Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e6199e08-f841-3ba6-8070-0d9f86ff49e5.roa
File:                     e6199e08-f841-3ba6-8070-0d9f86ff49e5.roa (raw, json)
Hash identifier:          TxE4hlKkq0dRPmeZrUUT2Cs/CU9HX08hDeIQkAKUYlo=
Subject key identifier:   1A:96:8E:FD:71:7C:3A:61:54:AD:25:F9:C8:20:C3:15:BC:EF:FD:C3
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584554982001659AA7C16FF45100
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e6199e08-f841-3ba6-8070-0d9f86ff49e5.roa
Signing time:             Tue 26 Mar 2024 01:00:25 +0000
ROA not before:           Tue 26 Mar 2024 01:00:25 +0000
ROA not after:            Mon 24 Jun 2024 01:00:25 +0000
asID:                     200017
IP address blocks:        108.165.34.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:54:98:20:01:65:9a:a7:c1:6f:f4:51:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Mar 26 01:00:25 2024 GMT
            Not After : Jun 24 01:00:25 2024 GMT
        Subject: CN=3310e576-b55d-4198-a1e4-1d54a2562580
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:0b:f3:43:5e:38:d9:46:fc:dc:34:f4:04:c2:
                    a1:a7:2e:38:48:36:94:35:66:c7:69:8b:6a:36:b0:
                    45:78:06:c7:68:64:e9:1c:09:c0:bb:a5:0d:eb:a1:
                    16:ab:0c:f6:e3:9f:da:84:a4:b6:3e:32:2b:3b:f9:
                    71:b0:b6:d2:0f:b0:80:3a:c8:58:f1:5b:c9:96:af:
                    ab:16:2b:a8:0e:ed:ff:3c:20:d6:35:ab:b3:5c:a4:
                    2f:76:14:d3:43:fc:7a:85:2a:a3:d2:be:6c:ea:45:
                    b1:bd:98:ac:c9:dd:1e:7d:8b:7d:62:4f:c5:03:4c:
                    e9:d9:ee:be:7e:de:d2:9c:df:bb:e4:1c:7e:2a:50:
                    76:06:3f:43:d7:13:27:03:13:2b:81:1f:2b:ec:ae:
                    a5:a8:b6:91:15:8f:40:6c:f3:88:da:c7:2c:d9:e3:
                    53:75:ec:dc:9e:1d:0f:42:d7:d7:a8:4d:06:05:4e:
                    c5:87:cb:0d:0b:42:4a:d5:48:e1:7a:c8:1a:52:18:
                    7a:c0:fe:06:ab:94:39:32:55:aa:a8:41:6e:36:3d:
                    66:c4:13:53:c2:ae:02:59:3a:4d:66:b3:a8:b3:6c:
                    d4:8d:ac:17:b9:b8:ae:d5:a1:be:61:88:dd:3c:16:
                    c8:3b:77:1a:0d:93:fc:86:c3:18:ef:0b:66:59:67:
                    51:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:96:8E:FD:71:7C:3A:61:54:AD:25:F9:C8:20:C3:15:BC:EF:FD:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e6199e08-f841-3ba6-8070-0d9f86ff49e5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.34.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:a6:52:6c:6b:99:c7:c7:55:b4:11:8e:78:91:fd:77:e6:c0:
         db:7b:24:df:b9:4a:64:6c:dc:64:9b:48:a0:1b:f5:6a:ee:eb:
         cb:40:0b:e6:10:2d:03:c0:3c:a2:cd:d3:88:3f:f7:ce:a2:76:
         5d:90:30:43:a1:9c:50:e2:3c:35:20:73:8d:81:d4:e2:81:c7:
         86:cd:db:00:93:86:1f:3a:2c:79:86:9b:c7:30:47:99:2e:0d:
         28:f8:f7:9e:85:52:68:4b:c5:19:cf:21:df:e8:9f:33:28:3f:
         a9:ce:b8:64:a8:e5:10:75:1b:62:7a:ac:84:2e:fe:e9:23:4b:
         d4:c6:c5:73:0a:46:17:d1:88:cc:d1:a2:b7:48:0d:4e:fd:4d:
         4f:84:9a:be:c6:79:f7:b0:52:4d:3e:92:60:9a:8e:66:bf:36:
         5b:f4:99:32:5a:8b:c6:f3:74:e4:ea:c0:94:82:03:9f:bb:00:
         d3:a0:5e:cd:a7:20:5f:13:9a:e1:4e:ea:20:16:14:98:21:3f:
         31:94:2f:fd:a3:c0:87:61:db:de:e8:59:07:14:94:e9:49:2a:
         5a:2e:5c:6a:dd:cb:b3:ef:bc:ae:f0:79:c1:02:61:4d:1e:c0:
         d2:5f:50:c9:da:c7:38:37:72:35:ef:71:93:b8:6d:7b:51:f7:
         dc:ba:2f:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 02:55:58 2024 by rpki-client on console-fra.rpki-client.org