Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/369f44d9-c369-3f20-9ec3-15ee17bec66e.roa
File:                     369f44d9-c369-3f20-9ec3-15ee17bec66e.roa (raw, json)
Hash identifier:          UIzbfolEMwmEv1P3wnPGkvgnpYCZRTzk32rnz9T3PWA=
Subject key identifier:   4B:F4:93:32:50:D6:3A:85:0E:EF:62:30:1B:A8:EA:52:48:0E:7D:A9
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285845AB2352DAA3C4BC1D9D7470E4
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/369f44d9-c369-3f20-9ec3-15ee17bec66e.roa
Signing time:             Fri 26 Apr 2024 01:00:25 +0000
ROA not before:           Fri 26 Apr 2024 01:00:25 +0000
ROA not after:            Thu 25 Jul 2024 01:00:25 +0000
asID:                     29802
IP address blocks:        50.114.28.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 01 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ab:23:52:da:a3:c4:bc:1d:9d:74:70:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Apr 26 01:00:25 2024 GMT
            Not After : Jul 25 01:00:25 2024 GMT
        Subject: CN=21cfb5ba-f9b4-4c99-aca6-9302b672f584
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:6a:4e:b3:80:de:e3:bc:cd:a5:5e:4c:08:25:
                    7c:44:1d:dc:ac:f3:c0:c9:ca:50:eb:40:5f:12:e2:
                    72:a2:f5:01:0a:ef:52:73:1c:0e:af:de:d5:94:7b:
                    ab:3d:51:40:5e:f2:95:88:0d:74:1b:a8:83:02:2b:
                    50:0c:4c:da:81:c7:86:29:60:10:58:e6:1b:15:5d:
                    0f:94:87:58:a4:ac:3d:a6:ce:cd:b3:33:8a:26:c0:
                    a8:14:75:3d:e1:16:99:12:5f:f1:0c:bd:9c:5c:4e:
                    ae:4c:96:61:21:2e:80:0a:82:c6:8c:a7:cf:aa:60:
                    15:0b:3b:e9:c1:6d:bf:28:8a:70:27:2b:3e:eb:52:
                    82:ae:fe:2c:a0:3e:ac:bd:e1:12:12:83:9e:f9:de:
                    33:8c:d1:3a:33:73:79:1c:e4:b6:c3:a4:79:36:1f:
                    f4:2d:09:0e:04:d1:2b:b5:c5:e6:ef:5c:56:02:73:
                    33:c7:6e:76:81:63:67:19:11:f9:7a:46:b3:b7:f9:
                    9e:03:72:17:d9:eb:2e:d7:37:a0:c5:3c:7e:ac:95:
                    ba:4b:18:bd:13:1c:d6:0e:ea:64:ed:e9:5b:bb:1d:
                    80:8e:62:36:0f:23:fd:6d:98:ac:6d:e2:ab:d4:8e:
                    81:25:b8:78:a1:f6:fa:ae:31:83:d6:4d:03:65:ac:
                    0a:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:F4:93:32:50:D6:3A:85:0E:EF:62:30:1B:A8:EA:52:48:0E:7D:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/369f44d9-c369-3f20-9ec3-15ee17bec66e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.114.28.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:1c:a4:a0:21:54:c0:6a:40:d2:f9:65:29:0f:ac:79:9f:49:
         85:fe:66:5d:fa:7d:65:7f:53:9c:3c:f3:37:b2:3a:e4:02:2c:
         c6:27:64:6c:59:6c:07:6f:8b:67:74:15:2b:62:72:45:05:41:
         3b:bd:af:ab:1f:bc:95:54:38:bf:dc:96:2f:84:ce:3b:c8:ca:
         8f:59:00:95:e9:3b:f0:bb:0b:60:b7:23:19:f2:dc:d1:fb:b8:
         34:ea:44:e1:33:8e:14:b1:b3:33:45:73:2e:7f:a0:aa:7e:e6:
         f3:95:c9:f0:34:16:6a:4c:a4:22:7c:5e:aa:f3:d0:a9:7a:c9:
         41:e0:85:c7:a3:b6:00:13:7b:36:7b:b0:71:7d:af:0b:88:83:
         0c:df:70:13:94:68:39:0a:5e:02:f5:9a:7d:ed:20:e2:29:63:
         1b:e9:a6:3a:71:21:c1:c0:21:7c:5d:05:6f:7b:9e:68:39:eb:
         1e:f9:60:53:14:39:d6:2e:70:dd:b2:de:0c:df:c5:5a:1f:9f:
         22:28:92:12:69:fd:49:8c:3d:4f:dd:69:12:26:1e:5b:60:34:
         93:66:35:a6:3b:e8:25:16:a7:2b:ad:39:9a:4a:65:20:32:78:
         7e:76:6e:e8:a9:52:ad:ed:40:73:31:64:d2:87:6b:7a:1a:e2:
         b1:41:cb:5d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWrI1Lao8S8HZ10cOQwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI0MDQyNjAxMDAyNVoXDTI0MDcyNTAxMDAyNVowLzEtMCsGA1UEAxMk
MjFjZmI1YmEtZjliNC00Yzk5LWFjYTYtOTMwMmI2NzJmNTg0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1GpOs4De47zNpV5MCCV8RB3crPPAycpQ60Bf
EuJyovUBCu9ScxwOr97VlHurPVFAXvKViA10G6iDAitQDEzagceGKWAQWOYbFV0P
lIdYpKw9ps7NszOKJsCoFHU94RaZEl/xDL2cXE6uTJZhIS6ACoLGjKfPqmAVCzvp
wW2/KIpwJys+61KCrv4soD6sveESEoOe+d4zjNE6M3N5HOS2w6R5Nh/0LQkOBNEr
tcXm71xWAnMzx252gWNnGRH5ekazt/meA3IX2esu1zegxTx+rJW6Sxi9ExzWDupk
7elbux2AjmI2DyP9bZisbeKr1I6BJbh4ofb6rjGD1k0DZawKGQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEv0kzJQ1jqFDu9iMBuo6lJIDn2pMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvMzY5ZjQ0ZDktYzM2OS0z
ZjIwLTllYzMtMTVlZTE3YmVjNjZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAMnIcMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAF0cpKAhVMBqQNL5ZSkPrHmfSYX+Zl36fWV/U5w88zeyOuQCLMYnZGxZ
bAdvi2d0FStickUFQTu9r6sfvJVUOL/cli+EzjvIyo9ZAJXpO/C7C2C3Ixny3NH7
uDTqROEzjhSxszNFcy5/oKp+5vOVyfA0FmpMpCJ8Xqrz0Kl6yUHghcejtgATezZ7
sHF9rwuIgwzfcBOUaDkKXgL1mn3tIOIpYxvppjpxIcHAIXxdBW97nmg56x75YFMU
OdYucN2y3gzfxVofnyIokhJp/UmMPU/daRImHltgNJNmNaY76CUWpyutOZpKZSAy
eH52buipUq3tQHMxZNKHa3oa4rFBy10=
-----END CERTIFICATE-----
Generated at Tue Apr 30 10:17:43 2024 by rpki-client on console-fra.rpki-client.org