Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/abe17afa-e66e-351b-96b6-74dd9cf1fbf5.roa
File:                     abe17afa-e66e-351b-96b6-74dd9cf1fbf5.roa (raw, json)
Hash identifier:          dFpn2elnrIc/JjqonrTXQk4iQ4g+fCg3l1VWhlkIr7c=
Subject key identifier:   5E:DD:02:F7:79:A3:A9:B3:97:5F:AD:B8:3E:8C:73:2D:3C:C4:65:BA
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584589964431F381CA6D9E9ECEC0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/abe17afa-e66e-351b-96b6-74dd9cf1fbf5.roa
Signing time:             Sun 14 Apr 2024 00:34:35 +0000
ROA not before:           Sun 14 Apr 2024 00:34:35 +0000
ROA not after:            Sat 13 Jul 2024 00:34:35 +0000
asID:                     31863
IP address blocks:        108.165.232.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:89:96:44:31:f3:81:ca:6d:9e:9e:ce:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Apr 14 00:34:35 2024 GMT
            Not After : Jul 13 00:34:35 2024 GMT
        Subject: CN=90425023-4bd8-4f3b-93c8-8b15fcfa81d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:79:4a:26:ea:37:90:c5:17:74:53:eb:a6:da:
                    eb:39:e6:3b:73:dd:48:a0:3e:21:00:94:4b:30:c0:
                    f3:5d:46:fd:cb:08:48:b6:a0:9c:97:48:2c:e5:9f:
                    e4:8f:52:5d:a3:b9:7a:74:57:6a:9c:e9:8b:9d:b3:
                    67:04:4d:45:53:69:20:2a:06:7c:90:f7:43:e7:78:
                    1a:ca:da:32:ff:84:6d:dd:81:e0:7e:e5:29:c0:67:
                    ef:ad:31:b5:37:1a:de:2a:1e:63:55:01:86:bd:67:
                    65:2e:a3:60:35:a6:ac:75:28:87:e3:ad:b1:ea:73:
                    9b:fb:72:dc:2c:d8:a0:77:57:74:8b:b3:62:87:a3:
                    9b:fe:e1:d5:40:10:c2:a8:30:5b:e8:1c:9b:a2:5c:
                    a9:ff:3d:99:88:ad:e3:82:ee:32:bf:11:1d:0a:56:
                    67:ac:cc:cd:2f:9c:58:80:8f:65:7d:d4:16:3f:19:
                    19:70:76:ab:1d:6d:7d:ef:f4:1d:cc:e3:ba:38:25:
                    ef:8d:1a:6a:40:2f:b2:da:a7:d2:3e:06:bc:9b:dd:
                    97:08:2d:e3:d3:b1:e9:a7:f4:01:b2:10:ac:71:4c:
                    d3:a5:e5:e7:89:ef:93:94:42:92:45:ba:48:bd:3e:
                    e1:12:fc:86:0f:fe:3e:57:95:1b:a5:be:c1:db:0f:
                    86:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:DD:02:F7:79:A3:A9:B3:97:5F:AD:B8:3E:8C:73:2D:3C:C4:65:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/abe17afa-e66e-351b-96b6-74dd9cf1fbf5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.232.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:44:f1:f9:69:30:54:f1:e4:f6:0f:c1:94:9f:69:81:7c:99:
         f3:84:49:0b:49:82:7d:77:ea:be:ee:61:74:2c:42:65:4a:a6:
         6b:ed:c8:81:4c:59:e8:37:82:f0:39:78:f2:83:85:4b:33:8f:
         28:7b:88:4a:d8:2f:bd:f0:74:5b:99:68:c8:95:8b:a9:92:96:
         96:7b:97:8e:f8:ba:cd:63:9f:f0:41:12:67:cd:04:7d:d4:8f:
         ce:ba:30:bc:e3:df:40:af:c9:c6:e8:51:b5:fd:41:d3:4e:52:
         27:93:15:ab:9b:b7:40:b3:06:4e:ec:45:e4:1d:67:ee:29:82:
         6e:4a:bf:24:2c:d1:8b:53:18:25:27:74:92:31:a0:fa:b2:b7:
         73:40:4c:ab:b8:b3:76:63:d4:02:46:92:d5:1c:19:bb:f1:9a:
         2c:5f:90:76:62:49:6a:6a:56:32:b4:5a:71:ad:bf:df:cd:27:
         d7:2a:95:09:75:be:09:6d:8a:97:cc:b5:d5:e8:e9:f7:76:47:
         52:59:31:70:e0:4b:93:19:78:b1:79:a2:76:43:f4:cf:14:03:
         b0:9f:46:1f:ad:2f:38:7c:c6:7c:ca:c0:87:10:4b:f0:34:91:
         33:da:32:58:dd:aa:44:2c:fb:db:26:b1:c9:08:4b:bf:37:51:
         16:f2:64:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 22:27:26 2024 by rpki-client on console-ams.rpki-client.org