Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f830f60d-a652-35a2-a3cf-d25d12e78bfa.roa
File:                     f830f60d-a652-35a2-a3cf-d25d12e78bfa.roa (raw, json)
Hash identifier:          /mFx2ujhmZxlWd4Iz3gGp/t4bHPFyiIrapuHhyJQmc4=
Subject key identifier:   41:E2:69:15:1B:CF:A8:25:D8:F8:05:05:DE:DE:33:B1:87:8B:05:A0
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285847617190CCFF50F65BD301B580
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f830f60d-a652-35a2-a3cf-d25d12e78bfa.roa
Signing time:             Mon 30 Sep 2024 01:00:31 +0000
ROA not before:           Mon 30 Sep 2024 01:00:31 +0000
ROA not after:            Sun 29 Dec 2024 02:00:31 +0000
asID:                     7018
IP address blocks:        108.165.244.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:61:71:90:cc:ff:50:f6:5b:d3:01:b5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Sep 30 01:00:31 2024 GMT
            Not After : Dec 29 02:00:31 2024 GMT
        Subject: CN=edce777b-1dfd-4d89-b4d8-5c8ce845063a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:4a:26:57:30:b8:62:a4:ea:9e:a8:3c:31:3d:
                    2f:5d:67:97:11:fd:1b:db:e9:06:6e:88:a3:d1:fb:
                    5c:39:31:8f:48:2d:71:1b:73:45:6e:90:57:87:01:
                    26:e3:4d:9a:7d:93:58:84:da:d8:ec:a9:c0:53:f9:
                    e3:a6:34:fe:5a:7f:ed:88:87:e0:7b:3b:3d:9d:2f:
                    8c:aa:37:ac:71:bb:20:7b:a6:ee:7c:0e:48:9c:49:
                    95:ff:cc:30:cf:46:b1:b7:d7:89:b0:a8:30:0a:60:
                    63:77:f5:05:bf:61:93:09:b9:9a:2c:a2:8e:d2:7a:
                    95:a4:6c:60:70:fa:33:99:4c:11:11:2f:5e:97:8f:
                    64:1b:50:1b:21:9c:d9:66:6a:43:54:64:70:e8:28:
                    7e:e5:30:c0:84:1e:3e:79:08:d5:0e:3b:f6:44:e2:
                    fd:86:3b:b2:21:02:8e:28:50:0c:0e:a0:47:e4:b1:
                    ac:6b:af:a9:ab:79:7d:a5:aa:11:64:29:c4:12:fe:
                    c4:c4:5a:54:62:5d:39:43:e7:95:4c:cc:91:46:4c:
                    13:5a:c1:c7:4a:63:31:c9:67:05:04:07:63:a8:77:
                    4e:ed:68:56:a1:28:de:ea:7b:75:c3:74:b7:8d:f2:
                    7f:94:2d:32:74:4a:0d:6f:f7:16:b5:3a:9f:a3:85:
                    07:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:E2:69:15:1B:CF:A8:25:D8:F8:05:05:DE:DE:33:B1:87:8B:05:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f830f60d-a652-35a2-a3cf-d25d12e78bfa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.244.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b1:d3:6f:7c:60:f0:bd:7a:9e:92:75:3a:8d:b4:17:27:7d:f0:
         32:5e:ca:ae:ee:e4:d7:67:35:25:e7:4d:6b:27:b0:b0:3c:bc:
         77:08:86:96:0d:33:b5:1b:78:43:0d:b0:6f:fd:5d:35:80:9a:
         ff:d7:d5:b8:89:e1:18:52:12:1b:d1:f3:f6:b2:bc:44:7e:61:
         57:e3:81:48:34:9a:c2:d0:af:0b:cf:97:13:75:43:a3:11:da:
         62:8f:8b:0f:13:e7:b3:df:ec:28:d1:27:b6:9b:84:94:33:08:
         28:71:c1:46:22:da:ab:da:a5:76:0f:1d:55:04:fe:01:3f:e3:
         52:91:2d:18:fe:2f:70:4f:99:94:6e:49:d9:a1:8c:3a:f2:01:
         ad:ed:e5:56:1b:b5:ca:8c:a2:02:13:c6:c5:af:af:8f:20:b0:
         94:3f:b3:4c:e3:eb:8d:ea:64:ce:73:e8:c7:7b:ac:43:73:82:
         4c:a6:a0:2b:71:0e:78:6b:ed:2d:6e:3e:cd:4a:cd:09:08:4f:
         2c:01:6f:25:16:78:72:99:2a:c1:a2:dc:59:c9:b1:3e:cf:37:
         09:8e:18:70:af:81:40:8b:c1:56:d1:b8:73:3e:d1:e8:a5:13:
         59:bf:a7:7e:ff:fa:85:f9:59:18:fb:80:55:8d:08:7b:e1:07:
         b6:88:38:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:00:26 2024 by rpki-client on console-ams.rpki-client.org