Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/cad68947-4cc8-30f4-89b8-d74535dc6a6f.roa
File:                     cad68947-4cc8-30f4-89b8-d74535dc6a6f.roa (raw, json)
Hash identifier:          q3kDL4IrKqjnAEJEdYvM3fRfM/UrDmz1z7ROI4pObFU=
Subject key identifier:   83:2D:C9:13:3D:A2:C2:0E:20:8B:60:1E:5B:1F:40:DC:9F:34:45:2C
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285845AB2353575A6FDF6C7B9D6440
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/cad68947-4cc8-30f4-89b8-d74535dc6a6f.roa
Signing time:             Fri 26 Apr 2024 01:00:25 +0000
ROA not before:           Fri 26 Apr 2024 01:00:25 +0000
ROA not after:            Thu 25 Jul 2024 01:00:25 +0000
asID:                     29802
IP address blocks:        50.114.103.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 01 May 2024 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ab:23:53:57:5a:6f:df:6c:7b:9d:64:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Apr 26 01:00:25 2024 GMT
            Not After : Jul 25 01:00:25 2024 GMT
        Subject: CN=5c3dc40a-9db2-475f-aba5-b9dc283bbcc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:f2:71:9a:c2:3e:61:3c:5a:10:68:c1:70:97:
                    5f:1d:4f:e7:e7:6f:f1:b6:6c:05:3d:b8:24:c6:db:
                    2e:b4:74:40:97:76:20:2b:21:ec:23:9f:6e:e4:da:
                    00:03:38:0e:c0:27:39:89:ca:fa:89:ce:eb:4d:04:
                    c2:39:a6:10:1e:b6:82:a0:e8:10:c2:61:78:9e:83:
                    26:e2:27:df:91:0d:5f:d2:e6:70:4f:8e:6d:c4:e2:
                    7f:f6:97:7f:16:33:9b:0f:0d:f5:61:1d:c9:95:f9:
                    df:8d:50:6c:b5:55:0a:48:6c:38:8f:df:90:9a:f2:
                    30:43:4b:58:a3:ec:bb:7f:15:89:29:da:11:97:88:
                    78:18:4a:1b:5a:21:0d:af:99:41:d4:0d:e4:04:a4:
                    50:36:0c:68:dc:81:8d:d2:d9:c7:52:a5:3e:49:12:
                    80:93:d8:66:9b:9b:d0:6a:5b:46:7f:1e:31:63:38:
                    8c:49:90:5f:8d:fe:53:66:3b:15:dc:5d:16:25:f7:
                    9f:e6:b3:b6:24:d2:d7:c0:3f:0c:5b:af:52:8e:80:
                    93:66:e0:e3:03:a2:ce:e7:47:c5:01:1d:d8:c7:63:
                    cf:22:77:d4:4a:96:ab:df:22:bc:97:d9:aa:df:c5:
                    83:32:8d:e0:9b:d7:d8:21:b3:eb:e8:85:fb:00:25:
                    bd:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:2D:C9:13:3D:A2:C2:0E:20:8B:60:1E:5B:1F:40:DC:9F:34:45:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/cad68947-4cc8-30f4-89b8-d74535dc6a6f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.114.103.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:89:79:22:89:9e:b9:89:35:81:5d:b6:99:50:98:47:c9:4c:
         78:07:88:4a:d0:33:33:6e:3a:09:9f:e4:2b:5b:ca:7c:d5:bd:
         4b:8f:20:fe:98:18:5e:cc:d1:7a:46:55:6e:21:74:f9:ee:10:
         89:c0:7e:39:0c:66:58:a3:e9:a5:30:07:b4:1e:65:86:35:48:
         78:51:df:08:d9:9c:8c:99:ce:94:77:ca:f9:83:83:98:d3:08:
         c7:07:d7:14:48:a9:c4:72:cf:9c:15:e2:95:e9:06:37:ba:cd:
         8e:b6:2f:66:7e:bf:9e:59:6b:f3:15:cd:50:a4:49:7a:8c:c3:
         44:83:83:bb:39:61:42:9a:84:fb:0e:17:c8:e9:60:bd:d5:56:
         f7:2f:7d:05:69:a3:5f:80:58:e3:02:c5:d9:dd:39:d2:8a:30:
         cf:4a:7d:a7:62:b1:8d:12:29:eb:02:f0:77:48:26:df:d1:92:
         7c:5c:d1:4b:b2:4a:93:0e:7a:00:d1:ac:c0:8a:9a:03:99:d9:
         f8:72:11:97:5f:89:fb:b7:ae:94:a9:22:8c:45:7a:31:5c:ae:
         85:aa:98:e4:a9:74:ac:e5:b0:9e:fc:16:2e:bd:97:32:4c:80:
         f3:35:98:b8:97:f8:31:ba:11:c1:c9:8e:e4:1c:a8:0b:5b:38:
         23:d4:6f:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 05:00:33 2024 by rpki-client on console-fra.rpki-client.org