Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/fb8faaa6-59fa-3d4e-8287-e2b637036ac1.roa
File:                     fb8faaa6-59fa-3d4e-8287-e2b637036ac1.roa (raw, json)
Hash identifier:          9VfZydxcZXYMPYqdeu+knUCm7bCo8/KfP3k8jAnPjzw=
Subject key identifier:   C1:60:FE:C2:83:C1:4B:C5:B2:20:AF:D8:69:31:4D:35:4A:A3:35:A1
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F432858485B6B002A628ABB8CC9A57180
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/fb8faaa6-59fa-3d4e-8287-e2b637036ac1.roa
Signing time:             Sat 28 Dec 2024 14:00:52 +0000
ROA not before:           Sat 28 Dec 2024 14:00:52 +0000
ROA not after:            Fri 28 Mar 2025 13:00:52 +0000
asID:                     199707
IP address blocks:        108.165.144.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 09 Feb 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:5b:6b:00:2a:62:8a:bb:8c:c9:a5:71:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Dec 28 14:00:52 2024 GMT
            Not After : Mar 28 13:00:52 2025 GMT
        Subject: CN=8fcdf90e-f5eb-47af-a37b-a2f46ab78290
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:3e:ce:19:45:32:6b:e3:4f:35:97:81:05:f3:
                    a3:76:c4:43:b6:06:7a:6e:00:82:68:46:ea:2f:fe:
                    f9:56:a9:11:ad:c8:65:d8:e5:87:68:00:87:59:dd:
                    1e:4b:f3:ad:98:1f:38:fa:4f:68:eb:b2:45:20:a3:
                    80:31:e1:0f:df:c1:b2:de:4a:42:20:8e:cb:e8:00:
                    92:e5:6e:82:40:b8:2f:11:fd:76:f9:88:77:c2:5c:
                    ac:61:0f:53:58:5a:36:30:d4:83:7d:2c:40:52:b9:
                    ef:49:0c:eb:fd:8e:b2:ae:7b:3c:b1:22:6e:22:80:
                    94:3f:97:aa:a1:15:ef:87:ef:4c:bb:f6:82:4f:60:
                    b4:a3:d8:b9:36:37:94:b6:90:ac:7a:e8:3b:ac:87:
                    ea:4d:31:9b:cf:b1:4c:0e:bc:c6:53:ca:3b:43:71:
                    a3:79:39:70:f8:9b:5f:cd:44:cc:91:61:cf:84:6e:
                    19:55:2b:41:ea:c8:2a:5c:19:34:42:10:05:63:90:
                    26:c0:8a:31:ef:e8:2f:26:90:31:87:f0:ca:32:e3:
                    74:d7:43:d4:69:bb:1b:0f:2a:28:67:ed:56:dc:d0:
                    1c:6e:98:8d:02:bf:eb:c5:43:67:46:10:67:b7:b7:
                    d4:2f:94:8d:a5:85:19:b9:6a:3d:63:11:17:27:b2:
                    fe:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:60:FE:C2:83:C1:4B:C5:B2:20:AF:D8:69:31:4D:35:4A:A3:35:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/fb8faaa6-59fa-3d4e-8287-e2b637036ac1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.144.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:f8:e1:df:93:49:ef:90:81:a9:8e:8f:70:81:aa:1c:3d:a9:
         74:a4:04:4a:6b:7e:1e:7f:ff:03:37:e2:ae:c6:28:b7:08:83:
         cc:2f:2e:ec:7d:dc:04:f9:73:e9:ee:e8:0b:52:fb:4e:51:f2:
         24:14:8e:94:f5:cc:73:fa:c2:b7:e7:fb:e9:c9:fa:e4:1a:0d:
         8f:9b:7f:12:c9:51:35:9e:4e:88:6a:b6:54:7d:19:3e:37:b6:
         35:ad:34:5b:5c:07:39:d1:95:b4:fa:7e:da:06:f5:6b:9f:23:
         92:d4:3d:cf:8b:51:85:56:aa:19:f6:d7:65:e2:92:80:1f:53:
         da:79:b2:81:eb:44:24:24:c2:9d:e7:07:dc:0d:c2:61:11:88:
         55:2f:3c:2a:fc:e1:be:48:69:73:71:54:0f:90:48:11:9c:8f:
         3d:99:71:30:00:84:14:d3:74:0d:20:e8:77:79:1d:5e:77:e3:
         4f:67:cb:91:ba:46:e6:b1:54:18:c1:27:bc:ad:37:b5:72:6d:
         f1:25:c8:fc:f0:04:f1:59:c3:cb:95:ec:dc:4c:14:56:3e:81:
         c6:28:7b:24:41:6e:b2:33:d4:70:a5:5c:a4:1f:68:ba:5f:71:
         d1:ff:7f:ea:e0:a2:4b:a5:84:25:59:dd:11:2d:42:fa:8d:0f:
         04:27:13:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 7 16:55:34 2025 by rpki-client