Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/bcaf1305-1e0f-38f7-a7c4-45b7820f4f19.roa
File:                     bcaf1305-1e0f-38f7-a7c4-45b7820f4f19.roa (raw, json)
Hash identifier:          yGXfXC/U2aSwPo3BWaspmW8BI/+wctuxTyX2DMg19b0=
Subject key identifier:   DA:FB:7C:D0:F7:77:A6:FE:28:7F:AA:C3:97:71:DC:EE:DF:D9:BA:AF
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F432858455E5DA2472A0B729D8BC01C00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/bcaf1305-1e0f-38f7-a7c4-45b7820f4f19.roa
Signing time:             Fri 29 Mar 2024 13:00:37 +0000
ROA not before:           Fri 29 Mar 2024 13:00:37 +0000
ROA not after:            Thu 27 Jun 2024 13:00:37 +0000
asID:                     211440
IP address blocks:        108.165.66.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:5e:5d:a2:47:2a:0b:72:9d:8b:c0:1c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Mar 29 13:00:37 2024 GMT
            Not After : Jun 27 13:00:37 2024 GMT
        Subject: CN=d2b35c00-fbe5-4c91-9bc8-1b315fc75793
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:a7:e5:3e:74:d7:1f:b3:ab:e5:34:0f:9c:8c:
                    ab:c3:70:81:0c:26:2a:56:b9:56:51:45:9e:2a:9c:
                    c3:26:e4:c8:07:d1:46:56:61:97:71:0f:e6:e0:21:
                    7a:54:da:f2:c4:46:c7:25:4d:0b:7f:c1:d5:9f:29:
                    94:0b:7f:9e:4c:06:78:c5:90:e5:b7:fd:61:df:8e:
                    69:94:2b:3b:72:27:1e:94:86:71:f7:46:18:2e:8d:
                    8f:c7:b0:77:2c:9c:d8:48:71:99:69:cf:e9:ba:9e:
                    45:69:8b:95:0d:12:5d:7d:51:1f:9f:c9:10:2f:83:
                    b6:a6:f5:96:0f:75:f3:af:dc:68:3e:de:c7:43:e6:
                    77:6e:da:29:c2:01:5b:4f:3d:f9:e7:f4:e1:1f:98:
                    9f:9d:f7:e8:a5:60:90:15:ae:3d:58:cb:17:0f:60:
                    cc:93:2c:59:71:cc:dc:64:2a:fe:60:55:d3:16:da:
                    e4:dd:c2:d9:5c:bd:68:09:b9:ee:d5:99:13:4e:12:
                    da:01:e5:ab:74:9c:87:cc:23:bd:a7:ca:f6:dd:d4:
                    b2:a5:81:18:6c:8a:19:7f:5d:a3:7e:84:b4:cb:cf:
                    4e:ec:51:a5:84:94:24:e0:21:62:28:2f:52:b8:af:
                    38:21:2b:5e:b8:0c:03:85:91:41:a4:c4:55:a3:25:
                    6e:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:FB:7C:D0:F7:77:A6:FE:28:7F:AA:C3:97:71:DC:EE:DF:D9:BA:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/bcaf1305-1e0f-38f7-a7c4-45b7820f4f19.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.66.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:57:27:51:f1:03:fc:79:82:c0:6f:00:1b:57:03:c0:1c:f6:
         d7:dc:73:4b:53:c6:c9:22:36:74:4e:8e:69:ab:12:f7:1f:6b:
         1f:c2:ad:ca:75:d6:11:6c:7f:25:5a:6d:82:32:35:4d:87:21:
         ad:4f:0f:cf:72:e9:22:c1:74:69:cf:39:25:cf:bd:98:b8:b4:
         21:67:b1:b7:54:e2:21:82:48:04:55:23:e5:7e:75:ac:c9:b9:
         f7:e8:d2:17:41:dd:ae:0d:7b:78:57:d2:44:7f:9e:32:51:56:
         1f:80:8a:ff:4b:5c:93:74:89:92:04:40:3e:d1:16:8a:d8:17:
         75:7e:64:44:34:9d:e7:75:cd:12:e6:d1:08:e6:2f:57:f0:95:
         a8:24:9d:70:7c:96:77:81:01:97:7d:ce:9f:ca:8f:47:76:37:
         9a:71:93:2c:72:ee:bb:77:ac:c0:df:e0:b6:34:f1:ca:1f:0d:
         95:af:40:e7:d4:74:90:c6:2a:c9:62:7c:bc:81:75:2f:4a:b6:
         7e:da:6a:79:ff:37:f9:6a:76:38:b9:93:fb:ff:2a:38:88:90:
         e2:e0:f5:00:a0:df:1d:72:8c:3e:f1:ad:09:f5:4d:9b:cc:1e:
         23:e5:09:96:d1:2d:0d:53:df:87:0b:72:7f:35:97:d2:16:1c:
         e8:7a:0d:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 21:45:45 2024 by rpki-client on console-fra.rpki-client.org