Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/081fbf4c-8605-3e5f-8491-88cc243610ad.roa
File:                     081fbf4c-8605-3e5f-8491-88cc243610ad.roa (raw, json)
Hash identifier:          NZPOUlohWUatxNDObGzT4yK/jIGSra55eWXOIY3wLOg=
Subject key identifier:   72:E3:FD:9F:7F:BF:17:B2:6E:5B:B1:4A:BD:49:C9:48:C4:A3:B2:74
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285845726AD786B991D422253681A0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/081fbf4c-8605-3e5f-8491-88cc243610ad.roa
Signing time:             Fri 05 Apr 2024 17:23:30 +0000
ROA not before:           Fri 05 Apr 2024 17:23:30 +0000
ROA not after:            Thu 04 Jul 2024 17:23:30 +0000
asID:                     58061
IP address blocks:        50.114.170.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:72:6a:d7:86:b9:91:d4:22:25:36:81:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Apr  5 17:23:30 2024 GMT
            Not After : Jul  4 17:23:30 2024 GMT
        Subject: CN=3183f00c-c509-4466-bfd5-bf6810a6b21f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:7b:a0:5c:22:7e:51:06:2f:84:b8:be:a7:45:
                    65:f6:39:91:75:c1:fe:ae:79:d5:6b:4d:da:1a:85:
                    08:cb:88:b6:f5:bc:d0:fe:5d:18:e0:d3:a9:77:2e:
                    06:b8:25:bf:fe:71:1d:3f:0c:87:f7:d0:33:3a:9c:
                    49:29:fb:19:ba:3f:87:bd:1b:a0:54:30:b5:39:59:
                    f3:33:b0:a3:7b:26:d1:b7:c0:08:88:14:d1:47:39:
                    e5:ec:97:9a:7e:a5:db:87:19:09:b6:89:29:70:bf:
                    07:c9:fd:57:f0:e6:07:4a:5b:00:3d:44:54:80:ac:
                    40:a5:7e:66:86:67:cd:27:60:48:89:80:a8:29:4c:
                    f1:b2:1c:80:eb:6c:8c:61:02:a3:f7:e0:d5:1a:04:
                    35:df:a2:90:fb:78:8c:6f:60:af:b5:0b:df:37:fd:
                    eb:24:33:d2:96:dc:01:9e:ed:09:f3:fb:73:25:12:
                    aa:1d:15:38:e3:69:a2:b4:b3:bc:e9:66:6f:e7:8a:
                    28:59:e6:10:29:da:c2:9f:d9:58:6b:79:0c:26:02:
                    28:75:87:41:42:28:d3:10:a5:b1:9b:dc:73:e7:06:
                    a5:d3:ef:fe:f7:03:6d:79:6f:13:20:e3:e1:75:15:
                    48:ed:97:8f:11:03:24:19:24:9e:a4:69:8d:fc:da:
                    f8:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:E3:FD:9F:7F:BF:17:B2:6E:5B:B1:4A:BD:49:C9:48:C4:A3:B2:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/081fbf4c-8605-3e5f-8491-88cc243610ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.114.170.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:83:bb:2a:7e:01:c3:ad:81:a9:74:66:b5:48:25:d2:02:08:
         96:e7:f4:bc:64:37:f4:31:fb:e6:1d:47:61:13:df:18:15:02:
         a4:14:10:a0:b8:72:16:81:62:0d:ee:dd:4d:97:d5:c3:06:d3:
         3f:cd:52:eb:be:d9:6b:c8:62:dc:e0:61:10:dc:b7:c0:88:88:
         80:8a:60:d8:da:6e:79:6b:ad:b1:66:53:db:fd:7d:91:19:27:
         a4:56:fa:f5:62:7b:3e:51:f9:98:23:80:35:cf:9f:4f:80:76:
         c7:33:27:70:12:92:d6:c9:0e:d3:e8:b1:c2:74:45:6a:e3:d4:
         a3:ad:b7:6e:20:d0:4c:d4:f4:d7:82:88:5c:19:a5:3c:58:71:
         35:05:34:a3:01:ce:d4:20:93:6a:e7:2c:53:9d:72:31:89:a4:
         7d:ef:1c:9c:1f:90:33:f8:72:49:68:a5:f4:06:21:75:0e:eb:
         60:7b:c1:89:65:2e:e3:36:2e:86:72:9d:e4:2b:77:fb:a1:52:
         57:7e:ed:ea:22:fa:5e:f3:fc:a7:7e:cf:b1:ff:ba:29:80:93:
         70:97:16:1a:8b:2e:b6:7e:1e:e3:72:07:7c:40:02:be:c0:f3:
         6e:ad:30:12:44:54:01:5c:4b:c6:dd:fe:d0:42:c8:2b:48:c5:
         55:51:b3:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 15:10:13 2024 by rpki-client on console-fra.rpki-client.org