Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/13849bfb-4110-3f69-b698-42afc94a2962.roa
File:                     13849bfb-4110-3f69-b698-42afc94a2962.roa (raw, json)
Hash identifier:          UvBYX+t7IxCUpdIY7wxzhshCeHZzHccpNCbXJFCCkAU=
Subject key identifier:   53:F9:DC:34:4D:E1:78:E9:F5:88:3A:FB:A0:AC:65:BD:B8:66:D1:C7
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584762D662565A83D557ADEF2180
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/13849bfb-4110-3f69-b698-42afc94a2962.roa
Signing time:             Mon 30 Sep 2024 13:00:42 +0000
ROA not before:           Mon 30 Sep 2024 13:00:42 +0000
ROA not after:            Sun 29 Dec 2024 14:00:42 +0000
asID:                     211373
IP address blocks:        50.114.51.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:62:d6:62:56:5a:83:d5:57:ad:ef:21:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Sep 30 13:00:42 2024 GMT
            Not After : Dec 29 14:00:42 2024 GMT
        Subject: CN=af50fcc2-76cf-4476-b70e-760d84bf8692
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:43:c7:7d:30:e4:4c:9e:f3:bf:fe:d4:d6:00:
                    ea:9d:79:6b:bb:5a:17:b0:fc:d0:d7:99:2a:15:70:
                    83:f1:0a:9b:fe:f5:af:5e:87:6f:f1:b6:bd:1d:18:
                    ac:6d:85:f1:60:82:48:1e:7b:59:66:6c:70:67:0a:
                    55:d5:fa:e5:fa:47:00:97:6f:ff:4f:e4:ef:b7:52:
                    00:7d:bd:6f:fe:bd:61:4c:a7:cd:01:8b:08:57:77:
                    af:01:5c:14:e9:d2:03:14:96:12:a3:21:81:ee:02:
                    c7:67:f8:d7:57:97:69:3f:4b:b7:91:9a:0a:df:03:
                    93:ad:07:ed:70:81:04:d2:99:fc:2e:16:f2:e1:41:
                    c9:09:26:68:c2:7a:75:4f:dc:2e:89:36:7d:e7:f1:
                    83:98:b0:83:36:cc:c9:c6:5c:e8:1a:44:e8:d4:32:
                    81:0a:30:36:5a:ce:77:75:9c:71:49:4d:3c:29:c2:
                    08:b4:3b:2d:90:c7:38:9c:aa:5e:8c:47:6e:eb:fd:
                    4e:cd:c9:75:9b:46:c7:54:cf:32:26:93:cf:a7:57:
                    e5:3d:48:84:67:40:bd:d6:fb:d9:f7:93:ee:58:8e:
                    7b:18:92:4f:18:1d:e9:78:f5:d5:d8:fa:ba:f5:6a:
                    af:38:4a:a0:ea:9a:fe:f9:cc:8d:bf:d8:0e:ea:52:
                    1e:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:F9:DC:34:4D:E1:78:E9:F5:88:3A:FB:A0:AC:65:BD:B8:66:D1:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/13849bfb-4110-3f69-b698-42afc94a2962.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.114.51.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:a4:ae:4e:10:e3:3f:61:de:d1:8a:bc:6f:51:66:a8:d2:79:
         34:33:b0:61:fe:db:a6:d8:c6:54:70:47:9e:ee:6d:bf:a7:79:
         f3:dd:35:30:c8:5a:7b:d8:e3:d3:f4:ae:bf:be:f4:fc:fe:d2:
         fb:e4:20:ff:41:bd:0f:c9:57:4f:65:22:90:76:77:66:a3:fe:
         8a:33:67:86:94:f1:04:a7:cd:2a:a6:ac:5e:72:fc:9e:54:38:
         14:04:94:98:e9:75:65:fa:cb:7e:a0:80:b3:99:a8:0b:cb:7d:
         6d:30:87:b2:53:62:6c:b9:1c:ab:c0:53:a5:ec:19:56:a2:73:
         c2:ba:8c:10:12:3a:73:5a:27:9a:5b:99:90:05:d9:8b:6a:f2:
         b5:d5:82:3d:89:fe:61:55:3c:70:dc:48:96:43:88:4e:59:fc:
         52:76:a8:fd:d0:ea:c8:6f:37:39:ec:9c:c4:b5:24:2f:3e:77:
         c3:72:66:35:05:1d:a8:1d:f0:0d:78:84:3b:ab:96:d6:1b:e4:
         71:72:7a:89:48:98:d8:56:9e:16:d0:a4:81:60:bc:c8:27:d8:
         a9:b7:88:0b:05:da:f7:32:d9:28:12:fb:51:a1:a0:bf:01:30:
         1b:6c:23:b8:f5:c7:ec:3f:78:26:40:72:56:a3:22:46:53:f1:
         de:25:f8:18
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdi1mJWWoPVV63vIYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI0MDkzMDEzMDA0MloXDTI0MTIyOTE0MDA0MlowLzEtMCsGA1UEAxMk
YWY1MGZjYzItNzZjZi00NDc2LWI3MGUtNzYwZDg0YmY4NjkyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm0PHfTDkTJ7zv/7U1gDqnXlru1oXsPzQ15kq
FXCD8Qqb/vWvXodv8ba9HRisbYXxYIJIHntZZmxwZwpV1frl+kcAl2//T+Tvt1IA
fb1v/r1hTKfNAYsIV3evAVwU6dIDFJYSoyGB7gLHZ/jXV5dpP0u3kZoK3wOTrQft
cIEE0pn8Lhby4UHJCSZownp1T9wuiTZ95/GDmLCDNszJxlzoGkTo1DKBCjA2Ws53
dZxxSU08KcIItDstkMc4nKpejEdu6/1Ozcl1m0bHVM8yJpPPp1flPUiEZ0C91vvZ
95PuWI57GJJPGB3pePXV2Pq69WqvOEqg6pr++cyNv9gO6lIeUwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFP53DRN4Xjp9Yg6+6CsZb24ZtHHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvMTM4NDliZmItNDExMC0z
ZjY5LWI2OTgtNDJhZmM5NGEyOTYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAMnIzMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAqkrk4Q4z9h3tGKvG9RZqjSeTQzsGH+26bYxlRwR57ubb+nefPdNTDI
WnvY49P0rr++9Pz+0vvkIP9BvQ/JV09lIpB2d2aj/oozZ4aU8QSnzSqmrF5y/J5U
OBQElJjpdWX6y36ggLOZqAvLfW0wh7JTYmy5HKvAU6XsGVaic8K6jBASOnNaJ5pb
mZAF2Ytq8rXVgj2J/mFVPHDcSJZDiE5Z/FJ2qP3Q6shvNznsnMS1JC8+d8NyZjUF
Hagd8A14hDurltYb5HFyeolImNhWnhbQpIFgvMgn2Km3iAsF2vcy2SgS+1GhoL8B
MBtsI7j1x+w/eCZAclajIkZT8d4l+Bg=
-----END CERTIFICATE-----
Generated at Fri Nov 22 05:50:15 2024 by rpki-client on console-fra.rpki-client.org