Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/10392a0f-584d-3fea-b12e-12c87a4279cc.roa
File:                     10392a0f-584d-3fea-b12e-12c87a4279cc.roa (raw, json)
Hash identifier:          4s05yRmKQDw0Nx0ifXs2g3CdtWGFIGIcwBLufMn3F/w=
Subject key identifier:   4D:24:00:D3:23:20:B6:DA:9D:13:87:7B:65:E7:80:55:4C:1D:20:BF
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285847FD29364D9AF69A678D749580
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/10392a0f-584d-3fea-b12e-12c87a4279cc.roa
Signing time:             Sun 24 Nov 2024 19:42:30 +0000
ROA not before:           Sun 24 Nov 2024 19:42:30 +0000
ROA not after:            Sat 22 Feb 2025 19:42:30 +0000
asID:                     11798
IP address blocks:        50.114.30.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:fd:29:36:4d:9a:f6:9a:67:8d:74:95:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Nov 24 19:42:30 2024 GMT
            Not After : Feb 22 19:42:30 2025 GMT
        Subject: CN=2de7630d-e193-4198-9d08-63350a9c22eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:18:89:6f:bc:fd:0c:ad:73:c2:b1:80:8d:66:
                    f5:ce:51:d5:16:6c:c2:a9:15:ea:ca:8d:a5:ca:b6:
                    f2:1b:48:bf:d1:ee:bc:a8:41:60:e9:a2:dd:ae:94:
                    6e:64:a3:85:73:7c:1d:48:b6:0c:8e:5f:85:d5:98:
                    7d:25:f0:ce:06:4f:d0:82:1b:93:bb:33:0d:84:a8:
                    d3:8a:d7:b0:2e:40:7d:b8:72:1f:85:58:0b:89:74:
                    af:2c:e7:d8:bc:a6:31:36:7e:92:78:ab:49:c0:84:
                    9c:5f:7c:f0:0b:13:15:9a:ce:18:a1:fb:c8:11:12:
                    d3:19:4f:47:a5:fb:78:cf:e9:92:49:b9:65:b9:7e:
                    ad:d5:0f:b2:cb:ff:83:ff:9f:23:83:54:28:40:cd:
                    af:de:83:30:62:a0:fe:8e:0e:76:26:35:22:cc:bf:
                    f9:d6:4a:34:f9:c3:7c:f1:f8:e6:9f:36:48:81:a3:
                    54:8d:f2:5c:cc:05:e1:8a:68:fd:2b:49:3a:79:5a:
                    0f:e4:7c:25:e6:55:49:9d:85:94:65:df:ad:80:69:
                    ed:53:37:9d:70:34:f5:a9:f7:2d:c7:8d:30:50:76:
                    01:5e:a4:1c:6d:fe:1c:2d:83:4b:c0:77:cd:7b:51:
                    a8:59:f1:4e:a7:cd:89:81:b4:c8:c1:82:dd:91:fb:
                    7e:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:24:00:D3:23:20:B6:DA:9D:13:87:7B:65:E7:80:55:4C:1D:20:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/10392a0f-584d-3fea-b12e-12c87a4279cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.114.30.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:b1:48:24:85:47:e6:a1:88:3b:67:eb:2f:a5:97:c1:92:13:
         5d:66:e7:3a:fc:35:be:e4:03:de:eb:96:6e:1d:22:eb:05:78:
         18:ad:15:2b:fb:8d:1d:86:c7:60:04:d0:35:85:c8:5c:3b:25:
         f7:2d:48:41:80:96:8c:96:d1:85:61:90:43:96:cb:77:d4:b2:
         05:2c:37:21:e4:08:ce:09:0d:1e:58:54:46:fd:29:71:dd:f2:
         a3:bb:90:b0:ee:f4:30:b5:ef:f8:da:5c:08:32:46:62:a2:18:
         fe:8c:79:cc:6c:3a:27:e3:bd:17:44:36:29:ea:df:90:6c:73:
         d8:af:67:e8:c0:3d:77:3b:88:ab:b6:a8:38:ba:93:6d:01:c6:
         cf:5a:9b:60:f6:bf:d6:61:bb:d8:0a:37:1d:4a:fc:5d:58:0d:
         cb:70:61:42:db:2b:7b:92:a5:38:31:09:ad:a5:2c:0b:1b:01:
         fb:2f:c9:e6:f3:07:92:06:cd:28:c1:94:c3:d0:41:09:aa:f9:
         10:62:d7:a4:b4:1e:8c:15:00:b5:2e:ce:9b:2f:b2:d8:35:17:
         1b:2b:35:2e:d5:11:37:4e:35:a8:de:b1:a0:e7:22:4c:ce:c2:
         b6:19:ec:34:be:54:2e:c0:6e:2e:87:42:39:16:ba:c4:56:08:
         14:af:8d:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 13:30:07 2024 by rpki-client on console-fra.rpki-client.org