Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b2b3905c-1cf9-399c-b937-9f1a7cf5e280.roa
File:                     b2b3905c-1cf9-399c-b937-9f1a7cf5e280.roa (raw, json)
Hash identifier:          x1b5xxr4TXMFtYcQ0zovM6aAXJ129fNqGaGX630vdho=
Subject key identifier:   8E:1C:1A:C6:48:18:52:A5:CF:63:58:1C:B5:F4:A8:27:DC:9E:64:B5
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F432858454C380EA8597A565BB9A84180
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b2b3905c-1cf9-399c-b937-9f1a7cf5e280.roa
Signing time:             Sat 23 Mar 2024 01:00:24 +0000
ROA not before:           Sat 23 Mar 2024 01:00:24 +0000
ROA not after:            Fri 21 Jun 2024 01:00:24 +0000
asID:                     61317
IP address blocks:        108.165.65.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 30 Mar 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:4c:38:0e:a8:59:7a:56:5b:b9:a8:41:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Mar 23 01:00:24 2024 GMT
            Not After : Jun 21 01:00:24 2024 GMT
        Subject: CN=5fc22303-7a3e-4687-a3e2-0a5576282e13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:0a:c8:24:a5:75:df:da:01:e7:a2:ed:59:11:
                    71:67:83:35:d3:78:fc:61:60:a1:c5:70:24:8f:16:
                    f2:06:ba:8a:5a:0d:36:a7:af:ad:25:3c:c9:fc:e9:
                    9b:8a:f5:e6:17:e7:44:d2:22:55:9d:db:99:e3:bb:
                    18:1c:d6:ab:cc:b1:66:9f:93:56:b3:41:d5:64:0b:
                    a6:33:db:9a:f0:23:c6:a1:93:af:c4:21:8d:4a:e3:
                    62:88:07:7a:bb:e1:0c:6d:4b:af:80:5f:b6:9f:c6:
                    48:81:2b:79:72:e3:fc:31:82:a7:60:1a:dd:c1:47:
                    aa:cb:7f:f4:c7:51:90:f0:58:a8:66:64:db:ff:42:
                    62:d9:b6:a6:2a:77:ed:67:ba:37:03:06:eb:c7:f8:
                    d8:cd:61:4e:a0:04:f7:42:cd:5f:c0:25:2d:99:a5:
                    a8:5d:9e:51:5c:28:d2:1e:7c:d7:b5:e0:9d:71:6a:
                    2b:5b:b9:81:cb:15:02:78:c7:b2:3b:a6:5d:35:a1:
                    de:cb:fe:e4:3d:11:d1:45:02:13:5e:46:f9:68:fa:
                    81:0a:d5:5a:5a:22:8f:ce:d7:40:02:8d:55:35:b6:
                    d8:f8:a7:e1:cc:69:73:db:c9:49:0a:40:ea:58:89:
                    29:35:c3:6f:8f:2d:12:03:eb:0f:ca:18:34:0e:dc:
                    44:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:1C:1A:C6:48:18:52:A5:CF:63:58:1C:B5:F4:A8:27:DC:9E:64:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b2b3905c-1cf9-399c-b937-9f1a7cf5e280.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.65.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:e5:e3:d0:86:fa:31:46:97:41:48:55:64:8e:05:2b:c7:52:
         54:1a:19:c2:98:6f:5a:c0:c9:dd:9f:da:55:8a:48:15:46:f4:
         6f:70:93:bb:16:5d:82:b2:9b:a1:d8:a2:fc:1e:4d:74:e4:de:
         bf:5b:71:fc:f5:ac:fe:5a:50:88:69:83:e5:dd:1a:9f:03:df:
         8b:cb:45:86:b0:74:9c:c8:de:ba:88:7a:18:59:aa:d7:aa:48:
         b7:c4:e1:74:45:c8:f2:d2:25:da:5d:64:eb:5c:dc:57:3c:97:
         49:f3:9a:df:34:8c:17:16:85:98:c0:7a:ac:45:f4:f6:12:03:
         49:35:29:d7:7e:47:c2:d5:6c:c2:dd:3a:b7:bf:29:06:33:d0:
         40:f9:b3:d1:70:fa:ad:50:9f:05:0b:d9:8b:a2:fe:c4:6c:e0:
         b3:62:fb:70:70:2d:44:2c:ec:db:45:33:59:e9:71:68:ad:49:
         fd:8e:91:39:bd:2f:23:db:eb:49:ff:2f:52:ea:70:88:3f:4d:
         cb:6b:1f:d0:d4:cc:8c:40:99:90:45:32:f1:09:84:95:8e:5b:
         9e:83:25:89:71:b8:0d:10:86:c3:a7:21:0d:0a:23:cb:9e:88:
         c7:39:68:c3:bc:d5:f9:3b:05:a1:15:36:72:5b:5f:1a:21:11:
         aa:3f:bc:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 02:16:00 2024 by rpki-client on console-ams.rpki-client.org