Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e070c180-3f7c-3e10-ba80-b7094d7a9ba1.roa
File:                     e070c180-3f7c-3e10-ba80-b7094d7a9ba1.roa (raw, json)
Hash identifier:          QQGftjcRDgs0poxjA/Mgsdx2Sb5fpxBQmJDaja00KHA=
Subject key identifier:   27:01:B8:05:F1:35:5A:03:AE:B8:B2:0C:79:94:6F:65:4A:7F:10:DC
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F432858452C1D4850BF2389DE5CB52B80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e070c180-3f7c-3e10-ba80-b7094d7a9ba1.roa
Signing time:             Mon 11 Mar 2024 13:00:31 +0000
ROA not before:           Mon 11 Mar 2024 13:00:31 +0000
ROA not after:            Sun 09 Jun 2024 13:00:31 +0000
asID:                     21859
IP address blocks:        108.165.132.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:2c:1d:48:50:bf:23:89:de:5c:b5:2b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Mar 11 13:00:31 2024 GMT
            Not After : Jun  9 13:00:31 2024 GMT
        Subject: CN=dfd370ba-7e30-4159-9291-08fd5ef18319
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:8b:42:7e:cf:81:58:5e:a5:01:41:58:fb:16:
                    8d:62:08:ee:39:d9:ec:02:ec:ef:89:60:64:db:46:
                    a2:eb:90:ff:7f:cf:0a:5a:28:64:23:db:76:db:a3:
                    58:3b:a3:28:39:f1:f5:bb:b8:8c:d3:38:66:4a:0e:
                    64:e9:fa:28:37:37:48:e3:e9:af:a8:fa:81:38:be:
                    c3:76:34:4d:fc:3a:43:a9:97:ea:94:22:ac:89:7e:
                    21:92:ce:70:cc:ed:11:27:c2:e6:75:3e:27:ff:2d:
                    b4:08:17:a7:6c:7f:2b:6a:79:9b:ed:f2:94:13:70:
                    be:c3:39:54:d0:ba:75:b3:c5:7b:29:de:b4:95:ed:
                    eb:08:75:8c:51:56:30:27:55:8c:ac:26:c7:b6:5a:
                    1c:14:38:22:d0:3d:c5:5d:7d:83:e7:43:a3:a5:df:
                    d2:9d:6f:7b:22:7e:9e:4f:50:32:da:b2:58:fe:45:
                    2f:bb:7e:b8:4a:5e:85:a3:38:df:26:28:67:95:93:
                    aa:ad:97:3a:7a:4a:fe:ae:d2:88:4e:e1:9a:f9:02:
                    14:7a:e2:16:23:bb:ed:e5:fc:b5:0d:9f:d3:d2:e6:
                    d7:e0:e8:c8:ec:ae:7b:d8:57:75:32:6e:9e:60:fe:
                    fe:db:25:91:e6:d2:e9:62:dc:1b:c3:08:93:c0:39:
                    7e:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:01:B8:05:F1:35:5A:03:AE:B8:B2:0C:79:94:6F:65:4A:7F:10:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e070c180-3f7c-3e10-ba80-b7094d7a9ba1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.132.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:62:e0:77:d5:04:43:93:a9:bc:3c:c2:2c:13:f1:f5:2c:e5:
         3f:88:a6:bf:56:32:1c:be:b9:e7:12:68:14:f7:b2:9e:38:de:
         66:be:65:d7:52:a2:5b:88:bf:26:19:1a:fb:4f:0e:8d:36:73:
         ec:ca:e8:be:a7:a6:59:09:35:95:f6:86:e0:e0:e8:0b:46:14:
         e5:8e:bf:1d:f2:92:50:38:e8:6f:61:f7:55:bf:e1:60:61:db:
         c6:39:ab:59:55:c6:34:48:b2:19:86:d9:c7:e4:bc:3a:44:5b:
         37:75:0c:21:02:b6:7a:60:d9:3c:65:a2:17:7e:f8:f4:e8:a1:
         d8:d4:b5:58:9b:0b:fe:ba:9b:e7:49:36:0b:27:0d:79:15:5a:
         ff:fc:49:65:9e:b1:94:f4:fb:59:c8:2d:47:66:2e:08:3f:18:
         5d:a7:90:c1:f2:e7:b3:92:63:5e:71:0f:c8:a1:42:8c:3e:e4:
         95:a5:47:56:5d:87:33:25:23:b8:d4:e6:c5:e9:b4:09:38:78:
         28:07:8e:c4:90:ff:e7:8e:5b:e2:bb:f6:3c:38:48:c0:b7:f7:
         7a:d9:57:09:3b:f9:21:58:7e:91:4f:d9:e0:b2:c6:5b:65:0f:
         c0:73:f0:02:91:25:92:d5:fc:c0:ea:e7:4a:55:ea:16:be:b0:
         04:d4:3f:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 01:49:02 2024 by rpki-client on console-fra.rpki-client.org