Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e9b4f483-b37a-329b-ba97-2e0518ddb3a3.roa
File:                     e9b4f483-b37a-329b-ba97-2e0518ddb3a3.roa (raw, json)
Hash identifier:          v4MTd32fS+2gMBRpi1c/rlTMs4T+ndv781acn4FLOd8=
Subject key identifier:   35:69:A1:7A:A2:E9:BA:E1:55:3C:D4:A7:98:4F:92:2C:56:D0:55:89
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F432858477BF669AA745E867B197A2D80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e9b4f483-b37a-329b-ba97-2e0518ddb3a3.roa
Signing time:             Wed 09 Oct 2024 13:00:42 +0000
ROA not before:           Wed 09 Oct 2024 13:00:42 +0000
ROA not after:            Tue 07 Jan 2025 14:00:42 +0000
asID:                     212335
IP address blocks:        108.165.209.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:7b:f6:69:aa:74:5e:86:7b:19:7a:2d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Oct  9 13:00:42 2024 GMT
            Not After : Jan  7 14:00:42 2025 GMT
        Subject: CN=66c05ff8-4de9-4090-bc13-25c1284937ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:9d:4f:d8:28:fd:07:82:9f:e3:05:89:db:d2:
                    ea:0d:fe:bc:f8:22:da:e0:22:ac:e6:86:fe:83:3c:
                    60:ff:3a:c0:12:84:5f:f4:cd:80:c0:e7:2c:d0:99:
                    fe:81:0b:77:34:23:19:2c:f4:e2:3f:36:d1:0c:33:
                    67:0c:b2:93:06:eb:1f:f9:7c:ae:ab:37:d7:93:6e:
                    3c:f7:d5:18:1f:d1:52:bf:90:ae:21:25:64:65:b9:
                    f1:d6:f3:ed:50:9d:6b:a6:d3:a9:f2:5e:90:f8:da:
                    0e:17:a3:b4:fa:0b:71:c3:59:fd:3d:c1:72:91:2a:
                    82:9d:9f:3c:0c:40:aa:e4:a3:ee:dd:ff:c1:76:a2:
                    59:c4:20:9a:eb:03:d3:ff:5b:6f:85:4f:0f:21:21:
                    5c:37:26:e7:98:93:fa:13:44:73:a8:e9:b1:d7:21:
                    71:11:07:76:75:02:6a:16:37:a0:06:dc:8a:6e:dd:
                    06:f5:d2:89:fa:e8:01:d0:1a:e6:79:65:cf:0e:f9:
                    6a:44:bf:32:25:03:82:2f:14:52:47:1e:ce:69:6b:
                    ef:9b:fb:2f:63:6a:49:18:4d:bb:de:9d:32:80:bb:
                    0d:a2:06:3f:73:f3:4f:a8:c3:a2:8b:6b:33:be:91:
                    49:e5:3d:cb:9b:20:63:b2:ec:93:1c:9f:07:bb:fa:
                    e7:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:69:A1:7A:A2:E9:BA:E1:55:3C:D4:A7:98:4F:92:2C:56:D0:55:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e9b4f483-b37a-329b-ba97-2e0518ddb3a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.209.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:39:0e:f3:7e:d9:ff:8a:23:26:82:a0:6f:8a:10:02:6d:34:
         2e:e1:d9:43:79:f2:f2:be:6a:9b:90:25:e6:d7:d5:d5:16:dd:
         7c:6b:32:c2:dd:30:36:7c:13:02:58:d0:21:a9:d8:eb:b8:49:
         bc:64:fd:71:cf:d9:11:a6:9f:b8:e3:73:2e:9a:31:6f:01:b2:
         31:b1:d6:e4:6a:d8:49:bb:1a:89:2c:b7:df:ac:21:3f:da:0f:
         4d:96:01:f0:88:df:1d:c6:cb:95:01:be:4c:58:9a:9a:29:15:
         2e:38:0f:a2:a5:15:9b:5c:84:57:65:6d:bd:41:33:63:09:fd:
         41:5d:7c:e9:1d:b9:5e:8d:c5:d2:72:b2:36:fb:ec:cf:a6:f2:
         12:af:91:73:52:9a:2c:6e:6b:ad:0d:9c:4a:7a:09:ab:e6:ae:
         8d:a7:f9:b6:98:90:f5:f0:bc:74:28:8a:0c:81:1a:e1:8e:e6:
         b8:97:18:3f:96:fc:a5:ef:bd:d3:12:0f:f5:1d:22:1a:f6:27:
         21:24:68:0a:36:80:8b:f7:dc:c2:0f:6e:b9:dd:ee:6a:4f:a9:
         cf:0d:26:92:78:64:c9:af:66:0d:ca:9f:88:b0:d3:b6:fd:93:
         71:85:4d:a1:eb:4d:1e:43:be:e2:23:2c:f6:be:fa:86:e7:40:
         2e:cc:79:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 05:50:29 2024 by rpki-client on console-fra.rpki-client.org