Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/31328109-90f7-38fc-ada5-5f80ea4aba53.roa
File:                     31328109-90f7-38fc-ada5-5f80ea4aba53.roa (raw, json)
Hash identifier:          1FWVTs3WhciyywS4axv4q7t2SOrlRLHwSEvyhwn1BCs=
Subject key identifier:   F6:69:11:70:97:52:D6:31:A7:89:C9:F7:B9:AF:C1:05:E9:24:5F:95
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584824FA825EF4B9EAAC0A0F7EA0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/31328109-90f7-38fc-ada5-5f80ea4aba53.roa
Signing time:             Mon 09 Dec 2024 02:00:40 +0000
ROA not before:           Mon 09 Dec 2024 02:00:40 +0000
ROA not after:            Sun 09 Mar 2025 02:00:40 +0000
asID:                     3356
IP address blocks:        50.114.66.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:24:fa:82:5e:f4:b9:ea:ac:0a:0f:7e:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Dec  9 02:00:40 2024 GMT
            Not After : Mar  9 02:00:40 2025 GMT
        Subject: CN=048e7987-a8db-44b3-ab6f-fd492ebc3751
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:12:f6:4c:13:b5:86:7f:ae:ba:08:83:71:58:
                    ba:71:e6:81:f8:bf:5b:bf:b5:05:27:7c:ac:2b:9e:
                    75:96:f1:ba:69:d9:c6:1f:2c:91:66:7b:0d:b6:1d:
                    81:7e:65:a0:18:f2:f3:7d:ae:a3:45:39:de:10:89:
                    a2:03:ab:9c:f3:33:29:c8:2f:a3:ae:be:7e:77:a3:
                    b9:b0:49:5e:7d:3f:42:ac:3d:56:7c:4a:a9:15:57:
                    49:73:2e:c6:ea:e2:1a:22:e6:60:5c:58:e6:f2:f0:
                    fb:29:ff:27:04:cd:73:13:b1:72:53:6c:ef:fe:f9:
                    35:94:61:99:20:cf:f4:0c:9b:e6:f1:0b:60:5d:3a:
                    62:83:30:d3:b7:46:bf:35:7a:5b:70:bf:27:da:c9:
                    7f:e3:08:41:31:68:85:7f:0a:c3:85:da:81:6a:8f:
                    e9:99:65:6a:64:7c:29:80:ec:66:29:d6:1f:83:a6:
                    52:40:98:ae:ad:d5:53:1e:e2:a0:43:48:b0:9b:44:
                    9c:e3:f0:3e:ac:97:15:46:f3:78:db:dd:be:aa:6a:
                    49:42:12:d2:68:73:28:10:79:dc:44:65:85:44:d9:
                    cb:f3:2c:dd:60:f3:4f:83:2c:03:93:bd:1c:1a:90:
                    d1:bc:6c:07:3f:18:96:36:69:7c:34:1e:b9:ff:72:
                    41:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:69:11:70:97:52:D6:31:A7:89:C9:F7:B9:AF:C1:05:E9:24:5F:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/31328109-90f7-38fc-ada5-5f80ea4aba53.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.114.66.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:7b:8d:65:91:54:19:a5:8a:34:b5:0c:43:c2:f5:9c:38:92:
         48:cb:cb:25:e5:d9:f0:d0:76:92:17:d4:bc:28:b3:98:2b:4e:
         23:40:cd:a4:37:6e:ab:2e:8a:0e:aa:1c:d6:89:15:8c:ee:80:
         d7:0f:72:7f:1d:61:51:01:2a:b7:5c:dd:bc:4d:6c:03:72:07:
         ec:38:60:44:46:18:53:48:f2:cb:12:9f:e3:78:2f:64:80:1d:
         4d:ff:52:81:e2:93:ff:d9:d3:40:d5:4b:45:9a:92:d1:7b:56:
         18:04:49:f7:c1:4c:7e:47:9b:54:4f:79:b6:e1:b4:5a:d5:a2:
         43:fc:8c:f1:b1:c7:03:74:f5:60:db:b0:36:37:3f:f6:a1:e2:
         d9:9a:51:3d:67:21:31:29:2c:02:f3:49:17:51:93:58:81:97:
         5b:d1:a1:b2:00:03:4d:54:27:91:2d:f9:9c:02:7b:46:24:65:
         65:3e:ce:b7:25:a6:35:32:24:f5:2c:be:ad:05:e5:20:e9:5f:
         d1:6a:d5:37:b9:21:de:71:c7:d7:f6:18:8f:55:42:e6:f2:e1:
         97:33:80:5c:30:41:ea:1f:48:72:cb:f1:82:16:0d:69:e8:b0:
         1d:e2:e1:41:e6:a1:31:d8:5f:a3:ba:d1:6a:c8:7b:b8:89:2d:
         ca:15:6a:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:06:49 2025 by rpki-client