Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ac254649-763a-3c4a-909a-5973e3825eb1.roa
File:                     ac254649-763a-3c4a-909a-5973e3825eb1.roa (raw, json)
Hash identifier:          7McdNZET0u0xxWqjXU+djSIH5vSHOVIB8QbS+VAv0p4=
Subject key identifier:   68:D1:BE:87:32:D4:2D:77:49:14:8B:AA:0A:EC:4E:ED:A9:49:5E:D7
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285845E45E724A8204835D7A856A60
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ac254649-763a-3c4a-909a-5973e3825eb1.roa
Signing time:             Thu 16 May 2024 13:00:35 +0000
ROA not before:           Thu 16 May 2024 13:00:35 +0000
ROA not after:            Wed 14 Aug 2024 13:00:35 +0000
asID:                     19437
IP address blocks:        50.114.206.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:e4:5e:72:4a:82:04:83:5d:7a:85:6a:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May 16 13:00:35 2024 GMT
            Not After : Aug 14 13:00:35 2024 GMT
        Subject: CN=43586c96-6387-4ce8-86a1-7df76f57bc55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:85:85:1a:43:54:e8:be:a8:fe:6f:e6:34:13:
                    b8:88:a8:72:27:b1:7c:3a:cc:7b:f3:4b:7e:76:a6:
                    92:fd:a5:a6:81:85:25:40:d4:59:43:49:f3:3d:9e:
                    8b:44:1d:b3:ed:39:20:2f:0a:4a:16:fa:40:bd:36:
                    b6:d7:03:ae:c1:3a:83:be:24:89:06:e5:b5:49:eb:
                    f1:e0:4a:dd:35:58:42:9c:e9:78:d0:ae:88:0e:32:
                    f5:0a:ba:4f:8c:ca:b9:a4:20:37:48:68:9e:86:60:
                    c7:8c:6e:0b:11:fa:1c:fc:8b:77:d9:91:a5:46:e8:
                    60:04:c0:a3:40:e4:61:92:77:26:1d:d3:2f:f9:98:
                    f2:f8:88:2c:49:9f:e7:61:0e:74:12:f3:86:ee:c9:
                    6f:60:06:17:2b:53:35:6b:d2:89:91:43:00:0f:42:
                    06:54:e8:32:e3:2f:14:3e:77:99:f2:49:f4:17:f1:
                    70:68:fa:4e:2d:78:e2:a1:11:50:a6:5a:42:b9:cb:
                    5b:35:f5:31:56:9e:85:3e:35:d4:81:aa:21:96:4f:
                    a6:4f:55:7f:44:71:b9:e6:25:73:04:b7:95:8a:04:
                    0a:27:36:0c:96:ee:b0:0e:47:b1:e9:74:2c:02:0d:
                    90:cc:7f:73:51:d9:0a:a4:2a:b9:6e:b4:ae:b3:59:
                    eb:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:D1:BE:87:32:D4:2D:77:49:14:8B:AA:0A:EC:4E:ED:A9:49:5E:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ac254649-763a-3c4a-909a-5973e3825eb1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.114.206.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:94:fb:5b:32:88:e4:34:7a:59:e4:4c:d7:3e:7d:bb:d0:55:
         e1:18:95:aa:d1:a6:26:58:ef:c9:10:ff:9b:67:af:3d:c6:6e:
         f6:bb:0e:fc:dd:2c:a8:cd:fc:e7:f2:1f:e9:98:c7:2c:29:21:
         ae:54:54:20:1b:73:a4:52:dd:75:01:3b:44:73:c0:e9:3b:bd:
         70:6c:97:f8:65:7a:62:99:cd:50:a7:e7:8b:6a:9e:06:67:34:
         d6:98:7b:1b:a6:cb:e9:42:32:55:03:a0:08:ba:54:5e:e1:ab:
         5f:8c:3d:12:fe:5d:c2:90:93:0d:3a:98:77:16:36:c4:e3:c6:
         34:89:f5:c6:ab:2c:33:16:79:24:fa:30:f3:10:87:37:c2:7c:
         d0:91:91:35:d7:e4:48:46:da:fc:10:fc:c7:d9:81:4a:32:e3:
         82:00:65:7c:19:3e:dd:92:9b:dc:61:18:cf:54:e5:7d:87:58:
         80:57:51:65:8e:d9:60:39:97:d0:0e:9e:a0:96:1b:fd:b3:ff:
         2e:a9:5d:bd:4e:fc:3c:dd:73:65:2d:2c:f2:ca:5d:82:08:bf:
         82:b4:30:4f:e4:c4:ad:c2:8b:07:7b:0c:7d:a8:d2:db:20:07:
         fd:45:4e:b6:f8:63:df:90:7b:07:99:7e:d3:d1:73:30:81:dc:
         0a:1a:30:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:03:51 2024 by rpki-client on console-ams.rpki-client.org