Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/cd6b6269-ca55-32a9-941b-63a5e44316bf.roa
File:                     cd6b6269-ca55-32a9-941b-63a5e44316bf.roa (raw, json)
Hash identifier:          Sf1dgJoPb421ppty1TJKmnUTEAZdvEQ5COPC4jpyBBU=
Subject key identifier:   47:DA:F1:DC:2C:35:D5:66:10:F5:DE:AF:63:BD:09:94:23:15:36:EE
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584558C8391C9C2B9E71174C3CC0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/cd6b6269-ca55-32a9-941b-63a5e44316bf.roa
Signing time:             Wed 27 Mar 2024 13:00:35 +0000
ROA not before:           Wed 27 Mar 2024 13:00:35 +0000
ROA not after:            Tue 25 Jun 2024 13:00:35 +0000
asID:                     397373
IP address blocks:        108.165.188.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:58:c8:39:1c:9c:2b:9e:71:17:4c:3c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Mar 27 13:00:35 2024 GMT
            Not After : Jun 25 13:00:35 2024 GMT
        Subject: CN=d18779d6-4f88-487f-80d2-8df36d8c5962
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:5d:14:b7:e5:f0:14:e8:63:46:31:c0:63:6a:
                    0b:54:37:8e:62:d9:b2:de:66:f0:67:26:f9:f1:25:
                    73:a5:8b:cb:65:81:36:89:60:99:b3:b0:53:1b:e0:
                    0c:83:e3:01:76:43:ea:d3:65:85:9e:68:41:12:6e:
                    7a:89:51:40:00:ae:8d:63:11:c3:2c:a3:e2:9d:47:
                    22:18:fa:4d:e1:b5:74:dd:4c:ba:9c:7c:46:0e:34:
                    be:30:c4:38:e2:6e:0c:74:47:f9:24:c6:90:6d:ea:
                    f4:27:5c:58:73:2b:63:99:c3:c1:0e:47:3e:d2:0e:
                    0a:8b:60:27:5e:ef:48:a2:81:e0:03:49:55:74:e3:
                    87:0e:3a:0b:79:d1:3a:2e:7c:05:c0:c5:e0:6e:f7:
                    1f:7f:c6:e7:70:32:a4:30:ed:78:3b:28:2b:f4:91:
                    d9:86:c7:e6:31:43:39:88:0e:d0:dc:58:12:d2:ba:
                    3a:48:9c:da:0c:01:bc:1f:32:d5:fc:ac:b5:6d:19:
                    49:66:b1:ed:a9:68:d4:d4:5b:29:e1:b8:af:88:1f:
                    dd:dc:d1:1c:54:86:d1:7b:0c:11:de:b4:4b:f6:8b:
                    a3:da:16:80:a1:5e:55:94:39:80:e9:72:f4:23:5a:
                    02:6d:e7:7b:f8:55:90:52:64:60:ff:03:e2:76:9b:
                    c9:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:DA:F1:DC:2C:35:D5:66:10:F5:DE:AF:63:BD:09:94:23:15:36:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/cd6b6269-ca55-32a9-941b-63a5e44316bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.188.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:e8:b7:eb:ab:63:ce:fb:63:89:37:69:0f:e5:b6:01:b4:6d:
         bd:88:17:af:1a:75:c8:31:2a:87:ac:aa:2c:86:1c:6f:f0:0f:
         cd:e5:8a:2b:40:3d:34:13:83:a1:e5:ce:51:7d:aa:c2:40:16:
         7b:7c:00:9b:ea:c2:b4:2e:0e:dc:be:98:23:52:82:a8:fa:3d:
         bc:f8:d8:72:4e:9a:f6:65:d6:89:54:90:e9:c1:ec:aa:79:c4:
         6f:5c:38:5b:9c:5e:8e:66:95:8c:6c:79:f9:fd:99:1f:9f:7a:
         f4:2d:b6:cc:e3:dd:5f:b9:1c:bc:fe:9d:c6:1a:a7:14:e4:94:
         5c:44:4d:64:14:0b:06:00:61:b1:30:8d:51:47:d4:c7:bd:fb:
         76:b4:85:b7:75:86:ca:ee:33:8b:28:90:ff:b4:4e:b7:21:7d:
         78:42:60:17:9e:8a:b6:6a:d0:4a:cd:48:8a:fb:9e:d3:f5:2f:
         6b:9b:aa:17:76:21:72:eb:69:73:b1:cd:bc:8d:f7:c4:d8:f4:
         8d:4a:1c:fc:5c:8c:30:11:0c:11:e6:dc:38:56:d3:ec:ec:a0:
         0e:e9:c0:9e:9c:6d:7d:49:d9:a5:00:ba:a5:9a:50:4c:8a:1f:
         44:8c:ef:fb:c6:dd:20:cc:12:3e:04:3f:03:cc:d7:8a:55:8e:
         f9:d1:cb:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 22:41:36 2024 by rpki-client on console-fra.rpki-client.org