Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/04c7097a-3590-3764-ba45-d05f65c092da.roa
File:                     04c7097a-3590-3764-ba45-d05f65c092da.roa (raw, json)
Hash identifier:          z60uJDByFnwUwkNGo9lua5bG/FLOnk3akgCKx7qu3aA=
Subject key identifier:   82:3D:01:8E:59:6D:A2:08:41:5A:5D:98:95:B7:1A:9D:2C:9E:9D:9D
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285845410D4E88BC6FCBE864A63800
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/04c7097a-3590-3764-ba45-d05f65c092da.roa
Signing time:             Tue 19 Mar 2024 01:00:24 +0000
ROA not before:           Tue 19 Mar 2024 01:00:24 +0000
ROA not after:            Mon 17 Jun 2024 01:00:24 +0000
asID:                     16509
IP address blocks:        50.114.210.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:41:0d:4e:88:bc:6f:cb:e8:64:a6:38:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Mar 19 01:00:24 2024 GMT
            Not After : Jun 17 01:00:24 2024 GMT
        Subject: CN=a4f65f27-7061-4b73-b159-6005466187aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:2d:26:eb:ac:c2:84:60:03:fb:18:f8:2d:ca:
                    57:3d:94:5d:12:8a:24:22:fe:4b:d5:37:6f:72:d6:
                    5f:8a:11:c4:0e:e6:5f:72:79:c6:bf:e9:96:9c:d9:
                    5c:29:1e:57:78:ec:f8:08:01:d7:b2:06:e6:14:31:
                    03:e4:21:08:2c:2c:60:f3:53:0f:b9:26:be:fa:b3:
                    73:7b:7d:a9:b5:59:89:8c:51:29:8f:5d:c1:f6:45:
                    8e:e9:b3:67:71:2d:a0:2e:23:9a:b3:73:c7:88:0b:
                    6c:71:39:7a:9b:71:e3:d6:8c:72:60:9a:76:b1:26:
                    01:59:fe:0e:95:63:83:07:17:6c:18:b1:c4:51:bf:
                    5b:57:93:51:ad:01:e8:6f:59:55:31:78:dc:8e:75:
                    82:6a:16:42:b8:4f:01:3e:eb:59:bc:76:0d:e7:d4:
                    70:1c:df:01:ea:2a:55:aa:7e:5f:94:75:cf:fc:df:
                    48:37:51:27:67:ec:0a:ed:22:40:64:f8:cc:87:a4:
                    43:32:5e:ff:64:73:97:f8:99:df:d5:f6:66:bf:9d:
                    8e:98:f8:7d:de:c4:d8:1e:15:0c:84:56:32:c1:24:
                    3d:91:fe:64:8f:8e:b0:b2:8d:e1:f8:01:bf:f8:c3:
                    5f:83:e2:03:53:58:8c:b7:a8:53:74:01:9a:a1:f4:
                    5a:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:3D:01:8E:59:6D:A2:08:41:5A:5D:98:95:B7:1A:9D:2C:9E:9D:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/04c7097a-3590-3764-ba45-d05f65c092da.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.114.210.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:94:79:ad:c7:03:e7:cb:04:f8:d8:28:8e:d2:ce:f1:29:cc:
         fd:3f:c5:c1:ec:e3:d9:4a:89:b5:c9:9c:59:7d:ed:7a:f5:d7:
         a9:35:4b:35:e0:88:ea:3d:a3:d0:e8:da:df:05:e7:20:aa:8c:
         fe:91:59:9f:af:be:7d:36:ca:39:db:42:5c:2f:64:11:35:9f:
         d0:61:54:65:1b:d4:79:97:b4:6e:8c:11:6b:06:d2:91:8a:05:
         94:13:67:ac:b0:4e:77:18:5b:e5:2e:db:d8:6e:18:cd:b9:11:
         4f:ad:17:7a:47:09:f6:82:45:5f:73:19:da:c2:42:05:49:8f:
         ff:2a:0d:f2:8e:c0:45:20:73:07:24:44:ea:d9:19:40:c1:ce:
         ff:a1:e8:98:a6:ea:b7:1e:d3:b5:86:71:ec:3c:55:11:cf:72:
         58:07:c7:ee:5c:4c:60:3a:be:73:2d:b4:15:68:ea:00:9d:de:
         a1:f5:3a:78:59:3b:c0:06:52:09:45:bf:21:fe:cd:c6:8c:c3:
         ea:6f:82:4c:c5:20:87:75:9f:ab:bd:37:cd:a6:95:19:8f:09:
         d6:6e:26:28:23:09:0a:d5:d2:98:72:ef:98:7f:ac:65:9f:63:
         70:62:ea:46:82:49:1c:5b:94:e6:d7:df:03:a6:f8:12:3f:7d:
         7b:51:1f:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 14:54:53 2024 by rpki-client on console-ams.rpki-client.org