Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e2e2db6d-223a-331f-8002-0fe1e00559ba.roa
File:                     e2e2db6d-223a-331f-8002-0fe1e00559ba.roa (raw, json)
Hash identifier:          eyz8VpUk46amzNDrZWEae/bB51u/tbAyWbCUmyePCNU=
Subject key identifier:   E1:9A:DC:A1:2A:08:E6:E3:E1:5C:FD:E6:07:B9:92:4C:EC:60:81:41
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285848A9962ECF7139BF2DE1E6A300
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e2e2db6d-223a-331f-8002-0fe1e00559ba.roa
Signing time:             Sat 25 Jan 2025 14:00:52 +0000
ROA not before:           Sat 25 Jan 2025 14:00:52 +0000
ROA not after:            Fri 25 Apr 2025 13:00:52 +0000
asID:                     21859
IP address blocks:        108.165.107.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 09 Feb 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a9:96:2e:cf:71:39:bf:2d:e1:e6:a3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jan 25 14:00:52 2025 GMT
            Not After : Apr 25 13:00:52 2025 GMT
        Subject: CN=4eb246e9-31f7-4ea6-b1f9-d01f43d29f8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:dd:c8:bc:5b:45:96:3e:36:bd:82:5c:3b:03:
                    8e:10:a9:ec:cd:61:84:e3:5b:81:88:df:22:0b:81:
                    fe:fa:6b:ae:a3:df:ca:5b:7b:c4:c4:ce:6e:63:cc:
                    bf:91:6e:92:f0:4c:d2:4b:68:9d:53:13:2c:50:6b:
                    0d:35:d6:fd:7c:33:77:11:a8:2e:72:49:22:f2:8b:
                    88:ac:59:0d:6a:c1:ca:96:f0:1b:bc:c0:16:7e:c4:
                    a8:03:f3:6d:a2:b1:20:99:bd:26:4f:b4:06:6c:84:
                    c0:59:8e:68:f2:12:33:6d:00:b7:a2:66:10:e9:33:
                    e6:a0:08:60:c9:7a:2b:53:b1:91:09:70:20:5a:b4:
                    0e:7a:ef:7a:25:da:55:f4:40:13:1b:5a:52:2c:c6:
                    d2:12:4e:28:42:2d:43:3d:65:1d:a1:07:e8:db:4e:
                    ff:81:4b:14:68:d2:04:05:c0:23:f8:58:ae:30:7c:
                    46:08:ca:1a:d2:c9:a4:c3:ac:e2:61:9a:f7:c1:31:
                    0b:c0:ed:af:81:27:95:43:f0:40:fa:71:19:c2:29:
                    6b:5d:f3:72:bc:a0:4c:6f:cb:cc:17:4a:be:b8:50:
                    4e:d8:01:6c:a2:c0:64:96:e9:08:77:2d:4c:c1:c4:
                    90:47:9e:cb:0f:e9:d2:0d:87:ae:37:38:2f:42:73:
                    01:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:9A:DC:A1:2A:08:E6:E3:E1:5C:FD:E6:07:B9:92:4C:EC:60:81:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e2e2db6d-223a-331f-8002-0fe1e00559ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.107.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:9b:42:5a:fa:68:51:3e:ba:2b:22:9c:ce:1f:de:93:2f:cb:
         81:52:14:d1:7a:bd:ce:c4:31:03:68:41:bb:79:04:1f:f8:6d:
         fc:35:9e:ea:e6:9c:db:96:bd:4b:26:2a:0b:75:78:05:34:9b:
         77:97:de:e0:25:cc:c4:23:98:5a:dc:68:e9:9e:31:81:0f:36:
         1c:51:95:a4:8c:33:2b:9d:3e:04:11:df:44:90:22:6a:13:dc:
         ae:c3:76:de:aa:ed:5a:e7:fc:ed:09:e6:4f:eb:13:5a:55:06:
         4c:91:be:82:d1:92:a5:ab:06:62:1d:f7:f4:c6:d7:e6:f0:96:
         cd:bf:2a:ab:29:f9:80:74:70:d5:b7:38:1c:1a:0f:75:c3:67:
         5d:0c:a2:c3:40:41:8f:04:59:94:3c:d6:97:fc:ed:38:2f:4a:
         fa:92:69:e5:e2:ac:ac:9d:88:f4:5f:43:c7:06:4c:73:6a:6c:
         7a:16:0a:86:09:fa:98:22:d0:2c:76:aa:54:b0:9f:67:f8:8c:
         0d:ed:a4:ff:1b:5b:0a:68:08:d8:b4:cd:e7:b2:68:c5:50:4b:
         6b:a2:ca:dc:58:5a:44:04:b8:28:76:6e:db:c0:e2:dd:cf:5e:
         d1:04:57:7e:e8:f1:5b:cb:0a:27:d3:5d:c6:15:07:e3:23:07:
         1c:4a:23:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 7 11:08:12 2025 by rpki-client