Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2e3d2949-a32f-3f8d-bd8f-2369d0399017.roa
File:                     2e3d2949-a32f-3f8d-bd8f-2369d0399017.roa (raw, json)
Hash identifier:          Eyeeliec1lvskvOymA6LjFVRRir0nKAV3oIvmcXdqOw=
Subject key identifier:   C0:11:17:15:32:24:96:52:32:E8:DD:49:00:2D:A4:DB:50:29:CB:E8
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285847CA3F85124B806701EE06D080
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2e3d2949-a32f-3f8d-bd8f-2369d0399017.roa
Signing time:             Wed 06 Nov 2024 14:00:41 +0000
ROA not before:           Wed 06 Nov 2024 14:00:41 +0000
ROA not after:            Tue 04 Feb 2025 14:00:41 +0000
asID:                     21859
IP address blocks:        50.114.249.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ca:3f:85:12:4b:80:67:01:ee:06:d0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Nov  6 14:00:41 2024 GMT
            Not After : Feb  4 14:00:41 2025 GMT
        Subject: CN=2277fbc3-cdeb-4c31-b52f-9638976b5d66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:89:dc:d8:dd:70:4c:d0:f4:5e:41:2e:46:f9:
                    8d:9b:cf:8b:37:f9:fe:1d:4e:4c:75:50:fb:92:f8:
                    d5:b2:5a:71:84:ba:64:41:a4:f0:a3:2b:70:45:7a:
                    e8:ff:22:0a:41:10:c1:70:07:5e:08:5f:a9:78:e6:
                    c1:8e:4b:2a:97:ce:b3:8b:f4:35:4f:ec:d5:ec:3a:
                    b4:99:8a:74:54:21:12:ca:22:fd:8f:9b:65:18:c3:
                    66:a8:d2:18:cb:d1:d9:b7:f6:97:a3:87:0d:ce:5d:
                    75:18:98:15:a3:77:b2:ec:ae:77:0e:a8:31:4b:1b:
                    cd:62:a1:ea:f9:da:27:9a:8c:c1:f0:f6:e4:d9:7b:
                    fe:8e:ba:78:a1:d9:d8:a0:92:3f:bd:bb:2c:2e:91:
                    80:b6:1c:5e:12:e2:99:7f:33:31:3d:3c:eb:7f:c0:
                    71:d5:ec:88:0c:9d:93:a8:5d:be:76:17:7d:87:7f:
                    ce:12:98:00:b4:8c:77:1e:3f:3b:fd:c4:d5:6a:e7:
                    bb:d9:9a:8f:9a:0b:06:90:86:18:33:e3:b7:1c:62:
                    c9:3e:a3:6b:30:7c:97:01:df:03:d3:b8:70:f9:a8:
                    1e:83:77:e9:0e:95:2d:7c:ed:79:70:5f:3b:5c:45:
                    bb:14:7c:47:56:14:dc:c5:7f:cf:5a:81:e5:ad:3c:
                    28:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:11:17:15:32:24:96:52:32:E8:DD:49:00:2D:A4:DB:50:29:CB:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2e3d2949-a32f-3f8d-bd8f-2369d0399017.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.114.249.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:d5:1d:f9:80:f4:0e:77:0a:41:fa:26:0e:aa:48:b3:e2:be:
         66:0d:ca:d7:f0:33:f2:d3:b0:12:f5:fe:00:1a:32:97:59:b9:
         14:ef:63:a1:28:db:8c:0b:ce:a4:0f:47:f5:56:66:91:4b:78:
         5b:04:13:96:9a:08:f7:c9:9b:62:7e:c3:7a:ed:a2:47:da:a0:
         c4:b8:24:35:f2:11:b6:03:84:9d:00:99:57:22:5a:19:ff:ca:
         45:b6:6e:6b:22:8b:07:b0:fc:c8:06:0b:c2:d1:ec:bc:1f:9e:
         3b:2e:f6:f1:46:8e:35:14:47:dd:60:92:1d:da:38:cd:6d:54:
         a3:6a:8a:1f:d2:75:6b:f1:83:19:33:23:08:ba:ba:24:0e:1e:
         e5:18:29:6e:c0:86:a1:7e:d7:0b:f3:ad:91:2c:0e:87:0d:af:
         c1:37:af:9f:63:37:06:e1:59:41:29:4c:bb:d3:e0:5e:09:af:
         43:f3:71:33:a5:38:35:89:9c:a6:66:0b:6e:65:93:c9:55:8a:
         a8:42:e3:2a:ec:c0:87:6c:e9:f3:e5:95:0b:10:02:82:df:f2:
         04:e2:6f:d5:54:97:98:fd:d2:44:a0:ca:09:cf:b3:b7:e4:ce:
         6a:c3:69:90:0f:ab:5b:df:56:3a:2c:e5:58:1a:ae:64:39:0a:
         12:bd:5c:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:54:06 2024 by rpki-client on console-ams.rpki-client.org