Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e475c878-66ce-318c-a35d-fc3d876c9b7c.roa
File:                     e475c878-66ce-318c-a35d-fc3d876c9b7c.roa (raw, json)
Hash identifier:          BYeH4SsGVudFWAROoIbWx0bWDdJNgcZlwL0TM+rbdYE=
Subject key identifier:   BA:97:7D:9F:B4:A8:00:80:E3:0F:E6:02:E9:13:C6:B6:2A:D1:8D:4F
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584510D794CBEFAD02AF8D04D8E0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e475c878-66ce-318c-a35d-fc3d876c9b7c.roa
Signing time:             Fri 01 Mar 2024 18:33:23 +0000
ROA not before:           Fri 01 Mar 2024 18:33:23 +0000
ROA not after:            Thu 30 May 2024 17:33:23 +0000
asID:                     834
IP address blocks:        108.165.174.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:10:d7:94:cb:ef:ad:02:af:8d:04:d8:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Mar  1 18:33:23 2024 GMT
            Not After : May 30 17:33:23 2024 GMT
        Subject: CN=52e96638-e1e8-4b09-833a-8d44e90c988c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:2c:97:14:08:ee:ed:c4:64:d2:6f:0a:63:cd:
                    55:af:94:1d:ad:e8:58:7e:27:b9:c4:69:98:97:5e:
                    fd:ec:30:18:51:6e:de:9e:92:42:06:b9:80:da:26:
                    4a:82:b2:2e:12:a6:d1:6b:1d:1f:1f:ab:2f:cc:81:
                    b8:09:85:a6:83:77:80:9c:29:80:9c:17:09:a8:95:
                    1d:18:81:93:62:ff:c7:94:6d:bd:73:97:99:49:fa:
                    c1:96:ae:ca:5a:f5:ef:a4:bb:16:ff:53:84:c4:00:
                    f5:70:cd:5e:69:d0:e3:7d:6d:f9:ff:0f:e7:00:c2:
                    ff:4d:9b:63:b5:89:a1:4a:fa:9d:20:79:bc:15:f0:
                    e2:b2:a2:3a:b9:37:48:21:8b:43:30:0d:85:05:15:
                    62:f9:e6:fe:90:72:c0:e6:e3:26:e0:83:00:e8:f1:
                    ef:e5:0e:0d:97:db:69:07:de:87:c3:ed:fa:e6:e3:
                    0a:21:f1:4a:42:d1:51:cf:1d:22:c9:7d:25:04:9c:
                    b7:1a:85:ed:7c:70:3e:ab:89:29:55:7b:f8:df:5d:
                    03:e5:0f:ca:49:8c:6d:59:d0:8a:8f:76:3b:b1:4d:
                    e9:c2:67:a4:db:83:b0:d8:8b:83:d0:b1:45:4d:3e:
                    4d:b4:b6:ab:8c:6f:0a:d5:fc:3a:a2:5a:0d:da:49:
                    aa:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:97:7D:9F:B4:A8:00:80:E3:0F:E6:02:E9:13:C6:B6:2A:D1:8D:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e475c878-66ce-318c-a35d-fc3d876c9b7c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.174.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:0f:db:44:a9:52:5d:89:b1:8f:ca:2b:8b:79:de:34:c3:02:
         92:8e:2f:bc:ac:18:ee:73:7c:dd:54:d1:ce:00:0a:e9:1e:ca:
         66:e0:88:36:e9:8c:76:d7:1f:be:31:55:ab:13:8a:7b:dc:c3:
         9e:86:88:e5:07:2d:18:53:ed:d2:ab:a6:f0:82:df:dc:8e:45:
         76:da:31:b6:87:f7:84:23:7e:2c:9c:24:a4:c2:d8:c8:15:a2:
         e6:b2:85:5f:2c:ac:56:79:ee:e5:f7:2c:4f:ac:90:5c:0c:d3:
         ba:73:d1:fb:3f:db:60:28:69:96:b7:79:bb:fb:31:a9:2f:b8:
         12:0f:07:26:c9:d4:a9:e7:bd:65:9a:8e:9a:0c:d6:e6:a7:1e:
         3c:e3:d0:fa:45:48:3c:08:54:ab:a5:53:05:60:03:84:cc:54:
         58:dd:18:73:ed:1f:15:4b:e9:cd:f7:77:9e:4b:cb:85:40:fb:
         a1:00:35:b0:a4:37:97:a8:fe:4b:61:e3:2a:1d:f3:e1:c3:c0:
         fa:93:a2:94:b1:c8:3f:5b:18:44:ed:34:7d:d5:df:1e:c5:02:
         93:45:a4:58:54:e5:03:0c:fd:d7:f3:98:1a:fe:8e:9e:31:58:
         13:30:50:08:15:5c:ff:c2:bd:c9:39:82:05:d6:c2:62:c8:52:
         6c:68:c7:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 01:07:24 2024 by rpki-client on console-ams.rpki-client.org