Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e29a16e3-af04-319b-93dd-d23a8dd61845.roa
File:                     e29a16e3-af04-319b-93dd-d23a8dd61845.roa (raw, json)
Hash identifier:          NPzZdTwAU8IjytT5b/knN8036Jp3UDydVcxMK9E17y8=
Subject key identifier:   05:5A:6B:89:36:B5:AD:D9:88:57:E3:30:08:96:59:0C:F5:87:1E:74
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285848A9962EDD8D73F86DDF2F7B80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e29a16e3-af04-319b-93dd-d23a8dd61845.roa
Signing time:             Sat 25 Jan 2025 14:00:52 +0000
ROA not before:           Sat 25 Jan 2025 14:00:52 +0000
ROA not after:            Fri 25 Apr 2025 13:00:52 +0000
asID:                     21859
IP address blocks:        108.165.110.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 19 Feb 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a9:96:2e:dd:8d:73:f8:6d:df:2f:7b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jan 25 14:00:52 2025 GMT
            Not After : Apr 25 13:00:52 2025 GMT
        Subject: CN=df319192-3082-49ed-992c-a02a27014226
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:0f:86:9e:50:fc:71:e9:67:40:d6:26:eb:cc:
                    9d:57:52:1f:d8:6a:03:b8:17:12:9a:d9:40:3a:2f:
                    11:e0:84:e3:3a:f4:84:5b:ea:0d:e9:bd:76:0c:22:
                    53:f6:d2:53:da:39:5f:53:c9:30:49:03:b7:24:71:
                    97:4e:47:27:36:d2:af:52:e2:4a:e1:95:e5:8a:fc:
                    e5:e9:7a:5c:0e:5b:d3:bf:1f:2a:4f:77:ce:ca:f2:
                    f6:5b:b7:2c:2d:6a:93:1c:20:30:89:29:53:3b:52:
                    e3:f0:f4:87:16:b5:88:af:ff:db:32:54:62:81:e0:
                    83:4c:d9:50:69:fc:f8:d6:19:58:a6:44:03:68:84:
                    b6:79:99:2c:0f:5e:8a:e4:73:70:0c:b0:b1:f5:fe:
                    b9:9c:67:41:c9:db:32:56:7a:75:59:24:b0:7f:d4:
                    14:f3:4f:fb:2a:07:09:2a:e5:74:9e:0b:87:eb:6f:
                    c7:05:73:66:25:57:0d:b3:10:33:6b:1b:23:8e:24:
                    54:52:e3:7c:6f:21:af:5c:8e:c3:e2:13:77:a7:de:
                    b7:f5:91:a0:bc:79:7c:1d:75:0c:de:83:a5:a6:fe:
                    cc:dd:8b:42:4b:76:81:22:56:c7:d3:fc:53:4f:45:
                    8c:1d:5a:b0:5b:a5:45:fe:09:50:b4:4a:19:9a:b3:
                    91:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:5A:6B:89:36:B5:AD:D9:88:57:E3:30:08:96:59:0C:F5:87:1E:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e29a16e3-af04-319b-93dd-d23a8dd61845.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.110.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:d7:25:56:e8:f8:4e:ef:5b:86:25:d1:7b:06:ad:ea:b9:3e:
         b7:dd:24:97:cc:e4:2e:32:a3:45:e5:0a:2a:ef:32:a4:a2:a8:
         b4:12:0f:f3:5e:c1:90:8f:be:c2:ff:a4:62:02:47:a6:a6:6b:
         96:60:71:85:77:d3:77:6c:c1:40:6b:9c:b9:3a:49:66:16:aa:
         14:2c:36:2b:28:7e:a6:91:25:23:bb:7c:85:3a:4a:57:a1:2d:
         fa:ce:a1:d1:17:fd:fe:58:e0:a0:f3:42:a9:e0:85:c6:53:00:
         a4:ce:bc:fc:4e:f5:3e:8d:97:9d:8d:ec:46:1a:8f:65:cc:a5:
         1e:e1:ea:98:0a:8c:33:ac:69:35:35:0e:8a:01:8a:fe:80:59:
         fc:ea:c8:0c:0b:8a:c4:f3:ab:2e:a3:93:66:50:0c:cf:f2:95:
         50:80:4b:d1:c3:9d:16:0a:aa:01:ef:22:05:9c:71:02:0e:cc:
         dd:a8:ae:13:48:76:bc:70:06:be:56:72:bc:80:65:d7:48:00:
         0b:1e:75:26:9b:c8:34:0f:bb:29:3c:b4:b2:22:19:74:c0:da:
         97:1d:d0:6d:f1:cf:5d:75:76:49:a0:6b:59:53:b5:16:c3:fa:
         1c:c8:67:23:f4:9b:b1:1e:f2:ba:41:9f:72:91:c3:d1:f9:f2:
         04:c8:aa:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:18:06 2025 by rpki-client