Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/a91284df-7ea4-32ac-aff2-31275499f2ed.roa
File:                     a91284df-7ea4-32ac-aff2-31275499f2ed.roa (raw, json)
Hash identifier:          T5ONOA3ro5tFUpVnGay3/DHW0qEyyr9pG+nDGsUVqMc=
Subject key identifier:   3C:3B:32:F1:4F:25:85:68:08:51:44:A9:5B:9C:09:AA:73:4D:39:C6
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F432858475DC3A4C8E6FF0F71F0A2E8C0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/a91284df-7ea4-32ac-aff2-31275499f2ed.roa
Signing time:             Sat 28 Sep 2024 17:24:19 +0000
ROA not before:           Sat 28 Sep 2024 17:24:19 +0000
ROA not after:            Fri 27 Dec 2024 18:24:19 +0000
asID:                     16276
IP address blocks:        108.165.220.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:5d:c3:a4:c8:e6:ff:0f:71:f0:a2:e8:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Sep 28 17:24:19 2024 GMT
            Not After : Dec 27 18:24:19 2024 GMT
        Subject: CN=131d6db1-4232-449c-b038-aa88a8eec06b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:f6:80:88:44:5f:4b:c8:e4:e5:c7:64:fd:84:
                    f3:53:db:a6:29:3a:a1:92:ad:39:72:01:49:7d:82:
                    3f:68:91:12:9d:06:2b:38:5d:76:56:33:72:86:70:
                    1b:ac:d8:e4:52:b1:5e:c0:f9:b3:0b:73:50:0d:f0:
                    0c:bf:a1:5a:1c:67:eb:37:af:c2:3b:0b:0c:4d:b2:
                    69:29:70:c4:9c:c7:a7:83:96:94:b3:42:5e:eb:89:
                    09:6e:ec:a8:0f:b9:47:2d:43:55:7b:13:01:4b:53:
                    b2:68:a5:49:4a:35:93:a3:f9:d5:1f:1c:2f:4c:d0:
                    41:8e:1a:27:5b:cd:e7:23:56:dd:8a:16:37:82:e4:
                    21:0f:60:04:74:fe:ad:cd:72:ba:e6:18:ca:1a:fa:
                    10:69:28:ee:db:e1:53:cc:fa:4f:d4:8d:e4:29:d5:
                    23:86:00:ca:a2:59:62:9f:4b:6c:4a:f2:0a:0e:20:
                    56:3c:10:cb:9a:74:08:66:71:f0:60:0e:3d:b7:52:
                    02:fa:a2:7c:76:35:76:fd:72:47:97:0f:be:0b:07:
                    36:ee:5c:fe:06:3f:8e:48:31:5d:f1:24:fd:0b:2d:
                    29:1f:e5:ff:eb:73:4c:51:ae:19:8a:37:51:fa:30:
                    89:e7:7d:94:65:f2:d4:cf:05:b1:6e:46:3c:14:82:
                    e9:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:3B:32:F1:4F:25:85:68:08:51:44:A9:5B:9C:09:AA:73:4D:39:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/a91284df-7ea4-32ac-aff2-31275499f2ed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.220.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:74:66:31:ff:ae:68:fe:1f:4e:83:48:3b:54:7b:8a:1c:11:
         4d:19:54:cf:fc:6e:c1:34:35:d9:15:60:a4:10:28:ad:80:01:
         c7:ad:5b:78:a3:68:89:c5:54:bb:f7:1b:ae:0a:ab:7c:1a:31:
         6d:3a:e6:b2:32:4a:d7:72:e3:d0:a7:81:ba:48:a6:1f:f1:db:
         be:07:2d:22:be:7e:dc:c1:37:c8:fc:dd:d3:85:c9:47:d2:07:
         27:49:0e:54:cd:21:9d:53:50:e1:11:32:f4:b4:5a:6f:b9:c8:
         79:17:e6:f2:f3:ab:64:3b:f1:c3:56:a6:30:f7:f1:d5:48:e1:
         8c:a6:9e:96:c6:47:a9:7a:b3:b1:cd:8a:ac:9f:85:70:2f:10:
         a3:62:f2:73:3e:ec:47:0a:69:10:9a:ef:ba:22:6b:99:a7:6d:
         82:36:e9:5b:f6:2d:4e:15:cc:13:c8:de:4e:99:5f:6d:95:e7:
         c8:f3:f8:61:05:96:3e:ba:09:ed:05:d2:29:f5:a5:71:94:20:
         be:05:fd:7b:24:bf:8b:1e:82:a8:3d:04:85:3a:ff:31:9b:1e:
         a9:15:12:64:49:12:5b:85:60:f4:53:3d:56:42:38:ba:fc:74:
         5c:36:02:e7:28:6d:52:7a:cf:6c:09:57:c1:9d:43:05:f2:5d:
         6c:d3:f8:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:37:46 2024 by rpki-client on console-ams.rpki-client.org