Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/1d12fecb-25f4-3540-9283-f68a4ac1f47f.roa
File:                     1d12fecb-25f4-3540-9283-f68a4ac1f47f.roa (raw, json)
Hash identifier:          MuN7gnwL1CI2RZ1zsEyQ9ONxu+xbjZMFmpdZrkTIqu8=
Subject key identifier:   E8:83:EE:E7:D6:C8:89:AF:80:C9:9B:F3:A2:83:81:CB:AB:6F:2A:97
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285845AB23528DB04330AB964A9300
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/1d12fecb-25f4-3540-9283-f68a4ac1f47f.roa
Signing time:             Fri 26 Apr 2024 01:00:25 +0000
ROA not before:           Fri 26 Apr 2024 01:00:25 +0000
ROA not after:            Thu 25 Jul 2024 01:00:25 +0000
asID:                     29802
IP address blocks:        50.114.8.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 01 May 2024 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ab:23:52:8d:b0:43:30:ab:96:4a:93:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Apr 26 01:00:25 2024 GMT
            Not After : Jul 25 01:00:25 2024 GMT
        Subject: CN=9b465dd9-271b-4a8d-b719-70b63aaa920c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:8c:5d:4f:8a:13:3b:2a:22:1d:39:d0:b5:b9:
                    e2:0e:a7:29:8e:37:93:d4:2e:81:7d:86:b5:3b:ea:
                    0d:2f:2d:c3:61:0a:9d:11:a6:5c:58:07:db:48:ca:
                    5d:19:5d:ee:4c:ad:58:cf:38:b0:0f:ab:67:85:21:
                    20:12:ab:1a:61:e9:22:be:0b:e8:77:f6:80:f0:61:
                    93:e6:57:86:70:f3:30:7d:5a:5e:a6:75:ed:f3:b2:
                    18:39:dd:37:37:6a:d3:1b:1b:17:f6:b8:6b:ed:a2:
                    5a:49:0e:8b:3b:83:40:9f:62:98:e7:82:52:5a:60:
                    7e:51:50:9f:74:0d:f3:1e:fb:19:0b:a3:2a:06:ba:
                    ea:64:2d:5a:f0:4d:20:cc:f2:0f:fa:b9:d8:6c:63:
                    65:db:26:b9:a2:2a:6f:cb:fe:80:99:11:c8:05:8d:
                    e0:86:ab:35:7f:73:6f:42:7b:f9:1c:a1:8c:54:80:
                    85:4e:a8:fa:a5:92:fd:e7:ac:0a:d7:2f:ca:ad:9a:
                    59:b9:6a:cb:ca:62:10:30:b8:fb:87:3c:69:74:80:
                    d9:60:e5:4b:92:bd:2a:fb:e3:31:9c:23:e1:ab:f9:
                    9f:59:d0:70:f4:44:49:28:09:ef:68:28:f6:6d:81:
                    b7:84:94:67:9f:8c:0a:5b:f1:67:99:97:e8:2c:ca:
                    5d:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:83:EE:E7:D6:C8:89:AF:80:C9:9B:F3:A2:83:81:CB:AB:6F:2A:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/1d12fecb-25f4-3540-9283-f68a4ac1f47f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.114.8.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:d4:97:48:38:0e:0c:df:e0:bd:63:10:d2:ee:82:b4:e8:bc:
         58:40:00:d3:3d:6c:4b:72:f7:4c:e8:35:9e:fd:62:12:73:6b:
         ff:5d:c0:d7:3b:92:17:d6:f0:e1:13:ac:3b:c7:48:14:75:d5:
         9b:96:f9:7b:ac:3b:07:36:b6:bf:b8:02:e9:be:22:fb:13:c8:
         dc:eb:41:1c:02:ea:d1:a6:5a:d8:cc:61:f8:8c:4a:ee:af:8e:
         08:7d:c1:29:9f:c9:7d:2f:21:00:a9:20:62:cf:62:9f:1c:c9:
         d4:f1:34:36:9f:b9:09:e7:cc:01:b3:e7:93:23:9c:f2:9e:d6:
         7a:26:c6:3e:1d:3a:d9:06:58:16:bd:aa:d9:6d:ee:1f:8a:6e:
         e6:7d:f3:e1:42:82:6e:b5:54:41:0e:83:ff:68:b6:46:a9:8b:
         ce:d9:1d:d1:3b:c9:64:f1:b9:d6:65:27:df:d6:d5:9c:40:17:
         28:14:95:66:ab:3c:63:85:f2:ab:5d:bd:03:30:1d:69:78:22:
         39:51:64:a2:e6:db:1f:90:97:56:ed:3c:7d:3d:cb:c6:c8:2b:
         05:1a:1b:aa:4b:db:44:11:90:35:e7:b9:b7:32:65:10:f1:4f:
         7b:dd:a3:e7:ff:c4:a7:a3:cd:4e:62:57:48:2d:65:94:61:53:
         84:c3:c0:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 05:00:19 2024 by rpki-client on console-fra.rpki-client.org