Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/fb8faaa6-59fa-3d4e-8287-e2b637036ac1.roa
File:                     fb8faaa6-59fa-3d4e-8287-e2b637036ac1.roa (raw, json)
Hash identifier:          ZQdoLzurdEfboLW+6KwhDXxmHHzgFMpQgkST8ZGeUuM=
Subject key identifier:   0C:D8:39:4C:5C:39:4E:69:55:15:26:EE:60:4F:67:D2:67:BF:EE:0B
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F432858477BF669BB3E4F13E5A7DB5680
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/fb8faaa6-59fa-3d4e-8287-e2b637036ac1.roa
Signing time:             Wed 09 Oct 2024 13:00:42 +0000
ROA not before:           Wed 09 Oct 2024 13:00:42 +0000
ROA not after:            Tue 07 Jan 2025 14:00:42 +0000
asID:                     199707
IP address blocks:        108.165.144.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:7b:f6:69:bb:3e:4f:13:e5:a7:db:56:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Oct  9 13:00:42 2024 GMT
            Not After : Jan  7 14:00:42 2025 GMT
        Subject: CN=f6c2e508-b100-40d3-8534-a19b216cfc8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:dc:8b:71:66:11:9a:86:d4:8a:19:eb:86:4e:
                    67:07:00:53:03:ef:8b:d2:0f:a3:9d:d8:d3:e0:17:
                    9f:05:2a:1b:15:e9:d2:b3:b0:75:04:c3:2e:6f:4d:
                    dc:c3:f1:e9:23:0f:d1:b4:b3:c8:b3:8c:3a:7c:5a:
                    c7:a5:5e:3b:81:77:3f:36:1b:65:1f:b0:91:76:b2:
                    4d:47:c8:5d:c4:37:b5:8e:06:81:6b:1e:93:bf:30:
                    ef:58:f0:ca:38:f4:86:e4:08:4d:f2:f6:97:3b:b9:
                    41:e4:51:15:cb:da:da:4b:be:89:7d:06:dd:32:70:
                    ba:17:e7:0d:72:97:11:97:d7:a6:33:c9:7b:a6:cd:
                    4f:85:0c:3a:e0:04:3b:80:9e:e0:7c:d9:47:e3:c9:
                    62:43:ed:42:c5:2f:d3:79:7c:eb:47:4f:85:65:02:
                    da:eb:c4:cd:99:9d:0b:f1:61:f8:56:03:a1:2a:e1:
                    c9:92:9a:26:1e:b8:d8:06:e2:08:cf:10:56:b6:98:
                    00:f6:24:ae:44:cb:d9:b9:22:9d:8c:f4:a6:11:3f:
                    84:b8:4a:4b:8b:ad:e4:25:c9:8f:d8:89:e0:bd:e2:
                    a6:48:b3:be:7b:eb:a0:65:fd:d2:7d:e2:92:c5:92:
                    97:04:27:a8:c1:59:ef:1c:14:26:3b:e5:47:21:c8:
                    4c:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:D8:39:4C:5C:39:4E:69:55:15:26:EE:60:4F:67:D2:67:BF:EE:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/fb8faaa6-59fa-3d4e-8287-e2b637036ac1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.144.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:1e:92:31:67:73:13:90:81:98:57:e2:8e:84:5e:e4:23:9a:
         4d:79:62:92:b2:34:cd:69:5c:7f:89:56:63:ca:60:9d:e6:5f:
         c7:52:c3:23:d7:d9:f0:92:30:da:f5:ab:24:35:3b:90:b2:87:
         6b:cf:68:75:ae:f5:01:2a:70:76:9b:40:5c:f9:dd:0f:08:14:
         37:bf:53:0a:be:7e:5d:98:fa:77:cf:99:0c:eb:c7:6e:a8:02:
         b1:09:ec:54:0b:d8:80:11:e2:36:3b:29:39:0d:d1:4c:76:6f:
         ac:fa:5b:be:33:d1:98:89:7f:71:bf:d3:b9:83:13:03:d6:5b:
         69:f3:dc:30:9a:21:c7:cd:5d:4f:f3:e1:81:be:34:03:97:86:
         06:a4:52:8d:1f:d9:ad:90:b1:7f:15:1f:b6:d0:b3:fb:c1:eb:
         c3:20:35:c5:7f:d1:6a:4e:64:48:c6:24:c6:16:f2:f1:83:f5:
         40:b0:36:39:3d:7b:db:dd:70:34:cd:30:20:b7:c8:d7:95:58:
         37:e5:cc:fa:8e:24:ea:74:e4:ea:6a:49:89:7e:4a:1d:65:46:
         3a:90:15:31:a4:9d:26:5c:8b:45:40:2a:5b:84:f7:7b:c6:d5:
         cd:09:d7:ef:96:91:6e:3d:71:aa:19:be:32:37:08:f5:65:10:
         b3:1e:b9:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 05:50:31 2024 by rpki-client on console-fra.rpki-client.org