Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e270e768-238a-3aba-b001-32f8a4443b31.roa
File:                     e270e768-238a-3aba-b001-32f8a4443b31.roa (raw, json)
Hash identifier:          s6FlgIHjhXhEySIDaG8Vns1Bz94hgTrNbkUD2qNS3oY=
Subject key identifier:   A3:0A:9E:76:FC:15:92:9D:0B:F1:13:AC:16:6D:55:55:26:51:B2:17
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F432858452C1D47986BE14C3B74931D80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e270e768-238a-3aba-b001-32f8a4443b31.roa
Signing time:             Mon 11 Mar 2024 13:00:31 +0000
ROA not before:           Mon 11 Mar 2024 13:00:31 +0000
ROA not after:            Sun 09 Jun 2024 13:00:31 +0000
asID:                     21859
IP address blocks:        108.165.118.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:2c:1d:47:98:6b:e1:4c:3b:74:93:1d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Mar 11 13:00:31 2024 GMT
            Not After : Jun  9 13:00:31 2024 GMT
        Subject: CN=31439db2-d11c-4113-aded-f8376b9e1c25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:91:c5:7e:eb:cf:15:7a:c3:2d:86:a1:e3:38:
                    1f:c6:ac:07:11:86:cf:76:c4:0d:36:09:f3:37:b4:
                    de:4b:9e:42:17:17:4a:1a:7b:8d:4b:8f:ba:9f:d4:
                    33:40:02:59:ff:67:a6:c3:a6:1d:c1:13:f3:4c:5b:
                    12:cb:6c:c5:7c:06:af:d5:b7:67:c0:36:be:e0:ea:
                    df:81:6d:a4:d3:43:e4:96:b5:7d:b7:d4:37:66:56:
                    45:27:62:72:3f:12:55:93:b2:c2:16:e9:34:7f:fc:
                    2e:ce:d8:d7:df:a9:9c:eb:e1:f3:58:19:e7:7b:f9:
                    16:7d:fc:50:e0:81:71:c8:86:fe:e2:a9:f7:62:07:
                    0d:3e:39:8f:1e:17:4a:f4:ce:a2:08:5f:f1:9a:75:
                    d0:11:b8:cf:af:de:88:a5:72:49:90:f5:39:aa:af:
                    a1:17:56:12:90:18:52:30:e3:32:dc:d5:fd:09:42:
                    57:2c:40:82:d4:73:0b:34:d7:94:bb:b4:42:43:39:
                    15:e5:12:cd:2c:e9:43:29:7a:f9:47:48:fe:14:1f:
                    3d:5c:92:24:c6:d5:49:93:d1:01:ba:e3:fa:d7:0f:
                    ca:32:64:97:91:cd:d7:8a:b2:83:47:ed:7f:d0:37:
                    d7:9f:1a:e5:3f:64:7f:e1:86:0d:31:b3:66:30:86:
                    1f:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:0A:9E:76:FC:15:92:9D:0B:F1:13:AC:16:6D:55:55:26:51:B2:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e270e768-238a-3aba-b001-32f8a4443b31.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.118.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:98:fc:49:31:fb:79:5f:2e:10:a0:27:f2:47:07:1a:c8:2c:
         18:a2:e0:7d:a6:fc:50:2f:4a:93:25:ec:97:4f:7d:a8:e1:4e:
         38:4d:45:ba:5c:ae:8f:21:64:c3:68:0a:fa:7f:dd:77:0e:fa:
         c5:d5:ec:b1:fe:a6:18:4d:7d:bd:d6:a5:29:86:2b:51:f3:de:
         61:f7:db:9c:86:5f:ca:79:10:8f:8c:32:fe:65:7d:27:ff:02:
         85:8d:6c:d0:a8:72:5f:d9:c1:4b:89:40:d8:7e:d1:2a:7e:0e:
         f4:b7:5f:e2:a2:36:53:a1:6a:4d:5c:f5:0b:0d:bb:e4:85:d2:
         3a:97:3b:53:ed:75:5c:f6:1e:eb:9a:9a:f4:0a:9a:cd:4c:eb:
         9b:28:f9:9f:30:55:f8:77:b9:c7:35:7a:ae:0f:b0:1a:ca:e3:
         4d:86:7f:ab:fa:27:ca:44:cd:a9:9c:26:b4:49:94:07:96:aa:
         2b:df:56:38:b9:1f:9d:cf:9a:ee:14:ea:da:ac:ae:d8:5f:b1:
         9b:4d:49:a4:bd:f2:4c:d7:ee:4f:31:c9:94:ea:0f:eb:3c:46:
         dd:ce:93:6a:eb:f6:17:10:f3:a5:50:79:8c:1c:6b:44:af:71:
         09:e7:82:c9:0b:a2:fc:2f:07:0a:36:12:b6:8d:5f:39:67:18:
         92:df:5b:64
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEUsHUeYa+FMO3STHYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI0MDMxMTEzMDAzMVoXDTI0MDYwOTEzMDAzMVowLzEtMCsGA1UEAxMk
MzE0MzlkYjItZDExYy00MTEzLWFkZWQtZjgzNzZiOWUxYzI1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvpHFfuvPFXrDLYah4zgfxqwHEYbPdsQNNgnz
N7TeS55CFxdKGnuNS4+6n9QzQAJZ/2emw6YdwRPzTFsSy2zFfAav1bdnwDa+4Orf
gW2k00PklrV9t9Q3ZlZFJ2JyPxJVk7LCFuk0f/wuztjX36mc6+HzWBnne/kWffxQ
4IFxyIb+4qn3YgcNPjmPHhdK9M6iCF/xmnXQEbjPr96IpXJJkPU5qq+hF1YSkBhS
MOMy3NX9CUJXLECC1HMLNNeUu7RCQzkV5RLNLOlDKXr5R0j+FB89XJIkxtVJk9EB
uuP61w/KMmSXkc3XirKDR+1/0DfXnxrlP2R/4YYNMbNmMIYfYQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKMKnnb8FZKdC/ETrBZtVVUmUbIXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvZTI3MGU3NjgtMjM4YS0z
YWJhLWIwMDEtMzJmOGE0NDQzYjMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKV2MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAK2Y/Ekx+3lfLhCgJ/JHBxrILBii4H2m/FAvSpMl7JdPfajhTjhNRbpc
ro8hZMNoCvp/3XcO+sXV7LH+phhNfb3WpSmGK1Hz3mH325yGX8p5EI+MMv5lfSf/
AoWNbNCocl/ZwUuJQNh+0Sp+DvS3X+KiNlOhak1c9QsNu+SF0jqXO1PtdVz2Huua
mvQKms1M65so+Z8wVfh3ucc1eq4PsBrK402Gf6v6J8pEzamcJrRJlAeWqivfVji5
H53Pmu4U6tqsrthfsZtNSaS98kzX7k8xyZTqD+s8Rt3Ok2rr9hcQ86VQeYwca0Sv
cQnngskLovwvBwo2EraNXzlnGJLfW2Q=
-----END CERTIFICATE-----
Generated at Thu May 2 17:32:56 2024 by rpki-client on console-ams.rpki-client.org