Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f051be0d-e0d5-394a-a694-3da25badc90c.roa
File:                     f051be0d-e0d5-394a-a694-3da25badc90c.roa (raw, json)
Hash identifier:          vVqb+lBjG+XNKdGWYjsUIcoguLJ7W33zf7JXUn7WwzA=
Subject key identifier:   03:10:85:1E:EE:71:B1:8B:0E:8C:B5:8F:AF:03:26:B7:83:F0:09:1F
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584596335EDC8B43D5FD01BDA740
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f051be0d-e0d5-394a-a694-3da25badc90c.roa
Signing time:             Thu 18 Apr 2024 13:00:33 +0000
ROA not before:           Thu 18 Apr 2024 13:00:33 +0000
ROA not after:            Wed 17 Jul 2024 13:00:33 +0000
asID:                     16509
IP address blocks:        108.165.154.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:96:33:5e:dc:8b:43:d5:fd:01:bd:a7:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Apr 18 13:00:33 2024 GMT
            Not After : Jul 17 13:00:33 2024 GMT
        Subject: CN=0bfd8f0d-9522-4a05-98d2-98ac8a83bd22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:2a:fa:af:99:41:11:a8:d1:59:63:93:e7:9b:
                    66:2d:c0:70:72:45:14:d3:35:cf:8e:65:c7:e4:57:
                    fd:55:fd:df:2e:74:f6:e1:45:24:06:6f:26:be:d9:
                    da:46:da:86:62:5d:9d:3a:f6:c7:0a:92:86:c6:8d:
                    c2:55:75:08:be:24:98:80:b6:dc:ce:a4:5d:3e:7e:
                    c1:2c:e9:ff:d7:78:d4:9f:53:55:7f:c9:41:c2:2c:
                    ad:6d:1f:ba:be:43:de:63:6c:b2:ed:97:6d:a2:90:
                    fb:b2:88:45:cf:00:43:b0:09:1a:e3:17:0e:c4:c7:
                    f3:05:b9:a2:1b:14:62:8c:1c:94:65:ca:f9:40:47:
                    09:8a:98:f8:02:ff:1f:68:45:be:52:9a:5d:bc:6c:
                    55:8d:bc:70:2e:5f:78:f9:f4:64:1b:c0:9f:90:98:
                    a3:f5:f9:0a:3c:e0:b0:b3:17:26:c9:d2:8e:f4:d4:
                    14:f1:8a:a0:51:36:03:d4:80:79:0e:51:8c:b1:eb:
                    63:7a:f8:f3:7c:b5:a8:47:28:a2:d3:5c:fd:b3:45:
                    4b:de:0d:a5:66:1d:36:1b:b9:f1:dd:e2:e4:a8:2a:
                    c9:05:81:82:e0:13:7c:a9:b6:bf:0f:76:eb:81:56:
                    cf:b3:12:43:9d:bf:96:c6:9e:55:d8:53:6f:83:2d:
                    18:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:10:85:1E:EE:71:B1:8B:0E:8C:B5:8F:AF:03:26:B7:83:F0:09:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f051be0d-e0d5-394a-a694-3da25badc90c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.154.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:0f:b5:76:86:27:16:13:b4:a3:a3:94:ca:1e:30:52:3e:6b:
         74:86:b7:5a:92:a1:0c:49:bf:5d:c3:5e:16:9f:52:17:49:d9:
         ee:cd:d7:2d:75:90:8d:0c:f0:f3:fe:40:14:8c:e4:94:17:dc:
         dd:18:e0:db:70:e7:48:09:12:75:5f:94:45:f0:fc:ce:6a:f1:
         43:24:7b:4e:48:3e:f7:75:32:70:a5:44:ed:aa:1d:de:2e:77:
         0f:bc:bf:87:22:78:1f:96:1d:b2:7d:4a:8f:e8:ca:5d:98:42:
         d6:09:34:13:10:b6:1f:da:29:8a:b1:ce:69:f7:b8:dd:90:9c:
         6f:01:ea:21:b6:47:3b:de:b2:98:7a:b5:3e:74:8c:d9:43:c8:
         1d:ce:a9:3f:64:e5:aa:d5:32:37:20:23:8c:4a:4a:b8:51:ac:
         bb:a1:d6:b4:e3:f1:4d:e3:c5:e2:a3:98:36:64:8b:6c:85:06:
         fe:c0:cb:70:d6:37:80:8a:7f:b7:66:2e:67:80:90:a0:14:e3:
         7a:c1:cc:cf:d4:94:95:a7:a7:ad:60:5c:ec:59:aa:7a:ef:24:
         3d:93:38:3f:e3:52:9a:8e:82:80:0d:26:9d:77:fa:ab:ae:4d:
         eb:6f:dd:f6:c1:b5:af:52:8b:d9:8f:76:f9:85:bd:3b:1f:ed:
         3b:4c:32:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 17:32:57 2024 by rpki-client on console-ams.rpki-client.org