Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/aa2b5211-1056-3cf0-b2dc-af977b621f4c.roa
File:                     aa2b5211-1056-3cf0-b2dc-af977b621f4c.roa (raw, json)
Hash identifier:          bzgKlWONoSr9w102yFKzO4FaCaqv1hyFlMv5b+7Df80=
Subject key identifier:   9E:0E:AC:B3:B0:70:E0:50:C0:E8:C7:22:4B:BA:AB:16:25:08:FE:ED
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F432858452C1D4759870249331BA7DB20
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/aa2b5211-1056-3cf0-b2dc-af977b621f4c.roa
Signing time:             Mon 11 Mar 2024 13:00:31 +0000
ROA not before:           Mon 11 Mar 2024 13:00:31 +0000
ROA not after:            Sun 09 Jun 2024 13:00:31 +0000
asID:                     21859
IP address blocks:        108.165.111.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:2c:1d:47:59:87:02:49:33:1b:a7:db:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Mar 11 13:00:31 2024 GMT
            Not After : Jun  9 13:00:31 2024 GMT
        Subject: CN=e2000b59-e224-4eb5-938e-3bc5276e0b1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:f1:1a:52:b7:f0:f0:ba:76:27:c3:50:88:b5:
                    39:09:96:e6:59:17:70:c3:cb:06:69:13:f6:fa:19:
                    f1:f0:b7:cd:bb:d3:cb:79:75:60:f5:25:7b:34:a7:
                    63:e4:3a:09:db:e2:53:81:bc:e1:0a:cf:95:da:29:
                    e9:90:3e:81:42:79:08:81:76:5e:1e:0e:c6:69:89:
                    04:27:35:3f:a6:32:9a:57:aa:68:02:22:05:a6:05:
                    f1:03:87:ca:61:d2:e1:27:1d:51:64:b4:5d:f0:9d:
                    6c:46:b9:26:ea:26:91:68:cd:39:5c:5d:83:4a:59:
                    44:cd:90:6c:87:ff:e9:2c:79:21:d3:0f:88:9f:f5:
                    ec:88:42:33:5b:be:8b:b6:da:64:a0:a5:06:09:93:
                    8b:7c:75:33:ec:aa:c2:f2:35:19:e8:a7:c7:bb:4c:
                    a9:8c:5d:0a:61:a5:c9:9e:87:f5:27:58:a3:8b:79:
                    70:89:af:1e:b7:a0:ba:b5:0a:cc:07:d3:6c:0a:63:
                    ea:94:9b:1c:e8:03:0f:e2:03:d4:49:96:5a:e6:ef:
                    88:77:c0:b7:54:3d:37:a8:80:e6:d3:a8:8d:ad:3f:
                    7b:cf:7f:67:de:1b:c2:ba:15:f6:3f:74:e9:0c:af:
                    5f:ec:17:58:1e:44:cc:69:70:10:5b:90:39:6c:0c:
                    e1:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:0E:AC:B3:B0:70:E0:50:C0:E8:C7:22:4B:BA:AB:16:25:08:FE:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/aa2b5211-1056-3cf0-b2dc-af977b621f4c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.111.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:d6:ac:db:f5:3b:91:dc:e3:24:6f:2c:e0:4d:c9:24:77:c3:
         7d:1d:ec:c2:1d:e8:d6:62:d4:6e:09:0f:e5:9c:7b:55:ed:99:
         74:ec:28:71:c5:25:a0:26:3e:47:18:a6:b1:13:bc:6c:70:e3:
         35:71:d6:87:15:61:bf:e5:75:3c:58:46:9c:0b:99:1e:10:cf:
         40:50:bd:b6:66:29:88:ae:6d:d6:5e:39:a8:7c:54:b6:2e:77:
         3f:3b:12:92:5d:c6:cb:ae:4c:b7:2b:cf:33:58:3f:5d:b1:f6:
         0e:23:6e:f4:3a:12:fd:5e:49:0b:71:a2:c7:5a:db:6b:ef:b2:
         8c:50:29:8d:a5:7c:67:42:4f:fb:78:28:50:c4:df:12:5c:79:
         a1:89:6f:f9:1a:35:e6:42:3f:77:27:9d:86:89:aa:af:c3:ef:
         16:37:bc:7b:53:14:96:7a:94:bb:e5:e4:47:06:a7:7f:55:20:
         c3:ff:41:a9:82:5d:8c:34:9e:23:bc:dd:76:30:12:10:1f:6b:
         a4:7d:23:ad:db:17:ba:31:13:d9:5d:cf:af:21:0c:df:50:5a:
         8e:6c:b6:5c:f1:79:45:8d:50:e9:16:ea:b7:de:71:0f:17:69:
         56:59:7c:ac:0c:74:71:54:cb:09:50:94:34:71:51:fb:44:f1:
         b8:7b:5d:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 21:09:45 2024 by rpki-client on console-fra.rpki-client.org