:8c:75:4a:87:a1:c8:37:46:54:41:5a:6f:d0:
                    26:55:00:00:1a:3a:6b:1e:19:6f:9e:e5:b9:c5:48:
                    b7:bb:f8:7c:fe:50:6f:30:41:97:c1:a1:2a:80:c8:
                    3f:65:1d:ba:69:51:53:2e:ef:48:ec:a6:06:18:ca:
                    f7:60:3d:ae:e1:70:b0:e4:12:6c:30:6c:6a:2c:0b:
                    f3:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:ED:51:78:B0:46:E8:30:5D:45:6E:9D:67:03:4C:E1:09:A7:C3:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/a1ad8cbb-d712-3d3e-9864-a69606095b05.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.83.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:a7:ff:ef:46:e4:6f:bf:09:b7:39:fb:93:c8:05:04:a4:fb:
         00:30:bd:a0:0f:38:60:c4:9a:14:26:ec:5a:5c:56:ce:43:86:
         e3:3b:eb:3b:1b:f5:dc:dd:e2:17:b9:b6:46:32:9a:f9:8c:f1:
         8e:94:c1:8f:c5:d6:1b:aa:c2:48:0d:37:f2:d8:da:29:43:ea:
         e0:64:7c:5d:79:03:02:8e:af:cf:24:d6:b0:b4:6d:64:bc:e5:
         c8:e8:26:ff:8e:14:ac:39:a6:87:54:0b:90:fe:6d:ca:eb:d6:
         55:3d:75:e3:78:2f:2a:71:fb:7d:d3:66:9c:39:4d:0e:82:4e:
         e2:76:45:a1:15:d8:97:c8:44:c0:d0:f4:95:f2:49:e7:e9:09:
         ed:be:ae:03:a5:0d:fe:75:7c:b9:6e:70:91:c1:14:25:e8:99:
         1e:e0:67:51:13:66:f8:62:84:5b:4b:b7:c3:6f:0a:b1:57:45:
         47:6d:76:c6:01:33:57:48:20:9e:2c:04:bd:4a:25:4b:89:e7:
         72:08:7a:83:6e:b3:4a:2c:44:70:52:8d:0c:af:76:59:07:4e:
         57:2d:63:96:12:5f:33:2e:7e:a4:01:1d:5b:e1:e3:f6:df:ce:
         c4:7d:a5:dd:1b:1a:72:69:4d:81:38:ed:e6:ac:9f:30:e0:58:
         d7:e4:91:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 26 22:57:48 2024 by rpki-client on console-ams.rpki-client.org