Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e64984ec-1d5b-3072-830e-0848fb814ebb.roa
File:                     e64984ec-1d5b-3072-830e-0848fb814ebb.roa (raw, json)
Hash identifier:          7AenIgQ+20I/KMiGwzG/aIbeX6x50BohxE5bThQdZCs=
Subject key identifier:   BD:89:51:1F:6E:40:0A:EC:2B:C5:25:45:61:73:12:B0:9A:60:67:40
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584877E2BCD8D260E1F6E38D9480
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e64984ec-1d5b-3072-830e-0848fb814ebb.roa
Signing time:             Tue 07 Jan 2025 18:44:56 +0000
ROA not before:           Tue 07 Jan 2025 18:44:56 +0000
ROA not after:            Mon 07 Apr 2025 17:44:56 +0000
asID:                     14618
IP address blocks:        108.165.93.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 07 Feb 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:77:e2:bc:d8:d2:60:e1:f6:e3:8d:94:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jan  7 18:44:56 2025 GMT
            Not After : Apr  7 17:44:56 2025 GMT
        Subject: CN=1fd1b621-f900-4a99-a129-e3c4e77d8a31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:d7:05:04:67:ab:7f:6d:04:21:f0:a8:02:ed:
                    3d:fd:9f:d8:1c:6f:3b:61:4a:f8:fe:7d:39:d4:af:
                    6e:69:fb:cc:41:32:e0:7b:90:be:ef:78:29:48:99:
                    e6:5c:ce:0d:a0:29:9b:42:1c:74:01:49:a5:e9:d3:
                    59:9d:08:bf:5c:b1:ec:70:19:74:5e:84:74:01:62:
                    81:29:23:0e:45:8f:2a:26:f6:e7:ab:4e:b7:5a:1a:
                    06:65:18:bc:eb:68:86:7d:05:a1:fb:7c:2f:7a:dd:
                    83:c1:bc:45:85:62:a8:b8:17:cc:ea:aa:86:7b:16:
                    28:ba:db:a8:0f:66:b2:7d:a8:44:1a:17:ca:35:ba:
                    4c:cf:66:17:48:b8:83:01:fc:b1:7a:9e:94:56:1d:
                    2a:00:ee:71:34:0e:07:94:6d:c4:68:da:0b:c4:b0:
                    97:91:a2:91:05:09:63:0d:f6:51:79:0b:38:7e:3d:
                    dd:b5:13:af:e6:47:70:88:66:80:8a:e7:6f:b3:90:
                    02:3c:18:de:5e:c9:44:ea:74:b4:aa:f0:e9:70:09:
                    fc:74:5c:84:f2:43:03:a2:f2:ed:29:36:69:fd:ad:
                    43:30:94:c2:6f:cb:a9:26:d6:39:86:c8:ab:d3:07:
                    da:c4:9c:b5:7b:3e:71:f7:7b:43:40:73:8b:ad:c9:
                    39:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:89:51:1F:6E:40:0A:EC:2B:C5:25:45:61:73:12:B0:9A:60:67:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e64984ec-1d5b-3072-830e-0848fb814ebb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.93.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:89:b8:71:de:7e:64:04:a5:d5:9a:65:24:ed:81:a1:8c:dc:
         44:b7:78:1b:fb:45:18:5e:12:78:fb:66:68:aa:52:22:17:13:
         16:59:b6:e1:8a:92:66:8b:cd:00:25:30:05:68:aa:e6:6a:d0:
         c1:cf:52:52:4b:55:d0:d3:71:62:21:f6:4c:2b:8e:f0:3c:20:
         cc:7f:32:c4:06:f2:40:5e:27:ea:df:a7:d2:1c:e6:ed:2b:1c:
         9b:e5:46:e0:a4:22:ad:16:73:80:57:cb:51:6a:63:33:2f:aa:
         21:94:7e:83:32:cc:b0:80:26:f7:67:83:74:ed:3a:32:a1:ab:
         0c:c7:4b:8c:6f:44:45:77:4f:46:0f:d1:0f:70:b8:06:95:83:
         22:18:8b:82:12:a1:4f:4c:40:3e:07:f3:53:dd:30:a0:68:7a:
         f8:b4:9b:e3:9a:ca:a6:3a:8a:35:e1:3f:bf:8b:d7:bf:59:ca:
         86:40:da:45:a6:2f:93:93:bf:d0:1b:aa:d4:85:94:9c:d1:6d:
         b1:16:bd:44:65:b4:21:f0:73:95:10:3b:70:86:22:9b:9d:39:
         cb:d3:0a:14:77:9d:3e:88:19:9d:ec:de:5a:dc:e7:83:7b:11:
         17:50:9f:a3:04:dc:7d:ad:55:f4:c8:1a:4c:21:e8:30:8d:3d:
         b5:c1:d3:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:47:41 2025 by rpki-client