Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/11ebe374-6749-3fc5-902f-135e152ec4bd.roa
File:                     11ebe374-6749-3fc5-902f-135e152ec4bd.roa (raw, json)
Hash identifier:          fhPjmBQ03HltsrebPL6WHmdelx80Ippipr8sUufMuOs=
Subject key identifier:   46:56:CA:17:1B:2B:04:A1:5D:D3:35:D2:4B:FC:48:F5:1A:41:C4:C9
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285847CE6F4EFA63C1443C936FE180
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/11ebe374-6749-3fc5-902f-135e152ec4bd.roa
Signing time:             Fri 08 Nov 2024 02:00:27 +0000
ROA not before:           Fri 08 Nov 2024 02:00:27 +0000
ROA not after:            Thu 06 Feb 2025 02:00:27 +0000
asID:                     393942
IP address blocks:        50.114.43.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ce:6f:4e:fa:63:c1:44:3c:93:6f:e1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Nov  8 02:00:27 2024 GMT
            Not After : Feb  6 02:00:27 2025 GMT
        Subject: CN=673ed26e-6f1a-4700-987b-706bdfcd612c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:c1:bc:ae:da:fd:1c:d7:44:ef:f6:79:7b:b8:
                    ca:80:ad:a2:49:d3:da:0f:d6:65:85:26:32:8b:57:
                    63:1b:c2:04:bc:61:c7:fd:92:4d:62:70:60:15:65:
                    1e:37:02:90:72:c1:df:44:4f:0c:89:84:64:47:14:
                    11:04:c6:2a:33:36:48:45:8d:4a:14:d2:44:7c:7b:
                    54:8e:fe:86:8d:e5:8c:7e:55:85:41:dc:64:e2:a2:
                    9f:2a:b8:3b:7d:e7:42:3b:5d:5a:24:36:ce:6b:4c:
                    38:62:27:b8:bb:c7:d5:48:fd:6b:c6:5d:f4:f3:52:
                    1a:d2:bb:6e:6c:83:a6:ce:fd:bd:a0:09:f0:88:5f:
                    23:d9:ab:3f:23:36:ca:f8:57:84:43:ae:58:15:9d:
                    7e:04:42:17:92:53:b8:e2:a8:a4:da:9f:b7:b0:6d:
                    e3:36:de:cd:25:e6:a2:a4:8f:31:3f:2e:82:4d:70:
                    a3:5c:ad:7d:0a:d8:23:08:ba:9d:88:dc:01:40:5d:
                    e0:67:85:45:0c:af:9b:cd:a9:ac:5a:f2:f8:fa:4c:
                    fd:f1:47:71:b9:93:f3:ff:a0:81:b6:81:7c:09:4e:
                    0b:e3:e2:78:72:c5:35:a6:f9:f5:d7:b2:14:d4:b1:
                    f1:5b:37:b8:84:7e:91:05:21:c4:4b:3f:63:95:eb:
                    77:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:56:CA:17:1B:2B:04:A1:5D:D3:35:D2:4B:FC:48:F5:1A:41:C4:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/11ebe374-6749-3fc5-902f-135e152ec4bd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.114.43.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:94:69:14:35:a7:26:8f:20:72:7d:41:7f:1b:ac:be:4d:ee:
         db:dd:42:42:d7:8f:37:7e:2a:85:fd:1f:27:66:6c:47:69:fc:
         07:9f:bd:64:6e:6b:d4:15:fd:70:9d:8f:29:c9:31:ae:0e:c9:
         ba:fd:87:f8:28:58:36:d7:4c:ef:84:16:22:32:c3:32:90:c5:
         cd:fd:0d:a0:23:d1:d6:d3:9b:25:6a:2b:23:63:99:bb:d0:f0:
         61:e8:ec:bb:c1:48:c9:38:fa:ee:97:8f:ae:78:5e:aa:bb:9d:
         6a:90:a2:32:6c:ff:fd:b4:4d:82:c3:12:09:f8:0d:4d:e6:4b:
         86:00:7e:97:b8:ba:53:2c:fd:a1:94:2f:63:3e:38:ce:21:ee:
         37:df:2c:0c:d5:f2:6a:82:78:09:b0:03:a4:95:67:05:e5:b6:
         01:7c:2d:28:4c:f7:41:ca:ec:17:e0:62:3d:91:92:c7:a9:cd:
         9e:f9:b7:00:2b:26:ab:ff:10:1a:a8:38:2d:70:ba:0d:72:31:
         75:4c:e3:6b:fa:57:16:bf:89:ff:4d:e7:92:e6:fa:6a:39:14:
         21:f9:1a:55:a3:57:f2:18:ee:4c:65:86:95:b3:11:25:e7:dc:
         52:af:b5:01:bf:1a:89:54:78:54:dd:ee:ea:91:4f:39:b3:4a:
         33:00:02:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:37:37 2024 by rpki-client on console-ams.rpki-client.org