Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/06561b35-7274-32b3-9b6d-daef7fc0d572.roa
File:                     06561b35-7274-32b3-9b6d-daef7fc0d572.roa (raw, json)
Hash identifier:          7pTCZOEj+5GVWugsjeRXKi2UAkV3NuNUpz9R1dCZsuw=
Subject key identifier:   10:39:CD:F8:7D:69:83:E9:3C:91:97:13:83:40:3E:B8:8F:E6:8B:19
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285847CE6F390A2FDC18B9378A0FB0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/06561b35-7274-32b3-9b6d-daef7fc0d572.roa
Signing time:             Fri 08 Nov 2024 02:00:27 +0000
ROA not before:           Fri 08 Nov 2024 02:00:27 +0000
ROA not after:            Thu 06 Feb 2025 02:00:27 +0000
asID:                     212669
IP address blocks:        50.114.22.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ce:6f:39:0a:2f:dc:18:b9:37:8a:0f:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Nov  8 02:00:27 2024 GMT
            Not After : Feb  6 02:00:27 2025 GMT
        Subject: CN=6076d1e2-0a12-46be-b2af-45ec9bd7e30a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ec:6b:38:5c:01:b2:83:9d:65:2c:ea:39:1a:
                    17:c0:62:f4:86:8f:4c:dc:a1:dc:d1:d2:b9:95:24:
                    f0:b9:7d:3c:6b:8d:f7:2d:4d:a3:b5:30:a5:88:05:
                    df:81:84:b5:80:a0:59:be:bd:32:c5:b6:16:a5:60:
                    22:f8:b8:21:f0:5e:b9:29:ca:8d:3d:50:2c:c8:4a:
                    2b:dd:5d:3e:77:53:86:7b:4c:f1:c5:db:10:14:8e:
                    b5:e8:7d:a7:72:6b:7e:04:90:86:47:62:aa:5a:d1:
                    72:59:e7:56:a0:a1:72:fa:28:c8:45:71:35:21:d8:
                    31:fb:0a:53:41:1c:09:05:41:1e:b4:88:38:bc:8d:
                    d7:a2:36:e9:3e:97:a5:02:9e:2a:a7:bf:b9:27:7a:
                    1c:d0:a3:30:ad:2e:55:a9:a9:c9:56:8c:db:b0:9b:
                    33:3b:b2:81:86:84:bc:09:37:af:40:a6:9a:1b:b0:
                    8e:20:67:89:71:40:20:ec:15:fe:73:8d:6a:ef:f7:
                    14:7f:d5:42:56:0f:ad:4e:a0:e7:df:84:bf:d7:c5:
                    2b:12:04:8f:a8:64:3c:c4:ca:30:a9:fb:26:51:51:
                    62:aa:c1:7f:a5:7e:f2:ba:e3:17:c9:52:7c:8a:b5:
                    09:df:57:69:50:8a:03:ef:7d:b5:c9:ab:ab:65:42:
                    05:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:39:CD:F8:7D:69:83:E9:3C:91:97:13:83:40:3E:B8:8F:E6:8B:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/06561b35-7274-32b3-9b6d-daef7fc0d572.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.114.22.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:35:42:0b:78:1e:31:60:e4:9d:45:8d:bf:10:26:be:1c:16:
         0e:ac:60:c3:d0:f5:3b:74:7e:44:3c:8e:70:a6:a3:06:01:fc:
         01:12:5e:8c:0d:69:4b:a9:02:76:2f:a7:79:6e:d8:01:28:f2:
         f4:2c:10:58:53:52:1b:b6:32:01:b9:93:dd:20:80:b6:ff:7f:
         96:9e:6b:48:d7:b9:c4:fd:a9:18:23:70:90:4c:7c:87:37:67:
         a3:24:c1:00:76:7e:90:b5:36:e2:45:6c:43:07:bd:3f:8a:95:
         3f:de:45:ad:0a:49:82:cf:1c:60:df:58:fd:7a:b4:a0:e3:35:
         fb:10:ce:1a:f0:98:02:9e:af:e7:44:7d:09:f0:94:5c:79:63:
         67:7e:c7:22:9c:9e:19:d7:e7:8e:24:2d:e5:89:7b:d0:90:35:
         bd:29:14:56:99:14:b2:a7:5b:ae:fb:15:25:5f:f4:c0:24:0e:
         cb:23:66:56:d9:2a:72:c6:10:91:ea:50:60:2a:86:52:1b:b3:
         08:1d:8a:ac:89:28:7e:b8:a8:fe:a4:63:7f:da:79:d8:81:ef:
         68:e5:fe:bb:6f:5f:a9:c9:85:34:eb:80:27:65:a8:61:86:e0:
         ca:bb:52:0a:47:1a:0a:17:7d:72:f3:15:e5:07:0c:8a:0f:c8:
         9d:2c:72:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:37:34 2024 by rpki-client on console-ams.rpki-client.org