Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/0704ebe5-c601-38d3-bef4-d8c159988dbb.roa
File:                     0704ebe5-c601-38d3-bef4-d8c159988dbb.roa (raw, json)
Hash identifier:          TxhCBkPD5E4G14BD0JodDhVQZWTqkrXSqRlPDve+ex4=
Subject key identifier:   15:41:8F:73:3B:46:80:B6:94:25:DC:81:3C:84:3A:08:F6:F7:8B:FD
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F432858471E5110561B98A4D9FADC3E00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/0704ebe5-c601-38d3-bef4-d8c159988dbb.roa
Signing time:             Thu 05 Sep 2024 23:57:32 +0000
ROA not before:           Thu 05 Sep 2024 23:57:32 +0000
ROA not after:            Thu 05 Dec 2024 00:57:32 +0000
asID:                     205220
IP address blocks:        50.114.204.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:1e:51:10:56:1b:98:a4:d9:fa:dc:3e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Sep  5 23:57:32 2024 GMT
            Not After : Dec  5 00:57:32 2024 GMT
        Subject: CN=b1b0d039-e6f3-4d3b-9f1f-c94f146129b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:ef:e8:e9:8f:7d:35:2d:ca:c3:7c:5e:de:3a:
                    6e:5e:07:68:c3:ec:09:20:0f:66:7b:ec:d1:5e:77:
                    90:d2:08:e0:ec:8f:36:f1:d0:54:71:9c:f2:c3:73:
                    2c:9e:95:85:5a:a2:e2:eb:e6:29:d0:ee:cf:02:11:
                    81:3d:df:76:89:f9:bf:de:2d:32:85:79:f0:95:da:
                    47:4c:0b:dc:51:c5:7d:d1:65:9e:75:1a:2d:cb:cc:
                    79:5e:0b:d8:77:04:32:cb:eb:0f:2c:35:a0:27:4a:
                    2d:40:f9:db:20:91:c1:91:27:66:73:e6:41:56:56:
                    1c:61:d8:79:50:0c:b2:0d:b4:a0:5d:bc:c5:f9:57:
                    71:10:85:dd:68:25:6e:f1:67:23:6f:e9:c3:40:44:
                    f1:f9:ad:d9:c9:92:e9:3a:5a:78:32:35:39:f8:b3:
                    b9:28:4d:33:66:c1:35:0a:4e:d9:dc:b8:1a:a6:94:
                    e6:67:38:ae:91:c1:48:5c:24:16:90:be:08:0e:a5:
                    44:65:ce:e9:a5:b8:08:84:3c:e4:57:86:e2:a9:9d:
                    f4:6b:8f:7c:fb:24:89:24:93:8d:fd:36:93:15:e3:
                    9d:86:30:2a:d0:a4:f1:f2:73:26:a1:aa:f4:67:bb:
                    44:65:d7:ca:69:78:1f:23:b6:64:95:af:5f:bf:3c:
                    98:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:41:8F:73:3B:46:80:B6:94:25:DC:81:3C:84:3A:08:F6:F7:8B:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/0704ebe5-c601-38d3-bef4-d8c159988dbb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.114.204.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:95:0a:be:cd:65:e3:5b:83:89:40:40:81:51:e2:5a:d4:9d:
         2d:f3:97:8b:3a:8d:e0:e9:4b:ca:83:df:05:98:d5:fd:bc:93:
         7b:22:50:b7:2e:fd:5c:7d:0d:51:7a:28:af:03:ad:c5:5a:8b:
         49:0f:ed:9e:a0:68:4f:ad:e3:ab:a5:44:05:a1:a9:74:01:18:
         e0:ba:f7:12:a1:2e:d0:09:e1:54:08:86:61:f8:b6:03:04:3d:
         c8:d8:ec:6e:27:e3:76:ec:8c:07:77:04:56:5e:14:d1:6d:0b:
         ea:f4:e9:07:92:49:5e:d9:ba:a1:7c:31:07:5e:f8:4b:19:0e:
         96:78:ab:18:01:44:70:4f:c5:49:42:b1:9e:53:4f:30:6e:db:
         bf:40:a3:85:8f:83:a0:bf:26:31:96:3d:c3:66:b7:f5:74:ba:
         cb:12:a7:69:32:2e:12:e3:01:c4:92:a8:26:3f:2e:d5:ef:36:
         a7:67:18:78:ff:55:4c:07:c1:98:27:ab:fa:3a:12:b6:96:46:
         ea:ed:d4:cb:88:28:06:42:d6:57:5c:f0:0a:70:73:a2:4b:44:
         d3:17:e6:29:e2:ed:8b:98:cb:ac:b8:4a:be:e9:a1:0a:21:5a:
         3a:02:56:94:04:b7:5c:f8:92:da:de:c1:a2:60:88:4b:ae:cb:
         63:24:34:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 05:50:14 2024 by rpki-client on console-fra.rpki-client.org