Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/1b9da274-047c-380b-ae12-10e2772a12c6.roa
File:                     1b9da274-047c-380b-ae12-10e2772a12c6.roa (raw, json)
Hash identifier:          rEWlYCvGfhoGLh8zrCEW27luE0fTnqphwxsG0qlzsbc=
Subject key identifier:   8A:38:92:72:40:57:07:E6:DE:D1:A1:F8:B6:60:E9:92:BB:2E:C5:96
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285845B3836D3C4B18FAE727768040
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/1b9da274-047c-380b-ae12-10e2772a12c6.roa
Signing time:             Mon 29 Apr 2024 01:00:25 +0000
ROA not before:           Mon 29 Apr 2024 01:00:25 +0000
ROA not after:            Sun 28 Jul 2024 01:00:25 +0000
asID:                     44477
IP address blocks:        50.114.166.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:b3:83:6d:3c:4b:18:fa:e7:27:76:80:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Apr 29 01:00:25 2024 GMT
            Not After : Jul 28 01:00:25 2024 GMT
        Subject: CN=5ea51ae7-6098-4e9e-a959-a5886f198f03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:d9:db:af:d8:ba:8d:3a:6f:da:e8:a0:28:6b:
                    86:f6:b6:74:19:27:dd:cd:c6:da:c9:54:68:2e:40:
                    a3:75:2d:9d:6b:73:ff:72:1c:2e:cf:de:43:2e:6d:
                    c0:5d:9c:20:d6:83:8a:c7:fb:0b:f8:48:9a:a0:ab:
                    e3:6b:e0:50:ed:ef:60:7f:62:38:ce:46:e5:10:57:
                    03:a2:99:79:4a:41:29:b6:3b:4f:d8:3d:ab:2e:a0:
                    e5:f5:a8:40:4e:40:ad:12:48:c4:8f:91:45:4d:bd:
                    d8:8c:a4:14:11:fe:85:e8:db:76:de:42:89:24:82:
                    9e:68:f4:e2:d6:5d:07:c5:3c:5c:ef:93:55:53:23:
                    cd:78:72:4f:2e:1d:fc:15:13:d4:40:c7:c9:aa:68:
                    2f:58:f3:b0:24:2e:23:6e:fd:4f:67:d5:b6:fd:0c:
                    1c:3c:01:07:91:37:4e:4c:69:a5:f6:90:3c:70:c0:
                    47:0e:e1:ff:88:2b:85:e8:a3:fd:76:26:e5:43:24:
                    35:78:06:23:23:dd:76:ac:c3:ec:29:6d:88:9b:9f:
                    0d:cc:08:6b:4f:84:d3:0d:6e:60:ba:78:95:70:94:
                    a6:3f:98:28:ef:1e:da:40:dc:21:6f:ef:3a:e9:ee:
                    3e:1d:3c:8c:12:7a:b4:57:34:8e:6b:ee:40:64:b9:
                    fe:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:38:92:72:40:57:07:E6:DE:D1:A1:F8:B6:60:E9:92:BB:2E:C5:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/1b9da274-047c-380b-ae12-10e2772a12c6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.114.166.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:20:5d:5f:24:bb:a3:4c:b9:1e:d8:a6:87:70:42:3d:f8:eb:
         90:67:35:05:84:8e:49:2f:f5:01:aa:72:27:85:44:21:0b:b1:
         a8:31:ec:f5:a6:35:34:a6:68:a2:a5:f4:20:38:f2:07:d2:ba:
         df:81:70:6d:f7:d6:67:3a:4b:99:d5:4b:75:08:e1:a3:64:3b:
         3d:f4:ef:5a:3b:1c:4c:1b:ee:16:00:72:27:42:21:ba:10:bf:
         3e:17:69:03:9f:25:60:b4:6f:b6:9e:73:48:24:ab:67:2c:e0:
         7a:07:5b:c2:bb:3f:32:4b:c3:4e:22:3a:11:d9:b7:bf:65:e4:
         d7:5a:4a:b6:aa:c2:a4:f8:c8:14:e1:ff:82:df:d8:06:90:9e:
         8d:b4:18:35:b3:a6:ca:91:31:ed:01:12:43:9e:99:26:44:2d:
         e0:77:82:bd:58:60:d3:55:9d:1c:46:9f:06:69:a8:b1:b9:6c:
         e0:cc:0b:c5:c0:5d:ee:c2:87:48:bd:77:d1:05:cd:9d:c1:fe:
         a0:b4:49:39:2f:64:fb:68:34:60:11:37:b8:0c:62:9b:20:4c:
         93:0b:7d:90:6e:1c:de:e5:02:8b:ec:c6:72:96:b7:79:1f:11:
         14:34:d2:c2:44:35:91:06:a9:33:50:bd:44:b1:53:29:83:57:
         b6:dc:40:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 17:58:52 2024 by rpki-client on console-ams.rpki-client.org