Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/bde6c327-7b42-3611-af47-4dc5ecb72b42.roa
File:                     bde6c327-7b42-3611-af47-4dc5ecb72b42.roa (raw, json)
Hash identifier:          LxQdWatGQ6QVVF9RhzUBgDG7k7UEUljdaaIz69Q3xsc=
Subject key identifier:   0F:5F:BA:C6:8B:E5:6F:F3:4E:E9:CD:98:19:A9:4B:96:A7:DD:A9:CA
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285845304D3C7CABF882FEF5E81E80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/bde6c327-7b42-3611-af47-4dc5ecb72b42.roa
Signing time:             Wed 13 Mar 2024 01:00:26 +0000
ROA not before:           Wed 13 Mar 2024 01:00:26 +0000
ROA not after:            Tue 11 Jun 2024 01:00:26 +0000
asID:                     212609
IP address blocks:        108.165.202.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:30:4d:3c:7c:ab:f8:82:fe:f5:e8:1e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Mar 13 01:00:26 2024 GMT
            Not After : Jun 11 01:00:26 2024 GMT
        Subject: CN=6deba404-0857-4ac5-90d5-cc7f85845933
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:23:ca:cd:36:5a:92:ff:e9:d6:02:2c:db:ba:
                    28:4f:eb:5b:f4:71:2f:73:c8:66:7b:7e:dd:16:06:
                    dc:29:8b:3f:d2:7c:be:6f:b6:54:da:c7:3d:fa:14:
                    4b:2d:74:a7:a8:81:1a:ba:34:0b:ff:35:ec:0c:fb:
                    da:06:e5:4c:ed:62:52:b6:9c:f8:d4:eb:00:db:d1:
                    ea:79:c2:22:78:d2:6c:24:af:bf:28:67:fe:e8:a7:
                    38:b8:f7:f5:0f:e1:df:d1:36:b8:24:cf:fa:c6:e4:
                    94:83:2a:a1:bc:90:99:9d:1e:10:52:a1:7b:d2:97:
                    31:89:53:79:bc:d3:56:12:f0:2c:43:8b:62:f0:58:
                    1b:99:19:2e:47:e2:e4:03:b3:c2:51:46:44:2c:47:
                    61:e4:24:ed:5b:ef:31:7a:87:35:05:19:85:1a:6c:
                    04:f9:5e:8f:e9:a0:f4:75:e4:53:6a:42:e7:9b:6c:
                    58:b5:ed:d6:c5:3b:5b:71:8b:45:f8:ed:68:12:82:
                    b2:26:63:0d:c6:c1:c7:c3:07:99:d3:73:cb:6e:a3:
                    25:77:d5:0c:1b:07:8c:75:67:dd:e9:32:61:2c:fa:
                    3b:0c:ca:2e:b1:fd:9d:90:c8:fd:0a:d4:f9:45:68:
                    75:67:df:d5:3f:c1:28:64:48:73:43:f2:45:11:b8:
                    9c:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:5F:BA:C6:8B:E5:6F:F3:4E:E9:CD:98:19:A9:4B:96:A7:DD:A9:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/bde6c327-7b42-3611-af47-4dc5ecb72b42.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.202.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b1:b9:da:40:e8:1a:ca:3f:61:5a:b2:b4:d7:07:fc:46:82:ce:
         e9:1f:a2:89:58:40:d9:2d:81:8e:94:e8:7d:33:52:83:7b:eb:
         a6:36:e0:a3:a6:28:d1:88:52:2b:de:30:33:c8:8e:95:60:45:
         47:01:14:91:42:2d:ad:4e:4d:fa:cd:ff:1e:ec:59:77:af:96:
         ee:52:a4:28:e9:09:ed:d0:db:34:9e:71:37:08:cc:2b:fb:10:
         84:5d:04:67:21:3b:3f:b4:c0:6a:9b:94:4f:42:3d:96:be:1e:
         ab:b0:3c:3f:9d:85:b2:6c:ad:68:07:ba:9e:a1:ee:20:3b:6d:
         96:45:9b:f9:9a:93:03:1c:90:c5:e6:1c:22:12:0f:da:53:7d:
         55:73:e4:a3:c7:20:e5:df:29:2c:b6:b8:93:97:1a:5f:54:2f:
         af:da:cf:a6:24:e3:52:8e:11:39:0b:14:4a:4c:3a:40:7f:6c:
         26:cb:07:d9:7d:14:b9:09:19:fc:6c:36:e9:ab:46:52:9d:77:
         84:89:39:ca:86:17:db:8a:4f:56:67:95:87:d4:1d:ba:ff:f5:
         f1:a2:13:6f:58:fd:eb:41:c8:c8:aa:54:c7:58:17:4a:6e:8a:
         4f:b3:79:78:da:d0:5d:47:f7:29:02:bb:f5:f3:fa:7a:6a:12:
         83:7a:72:89
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEUwTTx8q/iC/vXoHoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI0MDMxMzAxMDAyNloXDTI0MDYxMTAxMDAyNlowLzEtMCsGA1UEAxMk
NmRlYmE0MDQtMDg1Ny00YWM1LTkwZDUtY2M3Zjg1ODQ1OTMzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwCPKzTZakv/p1gIs27ooT+tb9HEvc8hme37d
FgbcKYs/0ny+b7ZU2sc9+hRLLXSnqIEaujQL/zXsDPvaBuVM7WJStpz41OsA29Hq
ecIieNJsJK+/KGf+6Kc4uPf1D+Hf0Ta4JM/6xuSUgyqhvJCZnR4QUqF70pcxiVN5
vNNWEvAsQ4ti8FgbmRkuR+LkA7PCUUZELEdh5CTtW+8xeoc1BRmFGmwE+V6P6aD0
deRTakLnm2xYte3WxTtbcYtF+O1oEoKyJmMNxsHHwweZ03PLbqMld9UMGweMdWfd
6TJhLPo7DMousf2dkMj9CtT5RWh1Z9/VP8EoZEhzQ/JFEbicbQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFA9fusaL5W/zTunNmBmpS5an3anKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvYmRlNmMzMjctN2I0Mi0z
NjExLWFmNDctNGRjNWVjYjcyYjQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKXKMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALG52kDoGso/YVqytNcH/EaCzukfoolYQNktgY6U6H0zUoN766Y24KOm
KNGIUiveMDPIjpVgRUcBFJFCLa1OTfrN/x7sWXevlu5SpCjpCe3Q2zSecTcIzCv7
EIRdBGchOz+0wGqblE9CPZa+HquwPD+dhbJsrWgHup6h7iA7bZZFm/makwMckMXm
HCISD9pTfVVz5KPHIOXfKSy2uJOXGl9UL6/az6Yk41KOETkLFEpMOkB/bCbLB9l9
FLkJGfxsNumrRlKdd4SJOcqGF9uKT1ZnlYfUHbr/9fGiE29Y/etByMiqVMdYF0pu
ik+zeXja0F1H9ykCu/Xz+npqEoN6cok=
-----END CERTIFICATE-----
Generated at Fri May 3 15:32:26 2024 by rpki-client on console-ams.rpki-client.org