Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/0a8f97a0-792c-337e-98ee-d3667c34fb87.roa
File:                     0a8f97a0-792c-337e-98ee-d3667c34fb87.roa (raw, json)
Hash identifier:          KRMyBljUvlEy3NbxwFB+tG3PlkV2uDNc3BwSEnI4Fnk=
Subject key identifier:   7B:EB:BA:EA:00:5D:14:AA:D6:55:43:C2:F7:F5:43:0B:D2:2E:8E:68
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285845D503CEC7AF0D7B8B66C7F5F8
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/0a8f97a0-792c-337e-98ee-d3667c34fb87.roa
Signing time:             Sat 11 May 2024 01:00:27 +0000
ROA not before:           Sat 11 May 2024 01:00:27 +0000
ROA not after:            Fri 09 Aug 2024 01:00:27 +0000
asID:                     4213
IP address blocks:        50.114.208.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:d5:03:ce:c7:af:0d:7b:8b:66:c7:f5:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May 11 01:00:27 2024 GMT
            Not After : Aug  9 01:00:27 2024 GMT
        Subject: CN=7b4cae69-ddeb-471c-8b1f-404500e92447
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:fd:a1:16:8b:6a:e9:b1:fc:cc:0d:c9:4c:c7:
                    ff:ab:75:ee:9d:d8:9f:70:d5:35:2e:2d:f3:dd:aa:
                    dc:72:8a:bb:3d:08:d1:c0:d1:60:5d:02:6d:cf:62:
                    3f:c5:92:2b:5a:d8:39:50:60:f5:f1:c3:66:ca:0a:
                    00:d0:10:9a:8b:0e:28:1b:4a:7d:be:89:97:0f:41:
                    69:ba:4b:8a:da:06:d8:d7:55:32:ee:db:11:b3:f3:
                    db:b9:2b:cf:3e:9b:49:2a:b2:de:ed:c6:0a:5f:5a:
                    a9:b1:56:aa:b0:72:59:25:f9:d6:ea:f1:15:da:34:
                    83:0c:aa:89:fa:c2:6c:cd:25:5e:1b:e9:ba:dc:b9:
                    5d:03:42:d6:4c:44:f7:0f:01:e9:79:03:64:ac:76:
                    20:f7:f3:3d:2f:00:26:b1:74:0b:a8:d6:7d:ff:71:
                    52:46:fa:4b:2c:3e:d1:89:78:95:7d:87:d7:90:87:
                    c5:91:dc:22:ca:85:2b:a1:94:36:00:b9:85:df:52:
                    7f:0e:b8:50:46:df:ef:86:d9:96:21:26:b4:40:96:
                    c3:d3:18:ed:6c:1f:22:2e:6c:5c:79:5d:11:5e:ee:
                    67:57:cc:7c:ac:52:b7:b6:7e:04:bb:98:bc:b4:3d:
                    42:51:1c:ad:b6:9a:ce:09:08:95:36:e8:be:39:f2:
                    00:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:EB:BA:EA:00:5D:14:AA:D6:55:43:C2:F7:F5:43:0B:D2:2E:8E:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/0a8f97a0-792c-337e-98ee-d3667c34fb87.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.114.208.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:31:2c:1a:46:f5:b8:88:c6:aa:fd:ea:c9:68:d5:02:f8:37:
         9f:aa:10:7c:e2:04:32:4b:8e:11:35:80:40:16:cb:07:8a:2f:
         fc:7b:3f:3a:ce:56:7c:59:4a:15:e1:11:4d:72:96:8d:d8:71:
         06:da:34:6b:ae:94:53:4f:f0:74:92:ee:7b:ba:5e:8d:1d:29:
         46:23:57:3e:fd:1c:19:ce:d3:75:cc:4f:1d:09:8d:28:34:b2:
         ec:b3:ba:1e:42:aa:e8:f4:fc:f7:28:5a:fc:63:ea:22:90:4b:
         3c:28:ed:63:73:0a:f0:2b:bb:31:ea:55:31:7e:3c:08:03:d3:
         55:f1:e9:3d:ee:7e:ce:dd:db:ce:87:06:2f:95:b4:0a:cd:93:
         4f:ec:e8:43:f1:b9:29:5d:fa:18:bf:c8:4b:9c:fc:64:7d:06:
         f8:0f:85:b1:31:9f:e6:2b:7e:ec:ce:fa:d2:89:f9:4a:95:47:
         3d:77:c0:a4:51:89:10:83:7b:40:1c:c6:66:33:bd:78:97:37:
         d1:82:3c:61:25:87:54:58:08:84:74:1c:9a:63:00:7d:e2:e3:
         71:20:08:dd:f5:5a:3a:00:19:82:e6:5b:2d:ad:91:55:74:63:
         f3:0a:4e:0f:43:d2:e4:f1:28:28:df:b0:f4:32:93:5f:80:76:
         f1:76:29:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:15:00 2024 by rpki-client on console-fra.rpki-client.org