Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/0a8f97a0-792c-337e-98ee-d3667c34fb87.roa
File:                     0a8f97a0-792c-337e-98ee-d3667c34fb87.roa (raw, json)
Hash identifier:          Z6wU57JZxmatF6TRxyjSDAA8jPVDRWvfJwlunCJAZOI=
Subject key identifier:   FA:26:BB:2A:DE:27:25:BB:B3:30:9C:D8:CC:B9:4E:DE:57:DF:C0:CD
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285844F5CAADAE3587B1293DF80D20
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/0a8f97a0-792c-337e-98ee-d3667c34fb87.roa
Signing time:             Wed 21 Feb 2024 02:00:25 +0000
ROA not before:           Wed 21 Feb 2024 02:00:25 +0000
ROA not after:            Tue 21 May 2024 01:00:25 +0000
asID:                     4213
IP address blocks:        50.114.208.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:f5:ca:ad:ae:35:87:b1:29:3d:f8:0d:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Feb 21 02:00:25 2024 GMT
            Not After : May 21 01:00:25 2024 GMT
        Subject: CN=3e155585-546d-459c-aa1a-3c85319048af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:80:5a:e8:03:c4:8b:8f:65:70:38:ee:aa:34:
                    c4:d9:07:c7:17:28:ef:75:e4:4d:2f:4d:5e:4f:a7:
                    4d:ac:75:73:c4:68:b1:31:85:30:a9:34:83:24:6e:
                    f5:e2:30:73:18:de:a7:fc:2b:7f:8f:b4:6a:34:fd:
                    57:5a:95:77:f4:2b:91:1f:4e:b3:54:7c:12:57:da:
                    96:7c:7b:c7:52:0e:15:27:05:2f:aa:09:19:73:8d:
                    c4:ff:fd:b2:e8:09:28:ac:ab:9c:52:a3:77:4c:cc:
                    43:e3:eb:0a:74:72:b0:40:7b:27:f1:43:f8:8a:e1:
                    c5:65:92:e4:4e:3c:98:52:08:56:72:1b:95:fd:95:
                    52:4a:f9:36:ea:26:fa:05:a5:8d:af:4d:d4:bb:6b:
                    52:33:91:92:e3:87:53:d8:c5:44:96:78:4f:0e:5f:
                    f4:13:5f:ea:e0:95:f5:b6:c1:9b:3a:6d:b6:d9:ac:
                    7f:55:e2:0f:bc:43:0a:f9:b0:10:f1:b5:12:8e:96:
                    cb:e9:d5:a5:0a:44:ff:3c:40:5d:f8:f9:8c:7a:d0:
                    2d:69:86:b7:3a:25:35:98:b1:53:74:54:f4:f5:91:
                    54:50:54:98:45:ac:5a:cf:78:47:7c:76:f0:29:dd:
                    13:31:c2:56:b9:fc:70:93:85:50:06:aa:78:24:36:
                    3b:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:26:BB:2A:DE:27:25:BB:B3:30:9C:D8:CC:B9:4E:DE:57:DF:C0:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/0a8f97a0-792c-337e-98ee-d3667c34fb87.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.114.208.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:a3:d1:43:94:82:ce:59:40:31:53:7e:fc:dc:8d:1e:2a:86:
         50:de:1d:69:70:73:99:56:71:9f:d1:d2:96:d2:ef:dc:bb:06:
         0c:d1:a3:4a:71:28:4e:2e:7b:4a:14:8a:a1:fa:71:b1:b5:2f:
         bd:79:11:9a:df:0e:ec:45:82:09:35:4c:7c:dd:c4:09:36:98:
         75:d6:25:46:c8:c9:8a:5a:7f:d3:13:c6:4a:ee:6e:1a:d7:14:
         f2:b5:94:06:2a:a4:67:cc:7d:bd:db:1c:01:2d:0e:28:6e:8f:
         f9:f1:3a:65:26:ae:6b:48:ae:f7:f8:77:55:f5:02:81:78:67:
         95:c7:43:2c:a7:5d:d5:29:7f:39:11:bb:8a:f0:2d:c7:8a:12:
         f9:45:85:7a:8e:1a:9b:5a:dd:4e:e9:e9:ec:aa:b6:1c:71:a6:
         55:98:90:6a:c4:48:fc:53:07:5e:e6:58:ae:46:32:cc:78:6a:
         20:78:88:c1:5d:bb:ac:d4:92:cf:bf:4d:eb:33:bb:8b:e9:6d:
         de:4c:4c:29:c4:43:bb:fa:17:4c:6b:5b:80:b2:3e:29:da:01:
         d6:c1:ff:2a:16:e2:79:1f:69:ec:07:ed:cf:26:b8:f6:9f:05:
         45:03:4d:4a:65:67:52:19:38:8f:07:a5:cd:23:9c:9f:f0:94:
         e9:d9:67:ef
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWET1yq2uNYexKT34DSAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI0MDIyMTAyMDAyNVoXDTI0MDUyMTAxMDAyNVowLzEtMCsGA1UEAxMk
M2UxNTU1ODUtNTQ2ZC00NTljLWFhMWEtM2M4NTMxOTA0OGFmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjIBa6APEi49lcDjuqjTE2QfHFyjvdeRNL01e
T6dNrHVzxGixMYUwqTSDJG714jBzGN6n/Ct/j7RqNP1XWpV39CuRH06zVHwSV9qW
fHvHUg4VJwUvqgkZc43E//2y6AkorKucUqN3TMxD4+sKdHKwQHsn8UP4iuHFZZLk
TjyYUghWchuV/ZVSSvk26ib6BaWNr03Uu2tSM5GS44dT2MVElnhPDl/0E1/q4JX1
tsGbOm222ax/VeIPvEMK+bAQ8bUSjpbL6dWlCkT/PEBd+PmMetAtaYa3OiU1mLFT
dFT09ZFUUFSYRaxaz3hHfHbwKd0TMcJWufxwk4VQBqp4JDY70wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPomuyreJyW7szCc2My5Tt5X38DNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvMGE4Zjk3YTAtNzkyYy0z
MzdlLTk4ZWUtZDM2NjdjMzRmYjg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAMnLQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEyj0UOUgs5ZQDFTfvzcjR4qhlDeHWlwc5lWcZ/R0pbS79y7BgzRo0px
KE4ue0oUiqH6cbG1L715EZrfDuxFggk1THzdxAk2mHXWJUbIyYpaf9MTxkrubhrX
FPK1lAYqpGfMfb3bHAEtDihuj/nxOmUmrmtIrvf4d1X1AoF4Z5XHQyynXdUpfzkR
u4rwLceKEvlFhXqOGpta3U7p6eyqthxxplWYkGrESPxTB17mWK5GMsx4aiB4iMFd
u6zUks+/Teszu4vpbd5MTCnEQ7v6F0xrW4CyPinaAdbB/yoW4nkfaewH7c8muPaf
BUUDTUplZ1IZOI8Hpc0jnJ/wlOnZZ+8=
-----END CERTIFICATE-----
Generated at Fri May 3 21:45:31 2024 by rpki-client on console-fra.rpki-client.org