Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/dbb74ff3-e8dd-3044-9aeb-f22de7c04d8f.roa
File:                     dbb74ff3-e8dd-3044-9aeb-f22de7c04d8f.roa (raw, json)
Hash identifier:          Sr3jW/nLmGoNy/ANfwlxkZraBrGCL4hVTzmqhCG0DOA=
Subject key identifier:   61:86:65:08:CA:08:2D:2D:79:73:71:73:92:DA:DD:89:C3:47:C3:3B
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F432858454272C49F22EEE1709FBE8880
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/dbb74ff3-e8dd-3044-9aeb-f22de7c04d8f.roa
Signing time:             Tue 19 Mar 2024 13:00:34 +0000
ROA not before:           Tue 19 Mar 2024 13:00:34 +0000
ROA not after:            Mon 17 Jun 2024 13:00:34 +0000
asID:                     137409
IP address blocks:        108.165.32.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:42:72:c4:9f:22:ee:e1:70:9f:be:88:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Mar 19 13:00:34 2024 GMT
            Not After : Jun 17 13:00:34 2024 GMT
        Subject: CN=3c2a49aa-ac89-4cef-afec-a9715bdd9a00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:e3:63:b4:62:4f:a2:50:5c:01:c0:3e:07:66:
                    1b:59:04:7c:18:e0:ec:65:93:ac:4a:9a:28:04:90:
                    1a:12:b5:cd:15:0d:08:37:d0:a2:31:c5:f2:a2:89:
                    05:3e:db:dc:1e:75:f3:3a:7c:45:d2:9a:2c:5a:87:
                    4a:75:11:28:61:b5:bc:b9:b5:40:b3:6f:d6:dd:ba:
                    f6:3d:1c:5f:34:80:96:d1:e6:38:69:6e:eb:b7:5d:
                    2a:f4:cd:d5:60:30:3a:15:ec:28:a9:c3:7a:45:b4:
                    ec:ca:32:dd:bb:d0:4b:a0:64:ab:74:20:74:d4:7d:
                    9d:c9:a1:c8:68:88:8a:f9:1a:87:94:b2:a2:d3:28:
                    68:b5:d6:ab:ab:e6:bf:a6:d3:85:2d:4b:7a:3d:5f:
                    20:2a:b8:5f:49:e6:06:23:fa:df:df:77:2e:f1:d4:
                    8e:75:96:84:3b:bb:ce:6a:f5:7b:fe:2c:3e:41:cb:
                    81:44:04:a8:e3:3c:65:66:32:a0:7a:02:32:84:17:
                    b3:68:81:11:91:97:e8:64:7f:b1:55:52:f8:b2:62:
                    01:60:bb:74:82:b7:ba:76:76:15:81:17:96:28:74:
                    d2:83:1d:82:b7:0d:af:6f:e7:16:67:00:8d:40:06:
                    6c:b0:f6:0e:2e:90:32:d6:41:55:c1:7e:bc:b9:3d:
                    cf:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:86:65:08:CA:08:2D:2D:79:73:71:73:92:DA:DD:89:C3:47:C3:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/dbb74ff3-e8dd-3044-9aeb-f22de7c04d8f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.32.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:85:9c:b0:26:cb:8f:3f:15:bc:3a:67:f2:8e:6e:bf:53:05:
         ae:58:18:ea:bc:8e:8e:68:f7:f0:d5:bf:40:57:dc:ce:ba:e4:
         31:0b:33:28:ee:99:d1:14:a8:b8:50:64:25:e4:4a:03:21:ee:
         bb:6a:43:7c:65:f1:e3:62:26:1d:7b:04:cb:7a:8c:bf:08:c6:
         a6:1e:06:f9:4f:8c:44:1e:22:19:06:94:b6:1f:09:91:2f:c8:
         9b:88:c2:de:ae:05:b8:2b:b7:db:d0:b5:91:0c:c5:dd:21:0e:
         a6:07:d3:08:05:e6:43:0b:9c:e9:fa:23:d3:53:12:4b:3f:b6:
         f5:ec:c0:7b:f4:b6:74:db:5e:3b:b8:45:f0:98:41:4a:f6:a2:
         d9:80:eb:cb:c3:02:0d:9c:4d:06:09:8b:80:6c:ae:86:48:03:
         7e:80:54:b5:47:a2:4b:6a:ba:a4:06:a6:8a:a6:c6:49:f2:2f:
         ec:55:3e:18:19:72:a7:2c:f1:bd:bf:f0:23:13:f9:89:76:4b:
         97:6d:64:73:71:a6:a8:74:ac:c2:38:ac:7e:e5:6e:0d:92:5c:
         64:c2:5a:5d:04:fa:61:66:09:23:2f:0c:de:2f:c3:d1:cb:95:
         ae:df:e5:71:4c:49:55:b7:7a:5c:1e:01:ba:70:91:31:97:1a:
         f0:74:e4:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 17:59:13 2024 by rpki-client on console-ams.rpki-client.org