Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d5d09633-78db-304a-bcde-f657be08e120.roa
File:                     d5d09633-78db-304a-bcde-f657be08e120.roa (raw, json)
Hash identifier:          Pil10pWdQbX1TGUE/rjFtDBAgDjKcntG1tPb6g1R++k=
Subject key identifier:   12:03:23:8E:87:55:48:89:1C:3E:13:B7:5B:52:DD:5D:7F:0F:F3:10
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F432858450DFB5148211470592CF99BA0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d5d09633-78db-304a-bcde-f657be08e120.roa
Signing time:             Thu 29 Feb 2024 17:57:57 +0000
ROA not before:           Thu 29 Feb 2024 17:57:57 +0000
ROA not after:            Wed 29 May 2024 16:57:57 +0000
asID:                     7018
IP address blocks:        108.165.115.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:0d:fb:51:48:21:14:70:59:2c:f9:9b:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Feb 29 17:57:57 2024 GMT
            Not After : May 29 16:57:57 2024 GMT
        Subject: CN=d5f92dda-1176-418f-872a-9e9e00c957f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:94:66:36:dc:75:8f:22:77:ad:50:3b:f2:0c:
                    a7:c6:59:c8:6a:47:dd:26:8c:46:02:c8:67:3d:58:
                    ab:79:21:e1:71:64:20:89:8e:41:1e:37:cc:44:75:
                    33:de:23:0e:e8:32:d8:58:17:ab:f0:a9:5a:52:15:
                    60:f6:9c:b1:58:a4:34:bc:ad:e8:ef:43:96:ae:0a:
                    c0:b9:47:23:9d:9a:02:36:f4:8c:7c:3f:9e:d9:d0:
                    bf:bb:30:83:77:fb:ba:8f:3c:73:ef:06:80:84:04:
                    e6:99:9b:0d:0b:95:01:2d:0e:3f:bf:26:5e:dd:ae:
                    88:9c:6f:2b:ab:d1:37:1b:a0:30:35:ac:b0:a0:cd:
                    41:92:11:c0:28:14:fb:82:18:bf:d4:91:32:85:db:
                    c0:d4:74:6d:36:df:03:82:ea:ac:01:8b:4b:d0:55:
                    ec:12:66:14:ee:a0:f0:11:eb:4a:81:a0:a1:81:70:
                    53:11:1f:ec:63:c0:da:15:de:b1:c7:fb:63:18:22:
                    75:2b:79:bf:1b:d7:78:b3:8a:78:e6:a3:17:b0:50:
                    67:f5:04:09:4d:3f:22:4d:54:09:51:94:53:06:c7:
                    02:0c:91:9e:51:0d:b7:6b:c2:b5:20:28:d4:fd:38:
                    27:b4:ac:c2:03:10:b3:a7:ca:34:32:df:43:83:bc:
                    c8:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:03:23:8E:87:55:48:89:1C:3E:13:B7:5B:52:DD:5D:7F:0F:F3:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d5d09633-78db-304a-bcde-f657be08e120.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.115.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:ea:b3:61:8d:b7:3e:81:f4:eb:df:87:4c:4a:ae:b3:dd:e4:
         7d:1f:2c:58:d4:41:d2:2d:c6:fe:a0:7b:48:28:31:d9:bc:ef:
         23:71:a1:3c:01:be:44:fc:2a:6e:18:1d:27:75:14:13:e0:cd:
         66:d7:76:d1:7f:5e:b4:8f:43:db:0c:9d:9f:fc:cb:a2:79:e2:
         c2:59:7e:40:82:91:e2:12:2e:ed:35:8f:41:bc:a3:a7:8b:e9:
         17:b1:39:d7:39:69:8e:ca:03:6c:a3:74:ef:c2:0b:dc:2a:73:
         d1:b9:17:82:ca:34:b2:84:4f:57:0c:e5:e6:3b:98:b8:3b:b5:
         e7:8d:ee:4b:10:28:b2:e4:53:4b:78:af:6c:83:7f:fa:a8:f2:
         b4:7c:3b:dc:15:76:c0:b1:78:3d:e8:cd:44:14:be:9b:a6:00:
         84:ec:9b:2b:80:8e:0b:cb:0e:fe:b7:25:eb:bc:91:b3:a2:f8:
         5c:e5:7a:ff:67:1c:bd:75:98:2e:57:c3:01:b4:c5:f9:22:98:
         95:5e:2e:f5:26:4a:11:6f:ae:6d:db:29:56:91:2e:b0:01:78:
         fe:0d:45:ad:2d:44:1f:85:c7:78:26:1f:19:2f:cc:75:3f:d7:
         3a:b4:af:55:b8:38:6d:76:03:0f:83:87:0a:54:ac:2e:d5:6b:
         56:24:36:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 17:59:12 2024 by rpki-client on console-ams.rpki-client.org