Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c6ffdb0e-de36-3d86-abb5-e97cf26b2a6e.roa
File:                     c6ffdb0e-de36-3d86-abb5-e97cf26b2a6e.roa (raw, json)
Hash identifier:          NN6bED/W67L4kyrKIvJTKNCvOfOlAMtzhqJ4arZoaAE=
Subject key identifier:   E3:9C:5D:98:12:EF:16:F7:B5:D4:C5:61:91:8A:F4:8F:4E:BC:03:22
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285845AB23538FBEDCD640D6C68780
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c6ffdb0e-de36-3d86-abb5-e97cf26b2a6e.roa
Signing time:             Fri 26 Apr 2024 01:00:25 +0000
ROA not before:           Fri 26 Apr 2024 01:00:25 +0000
ROA not after:            Thu 25 Jul 2024 01:00:25 +0000
asID:                     29802
IP address blocks:        50.114.120.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 01 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ab:23:53:8f:be:dc:d6:40:d6:c6:87:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Apr 26 01:00:25 2024 GMT
            Not After : Jul 25 01:00:25 2024 GMT
        Subject: CN=2c068caa-ce57-40dc-b353-9e971ddd1de4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:2e:14:31:ec:5b:4a:bd:bc:d5:52:9f:97:3f:
                    de:4b:3d:3b:22:72:9f:02:9e:93:45:45:d9:a3:c2:
                    5e:89:3f:7a:91:5a:4b:51:b4:22:96:3c:eb:bb:c7:
                    0b:4f:1f:59:12:80:62:24:c4:b8:b0:39:e7:98:94:
                    08:92:70:75:49:e0:66:de:29:d7:22:96:91:67:82:
                    58:7e:6a:65:f9:f0:c2:b4:8c:05:2f:9e:21:49:af:
                    ea:99:fd:ac:25:85:bc:d1:c1:f5:a7:9b:9b:34:9e:
                    ee:c2:11:d4:6b:4c:d1:22:9c:65:14:42:53:be:46:
                    a0:9c:ef:df:e4:4a:b6:94:b0:bf:29:5c:64:41:0e:
                    78:c7:28:42:68:5d:a4:63:8f:b2:dc:a3:d0:99:e6:
                    e7:ab:ab:79:c5:a7:47:50:47:a7:be:1b:f7:ad:01:
                    64:66:62:f1:ee:f7:1d:97:7e:49:ad:5e:4e:33:b9:
                    d5:5e:55:e7:24:41:c4:e6:ee:d4:d2:36:40:1e:b1:
                    dd:b3:2d:53:61:48:a7:46:f2:ce:e2:4d:01:32:45:
                    89:8d:ba:b5:d5:79:10:3d:b2:71:cb:ad:6a:9f:1f:
                    23:ff:d9:7e:b2:5f:89:8a:95:21:10:c0:81:bf:9a:
                    80:0d:b6:0f:8a:de:9d:fe:99:e3:c8:1c:c9:60:e6:
                    9e:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:9C:5D:98:12:EF:16:F7:B5:D4:C5:61:91:8A:F4:8F:4E:BC:03:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c6ffdb0e-de36-3d86-abb5-e97cf26b2a6e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.114.120.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:39:88:f3:7b:32:57:c8:6b:c9:74:6a:72:b3:67:db:ad:40:
         f1:75:e9:a9:fc:0f:d8:e9:df:0b:42:3c:f6:9e:5d:52:90:4a:
         88:7d:64:97:fe:74:3d:ef:11:c4:6c:bf:18:b5:90:17:fc:cc:
         a3:03:30:72:ff:7b:53:21:7f:8a:5d:b6:32:76:0b:1a:2d:59:
         6f:ea:72:b3:b2:d1:e6:b7:87:b3:40:a6:4d:97:a4:d5:36:41:
         a8:15:2e:8a:8e:d7:fd:1b:36:4d:7b:2e:df:22:a9:14:9a:e4:
         a0:90:41:75:15:6f:fe:9f:0a:1a:69:77:1f:09:cc:16:11:8c:
         4f:a3:2f:d8:d9:d8:3f:f2:f4:1e:da:85:33:2c:a6:73:08:38:
         d3:72:73:c8:d1:18:54:0f:9d:14:23:56:43:a6:e8:cc:b3:ca:
         a7:0a:73:b1:40:aa:68:ee:6c:08:68:87:93:f5:bf:83:df:a9:
         75:74:ce:3e:cd:28:f5:b6:f8:c1:16:ba:88:98:a1:56:c6:20:
         47:1c:cb:2f:56:a7:66:cf:4c:fd:20:4b:e0:22:00:39:0d:9c:
         02:0a:5b:aa:24:f6:08:c1:ac:10:4d:af:a7:07:dd:de:8d:0f:
         bf:83:fc:20:f3:4c:c1:f4:1a:54:95:b0:a9:f4:d4:7d:21:54:
         a1:95:ab:68
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWrI1OPvtzWQNbGh4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI0MDQyNjAxMDAyNVoXDTI0MDcyNTAxMDAyNVowLzEtMCsGA1UEAxMk
MmMwNjhjYWEtY2U1Ny00MGRjLWIzNTMtOWU5NzFkZGQxZGU0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8S4UMexbSr281VKflz/eSz07InKfAp6TRUXZ
o8JeiT96kVpLUbQiljzru8cLTx9ZEoBiJMS4sDnnmJQIknB1SeBm3inXIpaRZ4JY
fmpl+fDCtIwFL54hSa/qmf2sJYW80cH1p5ubNJ7uwhHUa0zRIpxlFEJTvkagnO/f
5Eq2lLC/KVxkQQ54xyhCaF2kY4+y3KPQmebnq6t5xadHUEenvhv3rQFkZmLx7vcd
l35JrV5OM7nVXlXnJEHE5u7U0jZAHrHdsy1TYUinRvLO4k0BMkWJjbq11XkQPbJx
y61qnx8j/9l+sl+JipUhEMCBv5qADbYPit6d/pnjyBzJYOaeMwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOOcXZgS7xb3tdTFYZGK9I9OvAMiMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvYzZmZmRiMGUtZGUzNi0z
ZDg2LWFiYjUtZTk3Y2YyNmIyYTZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAMnJ4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAE45iPN7MlfIa8l0anKzZ9utQPF16an8D9jp3wtCPPaeXVKQSoh9ZJf+
dD3vEcRsvxi1kBf8zKMDMHL/e1Mhf4pdtjJ2CxotWW/qcrOy0ea3h7NApk2XpNU2
QagVLoqO1/0bNk17Lt8iqRSa5KCQQXUVb/6fChppdx8JzBYRjE+jL9jZ2D/y9B7a
hTMspnMIONNyc8jRGFQPnRQjVkOm6MyzyqcKc7FAqmjubAhoh5P1v4PfqXV0zj7N
KPW2+MEWuoiYoVbGIEccyy9Wp2bPTP0gS+AiADkNnAIKW6ok9gjBrBBNr6cH3d6N
D7+D/CDzTMH0GlSVsKn01H0hVKGVq2g=
-----END CERTIFICATE-----
Generated at Tue Apr 30 10:17:53 2024 by rpki-client on console-fra.rpki-client.org