Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2f817395-ecfe-3d08-8bb1-88cc21d8d72a.roa
File:                     2f817395-ecfe-3d08-8bb1-88cc21d8d72a.roa (raw, json)
Hash identifier:          MtabHmPPf5ZvvlWGGKsH5OX6b58CzuAJX7iDYt/jlYQ=
Subject key identifier:   DC:4A:CF:6C:9F:06:87:E4:8A:88:84:77:1E:17:08:CB:22:9D:37:9C
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285843465A2B9AD5A48F54F6746240
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2f817395-ecfe-3d08-8bb1-88cc21d8d72a.roa
Signing time:             Tue 19 Sep 2023 13:00:25 +0000
ROA not before:           Tue 19 Sep 2023 13:00:25 +0000
ROA not after:            Mon 18 Dec 2023 14:00:25 +0000
asID:                     20473
IP address blocks:        50.114.90.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 20 Sep 2023 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:46:5a:2b:9a:d5:a4:8f:54:f6:74:62:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Sep 19 13:00:25 2023 GMT
            Not After : Dec 18 14:00:25 2023 GMT
        Subject: CN=ecc8346c-771e-4a46-a81f-f701104c391d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:4e:a8:ef:35:27:bf:06:ce:82:fc:77:d5:1d:
                    3e:b5:3d:67:f7:5e:ee:95:81:45:59:e3:c6:e4:e9:
                    cd:2d:b3:5e:d4:2e:4e:7d:a7:b2:7a:c1:10:4f:44:
                    f3:f2:ad:c9:c5:ee:f5:71:1f:ee:3b:2a:fe:e7:13:
                    e2:a2:08:cb:02:b4:6f:48:47:41:3b:2c:73:57:2e:
                    19:c5:51:cd:5d:ac:5f:61:25:ac:55:47:14:07:f2:
                    e5:5b:b4:a5:c8:55:9d:0c:04:a4:d9:94:c0:cc:b9:
                    c8:5e:df:5e:1c:12:42:ee:fc:e9:3d:f0:e9:e8:1d:
                    7c:ad:4c:2d:4c:d0:7f:ea:3b:99:f7:29:94:11:55:
                    e8:b5:d5:de:2c:38:6c:98:5d:28:a6:97:89:2b:ab:
                    ed:70:4d:82:17:a1:e3:80:63:61:c9:af:5f:ed:8b:
                    9c:ec:80:b0:58:29:e0:f1:db:4e:0f:42:cc:7c:9d:
                    c7:5e:19:7e:0c:2d:af:0b:9b:bc:6c:c2:e9:18:27:
                    c0:4e:bd:50:49:5e:ef:ee:03:c9:57:36:01:65:73:
                    84:d9:d1:33:79:29:e8:0b:39:22:2a:d5:9a:36:42:
                    19:81:38:e3:e1:a7:d8:a2:ce:b0:64:12:d2:c0:22:
                    f3:fe:fe:38:0f:a7:67:af:90:c8:4d:6f:50:2a:08:
                    00:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:4A:CF:6C:9F:06:87:E4:8A:88:84:77:1E:17:08:CB:22:9D:37:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2f817395-ecfe-3d08-8bb1-88cc21d8d72a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.114.90.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:9e:01:6c:e3:7b:42:97:c9:f1:fa:98:f4:e8:cc:43:7c:c1:
         8a:c0:ef:b5:83:a6:5a:c0:f0:0f:05:6e:e9:d9:99:ab:76:b2:
         99:d1:1e:ec:5b:90:bf:f2:4e:56:ff:54:b9:72:e6:92:7e:61:
         ca:f7:31:c0:5e:c1:84:46:44:82:e4:d4:dc:bc:d0:a2:09:df:
         26:1d:ca:f7:05:c1:9e:5c:19:59:d8:28:0e:b5:85:f6:fc:be:
         5f:4b:fd:f1:4a:85:5a:6a:d3:45:e3:fc:92:58:38:4e:d9:a1:
         20:39:46:38:af:70:33:6c:0f:d4:ec:6c:2c:f6:85:59:b0:85:
         a2:d7:7a:ab:c1:cc:b2:39:ba:7b:b8:e2:0c:19:01:5e:73:42:
         55:15:44:8b:0a:35:84:e9:b4:3b:48:04:f2:7c:46:f4:47:c4:
         71:87:03:8e:04:47:5d:ff:a9:03:c6:01:bb:48:9e:76:28:a0:
         a6:a4:ed:7a:bf:c3:65:e2:09:6b:c3:ea:dc:c6:69:46:9b:c0:
         2f:5e:22:a1:24:91:1a:b9:6a:8e:ca:82:41:62:8e:41:17:a8:
         87:d4:6e:c6:2b:f2:d0:fa:52:28:f4:da:e4:61:28:82:cd:e4:
         b1:ce:12:77:db:07:d7:85:fc:80:a0:46:e9:40:79:2a:e3:f5:
         6a:66:b1:56
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWENGWiua1aSPVPZ0YkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTIzMDkxOTEzMDAyNVoXDTIzMTIxODE0MDAyNVowLzEtMCsGA1UEAxMk
ZWNjODM0NmMtNzcxZS00YTQ2LWE4MWYtZjcwMTEwNGMzOTFkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgE6o7zUnvwbOgvx31R0+tT1n917ulYFFWePG
5OnNLbNe1C5OfaeyesEQT0Tz8q3Jxe71cR/uOyr+5xPiogjLArRvSEdBOyxzVy4Z
xVHNXaxfYSWsVUcUB/LlW7SlyFWdDASk2ZTAzLnIXt9eHBJC7vzpPfDp6B18rUwt
TNB/6juZ9ymUEVXotdXeLDhsmF0oppeJK6vtcE2CF6HjgGNhya9f7Yuc7ICwWCng
8dtOD0LMfJ3HXhl+DC2vC5u8bMLpGCfATr1QSV7v7gPJVzYBZXOE2dEzeSnoCzki
KtWaNkIZgTjj4afYos6wZBLSwCLz/v44D6dnr5DITW9QKggALQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNxKz2yfBofkioiEdx4XCMsinTecMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvMmY4MTczOTUtZWNmZS0z
ZDA4LThiYjEtODhjYzIxZDhkNzJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAMnJaMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACyeAWzje0KXyfH6mPTozEN8wYrA77WDplrA8A8FbunZmat2spnRHuxb
kL/yTlb/VLly5pJ+Ycr3McBewYRGRILk1Ny80KIJ3yYdyvcFwZ5cGVnYKA61hfb8
vl9L/fFKhVpq00Xj/JJYOE7ZoSA5RjivcDNsD9TsbCz2hVmwhaLXeqvBzLI5unu4
4gwZAV5zQlUVRIsKNYTptDtIBPJ8RvRHxHGHA44ER13/qQPGAbtInnYooKak7Xq/
w2XiCWvD6tzGaUabwC9eIqEkkRq5ao7KgkFijkEXqIfUbsYr8tD6Uij02uRhKILN
5LHOEnfbB9eF/ICgRulAeSrj9WpmsVY=
-----END CERTIFICATE-----
Generated at Tue Sep 19 13:19:28 2023 by rpki-client on console-fra.rpki-client.org