Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e66af741-381b-31d3-be17-9653deae48b1.roa
File:                     e66af741-381b-31d3-be17-9653deae48b1.roa (raw, json)
Hash identifier:          ToB1iZSrSZFns8KOCW2F2NIed1vH7MJ4VFavNSarYFE=
Subject key identifier:   56:D2:3B:9A:F4:82:0F:00:9D:D7:19:8D:4F:4A:35:BE:DD:F2:9C:35
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285845AB2353668D17419045EE5B00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e66af741-381b-31d3-be17-9653deae48b1.roa
Signing time:             Fri 26 Apr 2024 01:00:25 +0000
ROA not before:           Fri 26 Apr 2024 01:00:25 +0000
ROA not after:            Thu 25 Jul 2024 01:00:25 +0000
asID:                     29802
IP address blocks:        50.114.116.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 01 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ab:23:53:66:8d:17:41:90:45:ee:5b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Apr 26 01:00:25 2024 GMT
            Not After : Jul 25 01:00:25 2024 GMT
        Subject: CN=110228f2-6898-444d-9e4d-30885fbd4dcc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:08:f7:eb:ab:9d:36:e5:01:4a:41:b4:7a:b4:
                    21:84:1c:f5:bb:be:5a:b4:55:77:5f:2e:bb:57:38:
                    ce:e0:e5:4a:ad:06:b7:5a:78:8c:39:06:8d:69:a9:
                    81:72:5d:4d:4f:cb:11:eb:35:9b:fe:be:89:90:8b:
                    5b:92:f4:3c:fa:a6:d9:97:d7:d5:47:73:33:6d:96:
                    74:7d:46:60:b4:0a:05:0d:8e:46:79:7b:d4:5a:c0:
                    3d:a7:49:7b:6f:19:ba:2c:7f:4b:0d:7b:28:08:5f:
                    09:e4:d1:1f:52:2a:e7:9b:67:04:84:09:ef:fd:1d:
                    89:44:0f:ba:33:9b:7b:94:b9:22:69:51:d6:44:55:
                    76:67:fd:5b:10:cb:81:6f:a1:18:a3:8a:b6:82:a4:
                    3b:95:20:ab:9b:c3:35:a2:51:e6:5e:9a:9c:6f:fc:
                    26:a2:88:8a:fe:ec:e0:5c:cc:ba:be:67:76:73:5f:
                    a6:3a:21:4e:4f:40:2a:bb:6e:d7:d0:5d:48:59:01:
                    0b:bb:22:06:5a:17:77:4b:66:04:d0:3e:21:0a:7e:
                    65:fe:26:b9:7e:ab:c1:92:9b:61:62:69:9e:91:26:
                    3b:6b:c2:9c:ab:a7:0f:9a:bd:5d:fb:6b:a0:9f:7b:
                    3a:66:c4:07:f9:62:75:f2:da:1e:5a:14:6c:08:87:
                    fc:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:D2:3B:9A:F4:82:0F:00:9D:D7:19:8D:4F:4A:35:BE:DD:F2:9C:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e66af741-381b-31d3-be17-9653deae48b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.114.116.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:03:39:24:47:60:c6:5c:4e:24:54:cf:e8:8f:90:2a:69:b9:
         e6:70:72:8e:33:a7:a8:fd:29:af:8b:c5:0d:98:51:bb:72:ef:
         0d:c9:b0:0b:15:57:a6:a6:be:d7:2b:07:fa:56:5f:b6:17:05:
         68:d9:ed:65:1d:1e:66:06:0d:e4:a1:c0:97:4a:0e:9d:47:1f:
         03:94:20:3f:53:5c:e2:69:1a:cb:4c:35:ad:ef:85:f1:97:6d:
         b0:43:06:aa:b2:ea:7c:b5:f5:72:b9:bb:8b:d6:37:80:b6:82:
         3f:16:f3:84:fd:f7:74:72:12:02:8c:a5:f0:ec:75:99:5d:d6:
         80:ff:62:0c:59:31:69:b3:c3:f5:8c:e9:3a:49:44:c2:6c:11:
         69:7b:5d:15:95:94:65:0e:3e:15:fe:cb:26:0e:02:aa:3a:38:
         c7:31:83:37:95:11:d5:1e:41:65:55:b0:c0:ac:67:1a:e4:c9:
         d6:d3:7e:9a:ab:3d:31:c6:19:b6:c3:23:51:8c:30:c9:87:a9:
         97:46:ef:8f:1b:7b:a4:69:b5:16:df:08:66:f8:17:a0:53:9d:
         3d:18:e2:44:51:bb:79:30:48:0d:26:df:cf:16:e0:f3:dd:38:
         61:ee:d9:b6:22:4e:0a:dc:37:69:38:39:96:7d:85:8e:dd:89:
         b6:40:fe:3c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWrI1NmjRdBkEXuWwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI0MDQyNjAxMDAyNVoXDTI0MDcyNTAxMDAyNVowLzEtMCsGA1UEAxMk
MTEwMjI4ZjItNjg5OC00NDRkLTllNGQtMzA4ODVmYmQ0ZGNjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtQj366udNuUBSkG0erQhhBz1u75atFV3Xy67
VzjO4OVKrQa3WniMOQaNaamBcl1NT8sR6zWb/r6JkItbkvQ8+qbZl9fVR3MzbZZ0
fUZgtAoFDY5GeXvUWsA9p0l7bxm6LH9LDXsoCF8J5NEfUirnm2cEhAnv/R2JRA+6
M5t7lLkiaVHWRFV2Z/1bEMuBb6EYo4q2gqQ7lSCrm8M1olHmXpqcb/wmooiK/uzg
XMy6vmd2c1+mOiFOT0Aqu27X0F1IWQELuyIGWhd3S2YE0D4hCn5l/ia5fqvBkpth
YmmekSY7a8Kcq6cPmr1d+2ugn3s6ZsQH+WJ18toeWhRsCIf8GQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFbSO5r0gg8AndcZjU9KNb7d8pw1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvZTY2YWY3NDEtMzgxYi0z
MWQzLWJlMTctOTY1M2RlYWU0OGIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAMnJ0MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJsDOSRHYMZcTiRUz+iPkCppueZwco4zp6j9Ka+LxQ2YUbty7w3JsAsV
V6amvtcrB/pWX7YXBWjZ7WUdHmYGDeShwJdKDp1HHwOUID9TXOJpGstMNa3vhfGX
bbBDBqqy6ny19XK5u4vWN4C2gj8W84T993RyEgKMpfDsdZld1oD/YgxZMWmzw/WM
6TpJRMJsEWl7XRWVlGUOPhX+yyYOAqo6OMcxgzeVEdUeQWVVsMCsZxrkydbTfpqr
PTHGGbbDI1GMMMmHqZdG748be6RptRbfCGb4F6BTnT0Y4kRRu3kwSA0m388W4PPd
OGHu2bYiTgrcN2k4OZZ9hY7dibZA/jw=
-----END CERTIFICATE-----
Generated at Mon Apr 29 15:22:02 2024 by rpki-client on console-ams.rpki-client.org