Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f9ebf773-fc6a-3ed3-8ee3-11b33eca2638.roa
File:                     f9ebf773-fc6a-3ed3-8ee3-11b33eca2638.roa (raw, json)
Hash identifier:          DuWdpjPQ56G2h6kZx6tyaBAp1Z5wsB19lSRpPjHmZ7g=
Subject key identifier:   E2:47:C4:74:21:BB:50:75:23:6D:9F:BD:93:62:02:61:76:01:7F:8E
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285847CA3F86AC207E58A170309A00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f9ebf773-fc6a-3ed3-8ee3-11b33eca2638.roa
Signing time:             Wed 06 Nov 2024 14:00:41 +0000
ROA not before:           Wed 06 Nov 2024 14:00:41 +0000
ROA not after:            Tue 04 Feb 2025 14:00:41 +0000
asID:                     21859
IP address blocks:        108.165.139.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ca:3f:86:ac:20:7e:58:a1:70:30:9a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Nov  6 14:00:41 2024 GMT
            Not After : Feb  4 14:00:41 2025 GMT
        Subject: CN=bcce4fa2-46c0-457a-9ebf-35c8fdd7db32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:29:52:59:08:7e:4a:92:20:57:06:56:b7:30:
                    4c:86:bd:b8:68:87:89:ba:d5:78:6d:29:81:0f:2e:
                    56:2d:2c:2a:4b:3d:ee:de:df:e0:18:63:4c:c0:a0:
                    81:4c:70:e1:0f:45:1d:6c:93:35:35:70:93:9c:79:
                    4c:a3:4e:44:d7:61:09:ab:7d:7e:41:eb:24:ec:fb:
                    c6:01:88:54:16:28:7c:e2:00:14:92:69:e6:f1:8f:
                    8a:8f:25:b4:2a:85:58:dc:c3:b5:70:80:0e:49:6e:
                    90:eb:21:78:a9:8e:24:c9:f1:e0:a1:2d:67:4b:04:
                    34:f1:fb:7c:12:03:0e:6d:c5:5b:c6:74:09:c1:10:
                    9b:86:02:24:a3:8a:5f:fd:22:0e:98:b1:63:b7:cc:
                    68:12:15:bb:82:61:56:42:36:45:6c:a7:55:40:40:
                    4d:37:cf:d6:29:2b:9a:a6:8a:8d:f5:7f:b5:6c:a8:
                    29:92:56:da:7a:1b:a6:34:0a:1e:46:c7:5f:bb:d1:
                    56:8a:0e:52:80:3e:96:e6:62:cb:e5:54:d6:57:47:
                    59:60:b9:c8:37:45:1a:0a:aa:ce:51:92:a3:b7:f6:
                    16:a9:bf:20:10:8c:24:40:25:36:bb:22:fc:b7:0f:
                    3d:cd:63:01:70:c8:73:15:51:e6:2e:7e:f8:d7:2b:
                    0f:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:47:C4:74:21:BB:50:75:23:6D:9F:BD:93:62:02:61:76:01:7F:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f9ebf773-fc6a-3ed3-8ee3-11b33eca2638.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.139.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:73:45:83:5e:ac:c7:da:d7:35:4f:50:06:48:05:f4:07:90:
         84:81:62:12:0f:62:50:13:dd:2c:3f:35:89:b7:d4:04:a2:07:
         8d:16:60:b0:f2:16:b2:9d:1b:78:68:43:0b:f1:2c:98:32:1f:
         18:34:bd:49:c2:b1:9f:95:e2:8d:e5:c0:50:c7:0a:2f:bd:4e:
         f2:37:21:64:d8:a3:2a:27:53:b0:8a:9b:1e:d0:1b:10:43:be:
         cb:b6:4a:34:ac:8c:62:e5:21:f6:e8:28:69:64:7e:51:76:aa:
         ee:d3:5f:f9:ed:7b:39:f8:f3:70:ca:87:19:ff:2d:be:fd:c2:
         99:fc:ca:88:05:71:c2:61:b5:a6:55:f7:49:b1:ea:9d:7b:4f:
         c8:d0:17:43:88:71:9e:16:f2:cf:3c:05:a9:0c:37:a5:01:22:
         a2:1d:53:0d:dd:cd:73:f9:65:02:fe:07:b6:05:74:e0:bf:23:
         ef:db:16:43:1a:8c:2b:f8:ab:4c:91:5c:5e:69:f6:95:e0:2e:
         12:6b:92:c5:0c:dc:f0:84:91:dd:b0:5f:a5:c2:29:37:82:ac:
         a7:8e:5c:2d:03:fd:cb:c7:0b:17:ae:4a:31:e8:0e:36:15:20:
         29:3f:d2:d2:4a:aa:b2:b4:15:ea:f7:2b:ea:51:9b:83:4a:12:
         fd:5d:cb:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:00:26 2024 by rpki-client on console-ams.rpki-client.org