Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b2b3905c-1cf9-399c-b937-9f1a7cf5e280.roa
File:                     b2b3905c-1cf9-399c-b937-9f1a7cf5e280.roa (raw, json)
Hash identifier:          qxFzosYEkn2GW/kv8nliOGlfnLGFIrCF4WLK/XdqDyw=
Subject key identifier:   1E:0A:A0:7A:31:D5:A9:25:99:F5:4C:F9:EC:88:EE:CB:DE:2F:38:83
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285848CC7B8EC8B5991F31171CFC60
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b2b3905c-1cf9-399c-b937-9f1a7cf5e280.roa
Signing time:             Fri 07 Feb 2025 02:00:39 +0000
ROA not before:           Fri 07 Feb 2025 02:00:39 +0000
ROA not after:            Thu 08 May 2025 01:00:39 +0000
asID:                     61317
IP address blocks:        108.165.65.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:cc:7b:8e:c8:b5:99:1f:31:17:1c:fc:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Feb  7 02:00:39 2025 GMT
            Not After : May  8 01:00:39 2025 GMT
        Subject: CN=02b76617-f83c-4424-88d4-33de92e66d99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:0e:47:f7:5b:d7:8d:34:bb:e2:b1:f4:4a:58:
                    a2:9d:74:dd:6c:69:54:cd:b6:b2:20:41:44:9e:e7:
                    92:03:4b:1b:1f:92:90:87:b2:ef:09:c2:75:49:3c:
                    2d:72:69:03:db:ac:42:6d:0d:42:29:9c:cc:5f:ad:
                    2a:aa:2f:36:e4:f6:bd:03:27:24:d4:aa:a9:d0:7e:
                    2a:81:d4:32:7a:04:64:57:0b:0f:8a:e1:0b:fe:c7:
                    61:e2:e2:d1:c6:8e:d9:9e:59:19:d1:76:35:a8:1d:
                    05:5b:a2:3d:04:89:79:b1:50:79:44:fe:8a:6c:dd:
                    49:70:65:dd:7d:cd:65:6f:ce:e8:40:aa:cb:02:b0:
                    af:59:fe:d7:08:c0:11:49:98:1b:c4:c8:53:d3:25:
                    b8:fa:49:e1:94:29:80:84:cf:91:9e:f2:9b:2c:85:
                    3e:f0:64:79:b6:94:36:7b:d9:e2:ec:c4:82:49:ea:
                    c0:b1:bf:04:4c:c1:b4:b7:c1:6b:ff:1b:99:c6:75:
                    24:da:20:8f:85:e0:f0:cd:6d:47:67:38:8f:f5:39:
                    ad:93:49:7c:6d:62:1d:4c:8a:97:40:04:c6:66:55:
                    eb:97:d1:4d:f0:7a:96:5b:ff:24:8d:1a:b7:ba:86:
                    79:d9:38:94:fb:c6:77:db:62:21:c0:64:56:22:be:
                    87:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:0A:A0:7A:31:D5:A9:25:99:F5:4C:F9:EC:88:EE:CB:DE:2F:38:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b2b3905c-1cf9-399c-b937-9f1a7cf5e280.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.65.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:6e:7d:f8:7d:c1:61:b9:36:ed:e4:9f:05:07:ae:b8:4a:f2:
         25:b9:01:5d:5a:a8:0e:70:71:28:78:62:a4:8a:b7:da:00:82:
         c5:f8:ca:7c:c4:0b:6e:87:23:44:fc:d6:74:e7:03:ea:91:19:
         72:c4:e4:82:3e:9d:4b:5f:66:9a:0d:ff:04:a8:ae:0c:f6:a6:
         1c:3e:48:3f:3e:41:40:28:12:db:74:c0:6b:42:f5:d9:59:34:
         c8:28:94:25:a6:34:65:87:6b:ab:5b:86:1a:69:4a:70:a1:c7:
         87:49:e8:ae:08:21:f5:9f:84:1e:e4:0e:6d:6a:46:5e:87:7a:
         18:9d:24:4d:9c:07:92:56:d5:de:a9:dc:8f:36:8e:d7:88:ca:
         45:61:d8:8b:8a:fa:44:24:f6:3f:9c:2e:bf:c4:ec:ca:28:5c:
         b5:41:a7:35:e4:a0:7e:37:ee:2a:45:61:51:eb:4d:0f:90:74:
         54:99:42:28:4d:b8:a2:72:ca:10:1d:b0:ca:f6:44:21:91:35:
         72:df:98:48:56:81:45:8c:4b:6d:99:5f:d5:1f:11:ee:ce:56:
         4d:2f:e6:5a:b6:9c:87:86:82:0a:79:5d:c2:6f:9e:93:3c:00:
         39:15:10:73:f7:80:4f:eb:c9:89:10:9a:35:70:b1:2f:df:d3:
         0f:41:f0:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:30:26 2025 by rpki-client