Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/05274575-b31e-3293-94f5-ef95075acb59.roa
File:                     05274575-b31e-3293-94f5-ef95075acb59.roa (raw, json)
Hash identifier:          rsBzH4kuyBmt1AhBkQ7BBx5Eib1y393kZJo4U9zZTm4=
Subject key identifier:   82:ED:0C:8C:15:67:53:C6:59:E4:ED:95:6E:16:0C:56:6E:FC:53:18
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285848A830AD3EDEC0B0BD67F45B80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/05274575-b31e-3293-94f5-ef95075acb59.roa
Signing time:             Sat 25 Jan 2025 02:00:39 +0000
ROA not before:           Sat 25 Jan 2025 02:00:39 +0000
ROA not after:            Fri 25 Apr 2025 01:00:39 +0000
asID:                     61317
IP address blocks:        50.114.122.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a8:30:ad:3e:de:c0:b0:bd:67:f4:5b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jan 25 02:00:39 2025 GMT
            Not After : Apr 25 01:00:39 2025 GMT
        Subject: CN=2047a612-3a9c-47a8-8e27-7f3982bd5945
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:e1:78:b6:59:ed:9c:65:ad:18:2c:a4:7e:1e:
                    ef:65:2a:df:83:21:10:e5:0e:32:18:5c:a9:ed:6e:
                    0f:02:74:5b:72:b1:3d:73:53:59:84:74:b1:de:16:
                    5e:5e:1c:f3:ca:a1:a5:75:ca:9a:c5:be:1d:1b:eb:
                    85:02:57:37:fa:b0:17:6a:71:cf:6b:eb:63:c3:bb:
                    84:00:a7:be:9b:eb:86:74:1b:5f:dc:55:87:1c:35:
                    a1:85:1e:b1:1f:d0:89:e8:50:5c:b3:b9:ca:20:e0:
                    e8:02:a0:3c:f9:45:89:39:12:51:9f:c6:5d:cc:70:
                    22:38:b1:3e:16:61:c3:5f:f5:53:0e:fa:75:53:ee:
                    08:9b:05:04:9b:50:f0:86:f3:4a:6d:3e:aa:13:56:
                    34:a6:40:50:ff:94:59:cd:c8:6c:24:74:ad:b4:5d:
                    a2:9b:0a:91:f1:33:e8:64:29:9e:f9:ef:76:85:32:
                    ae:50:6a:a6:20:84:9b:e9:0b:cd:e0:de:98:7a:5f:
                    b7:07:dc:27:92:7e:c9:5e:ea:7a:1e:27:58:46:74:
                    3c:bd:c4:1f:ed:6a:80:5f:bd:14:d2:21:35:59:05:
                    46:05:f6:a3:a0:75:bf:d6:19:c5:6a:87:c1:a5:e7:
                    5b:83:7d:0e:84:17:93:2f:22:03:9d:61:66:e5:6d:
                    d5:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:ED:0C:8C:15:67:53:C6:59:E4:ED:95:6E:16:0C:56:6E:FC:53:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/05274575-b31e-3293-94f5-ef95075acb59.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.114.122.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:2a:71:2a:7c:14:13:58:68:4a:6a:85:09:3e:aa:f0:05:7e:
         a2:29:08:13:0a:5d:15:44:75:56:3d:35:3f:7c:b2:c9:1d:0f:
         9e:7d:cc:6c:33:7e:db:88:18:98:64:92:76:f1:ad:fc:fe:8f:
         61:93:66:73:41:eb:c7:73:56:f5:30:d3:2b:5c:7f:f3:f1:8f:
         21:f8:c2:fc:f0:b5:18:c9:e6:f8:fb:03:85:f9:2f:02:c4:ab:
         11:a9:b0:b0:6c:f1:3a:dd:d9:ba:2d:fb:04:83:8d:14:e0:d2:
         b5:a9:b9:f3:d9:04:02:76:5d:dd:73:1f:76:67:71:3b:dd:23:
         37:08:1b:f1:39:75:8f:15:0a:73:11:98:cf:d2:f0:58:61:3b:
         86:82:de:60:dc:49:53:28:71:8b:02:b9:3e:f2:a4:ec:9f:ff:
         a4:0b:81:2a:b6:e7:3c:0d:94:ca:ca:24:ab:7a:1f:ad:1c:82:
         f6:18:53:0c:19:b5:76:6e:80:7b:88:2d:bf:6a:ff:81:1d:b3:
         fc:50:31:c3:b1:4a:62:3d:34:2b:06:0f:47:98:fe:43:c6:a5:
         0b:9e:83:80:13:55:5a:38:30:62:ac:cd:7c:ba:8f:cd:17:e1:
         5e:25:50:31:7d:21:cd:6f:64:89:a7:15:09:7e:93:dd:9f:09:
         b7:1a:d9:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:41:43 2025 by rpki-client