Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/5d50cbbf-c226-36a7-90cc-c7a93521f8f3.roa
File:                     5d50cbbf-c226-36a7-90cc-c7a93521f8f3.roa (raw, json)
Hash identifier:          +5FfcyOWkIIOhQSH+HUlTdZKOkCEwB4ZpIR2GT60Wn4=
Subject key identifier:   B2:E0:E2:3A:04:C9:33:3F:AF:1D:16:C1:D9:F2:93:23:70:22:49:DB
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285845A76A811FE5D73B087F3DD640
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/5d50cbbf-c226-36a7-90cc-c7a93521f8f3.roa
Signing time:             Wed 24 Apr 2024 17:00:40 +0000
ROA not before:           Wed 24 Apr 2024 17:00:40 +0000
ROA not after:            Tue 23 Jul 2024 17:00:40 +0000
asID:                     63023
IP address blocks:        50.114.41.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a7:6a:81:1f:e5:d7:3b:08:7f:3d:d6:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Apr 24 17:00:40 2024 GMT
            Not After : Jul 23 17:00:40 2024 GMT
        Subject: CN=615ef43e-5730-4f0f-b3f4-c4fa62bb9b23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:0a:cf:f1:a6:6c:44:38:22:78:f1:1d:fc:0f:
                    54:47:33:ca:af:14:20:41:d9:f1:ec:7b:7f:ce:a0:
                    35:f5:90:51:b0:29:82:bc:9a:3a:27:51:79:68:b1:
                    4e:55:f3:fe:f5:1c:67:2f:02:ca:94:df:40:82:c9:
                    6f:6e:20:67:1e:46:6d:ac:47:1c:b9:73:80:d4:50:
                    a5:f5:d9:b9:ac:22:df:71:30:58:88:16:a3:f5:74:
                    c4:b8:af:2a:f9:9f:c7:60:9f:60:f4:9d:31:f9:74:
                    aa:16:fd:76:c8:51:74:5f:3b:48:da:63:23:68:40:
                    ba:f4:e0:92:54:7c:78:64:01:0c:e9:c9:2e:3d:b5:
                    66:84:4b:77:26:86:a6:73:4e:09:f2:75:d4:9d:f1:
                    14:56:4d:bf:7e:5e:ca:11:11:d3:11:8d:23:20:90:
                    d6:0c:43:d9:5d:45:4e:ca:38:42:bb:48:96:f9:5e:
                    6e:3d:86:9c:c7:cf:7a:f0:47:12:3e:bf:95:0e:c7:
                    fe:9a:ea:cf:d0:02:75:75:73:c1:47:91:1a:55:f7:
                    4d:af:a5:47:34:7e:09:7c:49:8b:b8:f6:9c:be:40:
                    c4:48:48:23:86:87:65:f0:d4:e3:b4:0d:ac:06:33:
                    a4:9f:fd:22:0c:39:ed:25:a5:ba:c4:f2:3c:dc:07:
                    fb:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:E0:E2:3A:04:C9:33:3F:AF:1D:16:C1:D9:F2:93:23:70:22:49:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/5d50cbbf-c226-36a7-90cc-c7a93521f8f3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.114.41.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:65:4e:8d:20:4a:01:c4:e4:1d:57:ab:95:56:9d:be:01:7f:
         6a:3a:1e:aa:d6:39:4c:10:6c:89:69:aa:1f:ff:77:31:58:09:
         2a:f1:e7:03:73:e1:07:20:ac:3d:00:5e:55:b0:2a:53:f2:8a:
         1a:37:b5:a2:7e:ab:c8:09:37:d8:0b:50:95:ea:30:da:bb:4d:
         dc:17:07:ab:8b:23:4a:ad:c8:23:4d:f4:4c:93:76:0e:05:93:
         0d:15:01:ee:85:2a:69:0f:16:3d:51:27:f5:a4:89:be:36:ad:
         0d:31:57:a4:88:d9:b4:01:c3:56:0d:9b:5a:aa:e3:6b:7b:59:
         58:de:88:ae:5d:b0:6a:ea:88:ea:88:22:98:eb:c2:68:20:cd:
         49:25:4f:69:b3:c7:e0:7a:af:d7:64:c1:e0:aa:bc:36:22:c8:
         60:b2:31:9e:cf:4d:06:f5:a8:6d:76:cb:b1:83:81:14:9f:f0:
         a3:ae:b5:18:22:7f:7f:93:7a:5a:6b:3d:80:c6:78:9c:7a:a8:
         f8:01:8d:12:59:d4:e0:47:ce:50:3c:61:37:72:cf:d2:fe:07:
         ad:e6:5a:3f:35:d6:e7:d3:9d:42:e0:37:03:71:74:5d:19:35:
         f1:8b:5c:4b:5b:07:38:74:86:f3:c2:5e:8f:e9:54:3d:20:a2:
         4c:48:87:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 19:25:12 2024 by rpki-client on console-ams.rpki-client.org