Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e5a2b901-93aa-343b-bf32-8a23a333f069.roa
File:                     e5a2b901-93aa-343b-bf32-8a23a333f069.roa (raw, json)
Hash identifier:          UPJFPxXJs6DxalMVUsNHrRuW3qaMoeqoUZSE44kkB2Y=
Subject key identifier:   F6:2F:CE:2B:18:CA:6D:76:41:65:E0:D0:B0:85:C7:12:1F:88:AE:EF
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F432858455658A575DC162E8C6B034400
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e5a2b901-93aa-343b-bf32-8a23a333f069.roa
Signing time:             Tue 26 Mar 2024 16:04:12 +0000
ROA not before:           Tue 26 Mar 2024 16:04:12 +0000
ROA not after:            Mon 24 Jun 2024 16:04:12 +0000
asID:                     21859
IP address blocks:        108.165.221.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:56:58:a5:75:dc:16:2e:8c:6b:03:44:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Mar 26 16:04:12 2024 GMT
            Not After : Jun 24 16:04:12 2024 GMT
        Subject: CN=0eab1bb2-c600-41ae-8929-9f7565d0c3f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:a5:c9:cf:f9:72:dd:47:64:01:a8:28:e9:f8:
                    de:83:6a:94:5d:b0:49:ac:04:ff:f7:b1:28:da:88:
                    8f:f6:23:e4:39:e7:2b:bf:c1:4a:0c:27:48:c7:37:
                    1b:3b:81:c8:c7:20:63:bd:23:35:7b:88:f3:44:01:
                    7f:da:f3:a1:81:f6:1d:c6:bb:52:b5:59:32:e6:6f:
                    ca:a8:7b:ea:e3:e5:1e:59:e5:07:7f:4b:d1:49:96:
                    6c:7a:cf:de:f5:64:2c:94:cc:1d:15:69:89:db:b0:
                    56:3f:76:30:f5:7f:33:ec:cf:35:28:d6:b9:ec:8b:
                    50:4c:d5:91:c9:6b:29:2e:c0:ad:56:d4:30:ff:9e:
                    34:12:eb:1c:05:80:00:e4:d4:6c:d9:16:8b:3e:86:
                    ce:fd:86:33:35:ae:59:fe:28:a8:f1:d6:61:ae:56:
                    9a:cf:17:1d:1c:80:f9:f0:e9:d0:b4:f6:e1:7c:9d:
                    28:66:48:55:19:55:7f:ba:32:9a:c1:98:cf:32:0d:
                    b3:37:a7:1b:74:52:93:25:fc:45:3f:24:bb:1d:92:
                    40:27:c9:9c:d9:96:93:37:bb:54:14:7a:bf:c7:17:
                    81:31:7b:7b:04:bb:58:a9:7e:a5:ef:ce:d0:15:b4:
                    f5:fd:b5:ae:04:79:57:7c:b2:f6:85:35:8b:27:7b:
                    21:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:2F:CE:2B:18:CA:6D:76:41:65:E0:D0:B0:85:C7:12:1F:88:AE:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e5a2b901-93aa-343b-bf32-8a23a333f069.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.221.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:9d:cb:8d:de:93:f9:4e:bd:2f:eb:09:69:12:a3:aa:36:cd:
         0a:f0:69:1f:84:80:b8:a2:5d:c8:32:c6:73:d7:b0:2a:25:42:
         5f:cd:d0:c8:af:8a:4f:7e:08:48:74:3f:b0:70:ef:52:dd:65:
         1a:1b:3a:d0:8b:a1:e6:0e:2b:e0:65:52:28:98:b6:63:ca:17:
         c6:4d:b6:d5:96:4e:b5:e8:03:a8:4c:f3:2b:19:c3:4d:0f:7d:
         42:38:82:7a:48:2a:16:60:c3:f7:21:74:37:b4:8c:e9:b3:a1:
         00:ca:c2:10:11:a2:a3:8f:8e:98:83:e1:bf:10:9a:23:7f:bb:
         7a:73:4c:92:44:c2:85:6a:4a:75:46:7b:dc:fb:0d:fc:1b:7b:
         17:3e:ac:2b:d4:be:82:b6:f5:44:34:b4:53:85:6b:c9:bd:a6:
         bd:e6:74:0f:a5:13:71:83:63:ba:cf:dd:f1:7c:a1:49:c3:83:
         a1:c8:cd:a2:19:9f:8d:0d:3c:88:c1:36:9d:e1:cd:2c:4b:1c:
         17:08:38:c8:e3:03:1e:9b:98:7c:06:79:6f:f4:fc:37:6e:85:
         3b:99:53:ed:93:bd:57:8b:66:16:a0:7d:29:10:15:8b:7e:aa:
         73:0c:b7:92:63:0a:c3:f7:b3:90:96:41:a6:d4:28:37:ba:bb:
         62:0b:6b:22
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVWWKV13BYujGsDRAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI0MDMyNjE2MDQxMloXDTI0MDYyNDE2MDQxMlowLzEtMCsGA1UEAxMk
MGVhYjFiYjItYzYwMC00MWFlLTg5MjktOWY3NTY1ZDBjM2Y4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj6XJz/ly3UdkAago6fjeg2qUXbBJrAT/97Eo
2oiP9iPkOecrv8FKDCdIxzcbO4HIxyBjvSM1e4jzRAF/2vOhgfYdxrtStVky5m/K
qHvq4+UeWeUHf0vRSZZses/e9WQslMwdFWmJ27BWP3Yw9X8z7M81KNa57ItQTNWR
yWspLsCtVtQw/540EuscBYAA5NRs2RaLPobO/YYzNa5Z/iio8dZhrlaazxcdHID5
8OnQtPbhfJ0oZkhVGVV/ujKawZjPMg2zN6cbdFKTJfxFPyS7HZJAJ8mc2ZaTN7tU
FHq/xxeBMXt7BLtYqX6l787QFbT1/bWuBHlXfLL2hTWLJ3shbwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPYvzisYym12QWXg0LCFxxIfiK7vMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvZTVhMmI5MDEtOTNhYS0z
NDNiLWJmMzItOGEyM2EzMzNmMDY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKXdMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIWdy43ek/lOvS/rCWkSo6o2zQrwaR+EgLiiXcgyxnPXsColQl/N0Miv
ik9+CEh0P7Bw71LdZRobOtCLoeYOK+BlUiiYtmPKF8ZNttWWTrXoA6hM8ysZw00P
fUI4gnpIKhZgw/chdDe0jOmzoQDKwhARoqOPjpiD4b8QmiN/u3pzTJJEwoVqSnVG
e9z7Dfwbexc+rCvUvoK29UQ0tFOFa8m9pr3mdA+lE3GDY7rP3fF8oUnDg6HIzaIZ
n40NPIjBNp3hzSxLHBcIOMjjAx6bmHwGeW/0/DduhTuZU+2TvVeLZhagfSkQFYt+
qnMMt5JjCsP3s5CWQabUKDe6u2ILayI=
-----END CERTIFICATE-----
Generated at Thu May 2 20:21:20 2024 by rpki-client on console-ams.rpki-client.org