Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2bf834c6-36fe-3745-8e8a-7663bd999f80.roa
File:                     2bf834c6-36fe-3745-8e8a-7663bd999f80.roa (raw, json)
Hash identifier:          NHN00gs5788qieCHmZKyp5GioIUFwT2YkIjOfsS5hhE=
Subject key identifier:   A4:86:A5:CA:CC:03:52:81:5C:0A:9B:84:9E:62:55:CA:82:4E:2D:E5
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F432858452189BA57C71864CAFCCBA940
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2bf834c6-36fe-3745-8e8a-7663bd999f80.roa
Signing time:             Thu 07 Mar 2024 18:05:15 +0000
ROA not before:           Thu 07 Mar 2024 18:05:15 +0000
ROA not after:            Wed 05 Jun 2024 17:05:15 +0000
asID:                     201670
IP address blocks:        50.114.34.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:21:89:ba:57:c7:18:64:ca:fc:cb:a9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Mar  7 18:05:15 2024 GMT
            Not After : Jun  5 17:05:15 2024 GMT
        Subject: CN=a0f13d4d-d0f2-47f4-9160-7a9ccc0fec7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:e7:8d:fe:d9:1e:10:71:01:59:53:79:49:9d:
                    8b:2c:18:56:57:53:75:f8:aa:b3:be:f9:d9:99:43:
                    9d:8e:11:10:75:0c:a8:71:fb:8b:69:91:b1:1d:5c:
                    4f:9a:7d:82:34:49:95:9d:41:c9:c7:02:13:5e:fa:
                    0b:4a:56:bf:46:01:9e:e7:b0:68:64:27:79:6d:46:
                    23:40:43:fb:e8:02:b4:41:b1:98:f1:ea:a8:bb:cb:
                    f6:c1:2f:f5:8c:57:a6:49:7f:a0:ab:88:90:32:3e:
                    5b:a1:4f:84:11:95:3b:0a:9e:ef:54:66:a4:b8:38:
                    c3:ad:40:32:75:79:7f:10:8d:b3:9d:c7:c5:9d:a9:
                    66:9d:9a:52:6c:b7:de:8f:50:94:c3:f6:4e:4b:30:
                    7a:60:10:10:df:31:76:79:78:8a:03:cc:59:58:57:
                    2e:10:1a:5b:88:71:9e:c9:34:28:09:03:bc:59:b8:
                    a9:da:96:a6:62:d0:ed:66:19:d3:0c:d8:ec:73:4d:
                    e0:bf:a9:78:9b:6b:f5:d6:61:8c:5b:c4:e5:4f:0f:
                    22:61:50:1a:76:89:22:6f:b0:5c:82:44:7e:78:8f:
                    21:9c:ce:d7:7c:3a:47:6f:58:e9:c7:6c:47:28:66:
                    15:d1:c5:a1:a9:49:32:a0:c4:46:c7:62:06:fe:85:
                    1a:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:86:A5:CA:CC:03:52:81:5C:0A:9B:84:9E:62:55:CA:82:4E:2D:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2bf834c6-36fe-3745-8e8a-7663bd999f80.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.114.34.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:21:0b:5e:6d:7e:6b:e2:e1:8c:53:0d:ca:10:3f:8c:d3:76:
         2f:a5:cf:32:c4:d5:49:ad:df:f4:15:5b:98:12:f3:88:d0:69:
         35:b1:65:7e:64:1f:20:02:40:17:e7:c6:e4:5a:33:49:86:1e:
         08:dd:d2:3a:a5:bb:7f:47:f8:e8:77:b6:3e:b6:2d:3b:64:1f:
         b5:57:5f:1f:3e:11:02:60:ee:a0:35:22:97:31:79:55:8c:08:
         40:85:68:4e:78:84:df:86:9e:80:29:93:c1:30:91:46:c7:03:
         1f:67:48:27:3d:9b:ce:ce:99:ca:27:cc:1b:04:20:72:95:54:
         18:95:25:51:ae:4a:98:ea:62:38:0a:d1:c1:d7:4c:c1:b2:b1:
         95:40:8a:1d:ff:a5:c3:4e:da:24:4f:cb:2b:a6:cc:4f:c9:a4:
         2f:25:22:65:a6:33:43:fd:47:4e:35:6a:fb:79:76:da:22:19:
         78:e8:b1:d5:f6:62:e6:27:1f:44:01:ec:6a:4c:d6:b7:de:91:
         90:d3:67:af:73:73:38:fd:ca:3d:ae:0e:4e:67:d4:29:61:0e:
         bb:90:c5:ca:67:18:f6:33:e4:fa:b1:8c:3b:fd:00:63:57:91:
         a8:46:28:46:d9:27:f5:18:cc:f2:1f:bc:0f:b4:e3:dd:a2:d9:
         28:9c:e3:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 17:56:18 2024 by rpki-client on console-fra.rpki-client.org