Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/bd84268b-7090-3d4f-bc97-1ac6dca866c3.roa
File:                     bd84268b-7090-3d4f-bc97-1ac6dca866c3.roa (raw, json)
Hash identifier:          LRPjkmS429AlURpUpNYtACZKK7sT/EWXod+GfBFe3kk=
Subject key identifier:   D3:0C:91:A4:29:B6:8D:3C:12:E6:51:9D:BE:E3:2A:A2:FD:77:2C:7E
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F432858471E705E0E43E542D6D65DBB20
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/bd84268b-7090-3d4f-bc97-1ac6dca866c3.roa
Signing time:             Fri 06 Sep 2024 01:00:31 +0000
ROA not before:           Fri 06 Sep 2024 01:00:31 +0000
ROA not after:            Thu 05 Dec 2024 02:00:31 +0000
asID:                     398395
IP address blocks:        108.165.147.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:1e:70:5e:0e:43:e5:42:d6:d6:5d:bb:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Sep  6 01:00:31 2024 GMT
            Not After : Dec  5 02:00:31 2024 GMT
        Subject: CN=4c1b0d7c-81a5-4306-9fee-bf98e6ec509f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:2b:55:1f:48:0d:50:99:5b:b9:37:c3:fa:18:
                    54:2e:10:8d:44:4d:73:41:61:98:49:3c:5e:35:ec:
                    86:83:9d:48:49:96:7d:bd:40:1f:15:5d:8a:25:36:
                    7c:fb:92:27:93:40:b0:d6:55:f9:7a:66:07:e1:f9:
                    12:1b:32:de:d3:22:27:98:99:71:60:b1:08:76:5e:
                    78:cb:0a:8f:e8:58:a1:2c:cd:ab:4c:3b:ef:d3:13:
                    47:63:28:21:b2:75:01:aa:43:47:ae:2d:0d:2c:87:
                    8f:c8:03:e8:62:b0:0d:13:66:52:88:01:34:fb:a8:
                    38:c2:c4:bf:4f:c6:9e:52:50:5f:51:4a:6d:7e:3f:
                    f3:24:99:05:e4:27:e0:b0:11:3f:29:7c:5f:07:ae:
                    81:18:b6:41:6d:5a:13:6d:b7:e2:84:9c:a5:f0:36:
                    3f:87:5b:50:24:b1:ac:d1:81:b1:11:44:7a:18:06:
                    4d:93:6d:ee:f4:8b:e2:7b:7a:89:7a:af:e0:71:fb:
                    24:83:d7:a0:81:4f:c6:ca:10:14:ed:8f:63:31:4d:
                    b3:7f:e7:e3:c1:06:9c:85:3e:25:18:76:cb:48:dc:
                    61:52:94:6f:db:3d:83:24:63:3e:52:53:5f:d3:61:
                    a4:a3:5a:65:3d:25:27:95:c0:d9:87:9b:28:7e:9d:
                    fa:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:0C:91:A4:29:B6:8D:3C:12:E6:51:9D:BE:E3:2A:A2:FD:77:2C:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/bd84268b-7090-3d4f-bc97-1ac6dca866c3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.147.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:ae:96:8f:99:c3:83:b0:90:1c:1e:d9:8b:71:95:d3:16:0c:
         83:9f:1f:61:8f:e3:0e:4e:23:69:fd:28:86:6e:06:6d:fa:86:
         92:3c:d3:de:f9:49:7e:bb:11:f7:45:fc:46:8e:cb:63:c6:f9:
         92:2f:25:e3:d7:82:ae:8e:5f:d5:df:2e:81:2a:74:7e:92:1f:
         ea:f6:d2:f9:b0:b9:f6:bf:f9:eb:6a:73:c6:ee:84:b3:86:8a:
         13:1d:c0:ad:56:b1:fd:45:84:0f:57:36:40:c5:43:fe:45:9f:
         a7:99:0e:99:cb:8b:66:7d:d4:4f:21:5d:a1:04:f8:4b:07:88:
         44:1c:bd:54:77:41:95:34:2f:75:0f:69:a3:b7:45:6b:68:1c:
         29:e0:a4:94:73:b0:c5:be:68:6c:6f:e5:8e:63:c0:f7:46:ca:
         ab:a7:af:6e:76:26:75:a4:70:b8:bd:29:7a:40:9a:49:d6:00:
         05:de:c6:70:47:9a:1f:88:ef:bf:a9:a6:aa:92:74:73:6a:4b:
         15:e6:2a:b5:df:2d:9a:b9:08:cd:2a:3e:fd:c0:be:24:09:ba:
         8c:6c:06:08:cd:8e:35:3d:8d:c4:e9:11:65:24:7c:c6:f2:af:
         7c:e5:83:77:ef:5b:f0:70:8a:b1:b8:dc:ae:51:61:71:c8:54:
         2e:9e:b7:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:37:47 2024 by rpki-client on console-ams.rpki-client.org