Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/0ea1f046-f58b-3805-8865-2e4be4abfa03.roa
File:                     0ea1f046-f58b-3805-8865-2e4be4abfa03.roa (raw, json)
Hash identifier:          pPYgfe6pD32y1CnI761igaUpBHQyVw8guUraTU0gwsY=
Subject key identifier:   05:2D:6E:C6:A8:84:CD:19:35:33:D0:57:93:78:47:AB:A6:63:F3:00
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285848C150E667AA1A236D68CF36E0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/0ea1f046-f58b-3805-8865-2e4be4abfa03.roa
Signing time:             Mon 03 Feb 2025 02:00:39 +0000
ROA not before:           Mon 03 Feb 2025 02:00:39 +0000
ROA not after:            Sun 04 May 2025 01:00:39 +0000
asID:                     62240
IP address blocks:        50.114.46.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c1:50:e6:67:aa:1a:23:6d:68:cf:36:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Feb  3 02:00:39 2025 GMT
            Not After : May  4 01:00:39 2025 GMT
        Subject: CN=5648096b-ce77-4c96-9f2d-be9fe7d51b47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:b1:81:ee:1c:aa:15:e6:50:5f:56:58:78:e6:
                    11:16:ea:3a:33:2c:e7:d6:21:51:12:b5:2d:46:c1:
                    53:67:15:a3:91:b9:b6:21:f7:43:3d:6c:40:e5:ad:
                    ab:e4:1e:4f:aa:c5:49:38:10:41:08:db:fa:44:6d:
                    10:5f:a2:79:8c:7b:a6:53:15:cd:0d:4b:ca:25:82:
                    6e:6d:74:e1:9a:01:a0:88:a0:22:f9:a8:aa:c7:78:
                    61:14:6e:25:3d:47:f2:e3:28:b8:b0:a3:70:a0:60:
                    28:ac:1c:f5:cd:0a:9d:db:74:f0:63:4f:86:a2:90:
                    0a:eb:5e:b8:0c:28:44:3c:59:ad:a9:fb:d6:16:35:
                    3b:6d:b9:56:d5:f1:a5:4d:b2:ef:3e:4f:b2:d3:b6:
                    2d:42:c0:ed:e3:cc:14:49:3d:13:92:36:a3:1f:f7:
                    22:35:bd:4e:ed:96:1d:b2:3c:e6:9e:f9:d2:fa:06:
                    d3:ef:0c:82:8c:e4:73:66:ac:a1:03:67:92:70:95:
                    4a:fb:44:82:4b:fb:b5:6b:bc:fe:bd:31:12:51:dd:
                    c0:9f:ed:90:f7:0c:7f:43:09:7f:2d:19:ff:25:33:
                    4a:90:97:32:38:4d:c7:7c:4c:30:50:04:1f:99:0d:
                    51:57:f1:55:84:02:1f:a7:1d:63:4e:20:bf:ee:b1:
                    31:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:2D:6E:C6:A8:84:CD:19:35:33:D0:57:93:78:47:AB:A6:63:F3:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/0ea1f046-f58b-3805-8865-2e4be4abfa03.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.114.46.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:af:bb:d0:0e:29:a5:0a:b6:78:e1:c8:2e:24:e4:49:72:f2:
         fa:fc:ee:b3:55:c1:4a:79:10:24:ef:6e:1a:e3:43:a6:6a:03:
         d1:d3:2f:af:39:36:5c:a6:4f:55:86:6c:c4:62:3f:43:fe:45:
         84:fd:89:bf:db:d1:ed:4a:fe:0e:0d:62:a5:12:9f:56:44:ec:
         8d:d4:42:ca:89:96:b9:9c:31:d6:ea:41:d0:76:a9:22:70:4f:
         85:f2:74:38:2f:6c:d6:3e:d1:f4:6a:1a:8c:59:ab:40:e2:a4:
         96:db:d7:97:38:83:ef:e1:85:eb:0a:5b:ce:a6:f8:a0:0e:98:
         af:5f:1a:d8:ad:f2:f5:fa:d3:d9:af:e2:0b:cc:32:e8:82:5f:
         64:48:28:fb:a3:d1:0c:83:58:e3:c7:fc:b0:02:ef:10:91:d7:
         26:c2:99:f9:2b:6d:92:2b:f5:23:4f:1b:56:7a:d8:f0:a2:3e:
         01:16:3d:d9:1a:92:49:48:fa:16:17:d8:e6:7e:2f:d8:ed:4a:
         62:1e:3c:44:9a:c1:35:0e:8d:eb:7e:8f:e3:eb:a4:ae:a9:58:
         0e:75:95:13:57:4b:cc:58:9d:3b:3d:0f:dc:c4:03:4c:15:94:
         47:36:5a:18:71:df:74:e9:60:eb:46:43:79:31:84:3a:c1:69:
         7d:a8:34:32
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjBUOZnqhojbWjPNuAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI1MDIwMzAyMDAzOVoXDTI1MDUwNDAxMDAzOVowLzEtMCsGA1UEAxMk
NTY0ODA5NmItY2U3Ny00Yzk2LTlmMmQtYmU5ZmU3ZDUxYjQ3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAobGB7hyqFeZQX1ZYeOYRFuo6Myzn1iFRErUt
RsFTZxWjkbm2IfdDPWxA5a2r5B5PqsVJOBBBCNv6RG0QX6J5jHumUxXNDUvKJYJu
bXThmgGgiKAi+aiqx3hhFG4lPUfy4yi4sKNwoGAorBz1zQqd23TwY0+GopAK6164
DChEPFmtqfvWFjU7bblW1fGlTbLvPk+y07YtQsDt48wUST0TkjajH/ciNb1O7ZYd
sjzmnvnS+gbT7wyCjORzZqyhA2eScJVK+0SCS/u1a7z+vTESUd3An+2Q9wx/Qwl/
LRn/JTNKkJcyOE3HfEwwUAQfmQ1RV/FVhAIfpx1jTiC/7rEx+wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAUtbsaohM0ZNTPQV5N4R6umY/MAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvMGVhMWYwNDYtZjU4Yi0z
ODA1LTg4NjUtMmU0YmU0YWJmYTAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAMnIuMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC2vu9AOKaUKtnjhyC4k5Ely8vr87rNVwUp5ECTvbhrjQ6ZqA9HTL685
NlymT1WGbMRiP0P+RYT9ib/b0e1K/g4NYqUSn1ZE7I3UQsqJlrmcMdbqQdB2qSJw
T4XydDgvbNY+0fRqGoxZq0DipJbb15c4g+/hhesKW86m+KAOmK9fGtit8vX609mv
4gvMMuiCX2RIKPuj0QyDWOPH/LAC7xCR1ybCmfkrbZIr9SNPG1Z62PCiPgEWPdka
kklI+hYX2OZ+L9jtSmIePESawTUOjet+j+PrpK6pWA51lRNXS8xYnTs9D9zEA0wV
lEc2Whhx33TpYOtGQ3kxhDrBaX2oNDI=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:51:23 2025 by rpki-client