Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e6199e08-f841-3ba6-8070-0d9f86ff49e5.roa
File:                     e6199e08-f841-3ba6-8070-0d9f86ff49e5.roa (raw, json)
Hash identifier:          6jWn4Nw6jY449sgsk9iU9V7K/Zu51vW/Og5mS6Jw9ys=
Subject key identifier:   35:46:EF:72:36:9B:47:69:35:30:3C:B9:B4:7A:60:BE:B6:58:DF:8A
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285847F2BA2D39CF1D24673C2B37A0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e6199e08-f841-3ba6-8070-0d9f86ff49e5.roa
Signing time:             Thu 21 Nov 2024 02:00:38 +0000
ROA not before:           Thu 21 Nov 2024 02:00:38 +0000
ROA not after:            Wed 19 Feb 2025 02:00:38 +0000
asID:                     200017
IP address blocks:        108.165.34.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:f2:ba:2d:39:cf:1d:24:67:3c:2b:37:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Nov 21 02:00:38 2024 GMT
            Not After : Feb 19 02:00:38 2025 GMT
        Subject: CN=dbd263c2-c245-4ae6-88e3-1d9b4b3a4989
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:f3:a9:c2:2f:a8:8d:ce:0d:77:dc:c9:60:36:
                    38:ff:95:ca:79:34:5c:65:c8:05:af:af:fa:c9:c8:
                    2b:02:6e:6c:7f:fb:d0:19:15:78:34:33:95:b3:0d:
                    b8:12:4b:2e:59:a5:c1:e0:72:7c:17:67:51:5f:df:
                    af:95:2a:c9:69:36:a7:5a:67:37:a2:61:1c:ed:b2:
                    7d:7a:1d:0f:4e:bb:bb:3c:ca:44:55:45:73:32:5e:
                    08:c4:fd:0d:d1:ac:a9:b5:33:05:5e:d6:1f:42:82:
                    6d:f7:d0:2c:66:39:b5:db:1f:6b:c7:74:4b:c0:69:
                    b7:0b:dd:f4:d0:b1:96:82:1a:75:c3:40:df:88:95:
                    f2:1d:f4:7c:7c:c6:54:e1:b4:98:fd:0f:da:7c:2b:
                    21:2e:cb:77:ea:1f:77:e3:bb:f8:df:c3:04:18:54:
                    2b:f7:fe:ad:a7:60:1f:10:f0:75:a8:85:e3:63:af:
                    ac:ad:c5:3b:fb:aa:f4:9c:76:7d:32:80:7c:86:23:
                    42:ca:90:40:04:bd:5b:76:63:44:31:a3:a9:62:74:
                    5b:cd:b9:2a:13:fd:2c:e5:92:a8:7f:b0:d2:15:e7:
                    7a:0b:26:5f:58:c6:29:11:1a:f9:2a:7f:ce:a3:0f:
                    d5:d2:e3:de:16:3d:a9:99:97:53:da:38:f5:f2:ff:
                    75:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:46:EF:72:36:9B:47:69:35:30:3C:B9:B4:7A:60:BE:B6:58:DF:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e6199e08-f841-3ba6-8070-0d9f86ff49e5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.34.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:57:ac:2c:92:e3:68:fc:af:b6:c2:19:95:33:8e:22:88:ad:
         1d:4e:ad:23:7f:f7:a7:26:72:1c:6a:55:55:d4:3e:84:a8:8f:
         f9:39:67:73:b6:1c:e5:a5:17:34:6c:df:5e:7c:b9:54:45:7b:
         42:6c:c3:f7:7f:f0:49:2d:7d:71:85:71:f4:18:60:d7:c9:94:
         7a:9e:fc:4e:a3:03:6d:51:fd:2e:04:af:92:2b:fc:98:a1:b2:
         57:4d:96:3d:2a:c7:ac:58:19:02:15:cc:c6:47:0e:61:54:8d:
         88:71:87:bf:35:8f:5f:7b:f7:1e:5f:8e:83:f7:8b:23:6b:89:
         a1:6b:32:8a:7e:1e:d9:e6:a5:1f:07:db:cc:cf:11:3a:ca:2e:
         8d:5a:50:4d:2e:ab:21:bf:ab:d0:9d:6a:36:c2:71:62:5d:25:
         a1:09:48:25:93:bc:be:d6:72:f7:30:b9:5a:4f:1c:16:1f:43:
         30:6c:c6:ed:8b:77:74:f7:bd:cc:54:70:ca:28:dd:85:94:fb:
         43:ff:5a:3c:8e:71:69:70:bc:0c:e7:df:6f:70:73:7c:8d:53:
         69:25:a3:03:a3:14:05:83:3f:16:a2:f5:8e:7d:04:28:5e:24:
         00:41:7b:ec:8e:62:c1:df:e9:c4:a0:f8:73:04:fc:c9:78:9a:
         67:93:80:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:32:26 2024 by rpki-client on console-fra.rpki-client.org