Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/11aae5be-54c8-3eef-a062-f19a191e9c74.roa
File:                     11aae5be-54c8-3eef-a062-f19a191e9c74.roa (raw, json)
Hash identifier:          xkqcinBSWHqUivKguDrmFc99jMMHYxwZPRy0vd2aMLE=
Subject key identifier:   94:08:B4:E1:47:8E:35:C7:CD:3F:9D:31:53:B5:9A:16:D6:BA:BF:53
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285847FD2937842F620B8F7568BC80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/11aae5be-54c8-3eef-a062-f19a191e9c74.roa
Signing time:             Sun 24 Nov 2024 19:42:31 +0000
ROA not before:           Sun 24 Nov 2024 19:42:31 +0000
ROA not after:            Sat 22 Feb 2025 19:42:31 +0000
asID:                     11798
IP address blocks:        50.114.98.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:fd:29:37:84:2f:62:0b:8f:75:68:bc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Nov 24 19:42:31 2024 GMT
            Not After : Feb 22 19:42:31 2025 GMT
        Subject: CN=b8a457e9-d16d-453e-86dc-315773ddf578
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:ca:30:cd:83:b3:12:46:fc:dd:b4:b9:aa:88:
                    b5:40:95:e9:dd:e6:3d:22:7a:ad:4c:61:54:3e:34:
                    03:40:4b:13:b1:14:0e:1b:f6:a7:22:e7:34:ac:70:
                    2c:0c:e4:55:1b:fe:52:fe:0c:8b:54:44:ff:05:8f:
                    e9:cb:cc:99:8e:84:54:ea:db:38:ce:d1:a2:9c:49:
                    2c:69:4f:ab:08:c0:92:80:09:92:b9:53:3e:2c:52:
                    b4:68:e0:3e:c5:7c:bc:ad:04:3b:c2:21:7b:9a:48:
                    28:2b:11:f0:b4:9f:33:f9:25:41:9a:df:de:32:2b:
                    1f:d9:cd:04:a7:b6:3d:6f:d2:11:1c:c8:b2:09:70:
                    8d:89:78:f7:79:44:7c:70:f0:dd:31:22:37:aa:af:
                    1e:af:d7:a1:c8:f5:4f:d2:b9:83:f7:63:6e:41:fd:
                    8d:ba:9a:b5:31:07:0b:30:a8:47:2d:08:34:83:c7:
                    a7:a8:ba:8e:bb:d5:70:71:c5:57:82:37:23:70:d4:
                    91:20:f5:c7:75:9d:46:ea:af:30:8c:dc:f9:50:bf:
                    35:e6:0f:a7:9a:6e:45:c4:8a:47:a2:36:51:6d:c5:
                    3b:cb:88:c8:0d:cd:a0:44:cd:c9:02:af:ce:36:6c:
                    3f:f8:02:fb:44:a0:c4:da:0e:90:55:99:de:ea:fc:
                    b6:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:08:B4:E1:47:8E:35:C7:CD:3F:9D:31:53:B5:9A:16:D6:BA:BF:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/11aae5be-54c8-3eef-a062-f19a191e9c74.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.114.98.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:19:f5:77:01:dc:dd:3e:e1:38:97:70:67:1e:52:98:03:e6:
         69:81:64:e4:5f:ab:89:65:48:78:7f:e0:0e:cf:15:07:3f:39:
         4f:ec:f1:b0:c5:10:bc:04:98:df:ae:be:40:4b:ca:99:48:2e:
         00:b9:94:02:2a:8b:40:b1:ba:7c:a6:a7:5c:00:18:4c:aa:36:
         0f:35:f2:16:3f:70:fd:62:9e:e8:f2:d3:e6:8b:76:d1:c5:04:
         20:b7:6e:d9:6c:a9:ba:5d:88:1d:c7:21:f0:45:ca:79:4a:e7:
         d6:eb:0a:95:0b:26:48:fa:2c:67:96:8b:14:d4:86:af:b0:5c:
         1f:0b:2e:06:b8:c7:80:6b:15:f6:52:40:bc:50:8f:52:7e:9c:
         70:04:27:24:92:ab:cd:37:aa:94:2d:e7:a9:fe:61:47:e7:3a:
         a0:88:30:04:1b:f2:e7:fb:01:db:1c:48:86:20:42:0a:98:2a:
         1e:da:c9:15:11:1a:ee:2f:e7:7d:d9:66:a2:f1:85:15:9a:1d:
         29:5a:6f:5c:4f:f0:69:a7:35:7c:cd:19:51:e7:53:5c:af:7c:
         a0:14:13:37:32:34:15:8a:dc:81:ec:1a:96:a7:d2:88:a8:46:
         9d:02:bb:a5:b0:52:8b:fd:70:78:74:bc:83:9d:83:16:29:75:
         0f:2f:f8:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 13:30:08 2024 by rpki-client on console-fra.rpki-client.org