Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/32b7be68-48e4-3f90-96a4-1d98234e996d.roa
File:                     32b7be68-48e4-3f90-96a4-1d98234e996d.roa (raw, json)
Hash identifier:          gbjLYxm3HjEgFvJl9kSHLfaofHV3sIA4bbsaqbdMx3o=
Subject key identifier:   96:E1:74:2A:93:91:37:0D:02:4A:75:7B:55:C2:35:D4:85:80:25:57
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285847A6627A4C0E5C93B6EFCEC900
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/32b7be68-48e4-3f90-96a4-1d98234e996d.roa
Signing time:             Thu 24 Oct 2024 17:42:33 +0000
ROA not before:           Thu 24 Oct 2024 17:42:33 +0000
ROA not after:            Wed 22 Jan 2025 18:42:33 +0000
asID:                     210644
IP address blocks:        50.114.8.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:a6:62:7a:4c:0e:5c:93:b6:ef:ce:c9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Oct 24 17:42:33 2024 GMT
            Not After : Jan 22 18:42:33 2025 GMT
        Subject: CN=2458bb16-cdbb-4ca3-9cee-315eac0de213
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:2e:db:bc:dd:4c:aa:97:fb:d2:be:c2:7b:70:
                    08:d1:91:19:9e:d9:84:34:a0:a8:85:21:61:d1:ec:
                    35:2d:ce:aa:a7:b8:57:64:1e:2c:34:36:5d:11:ef:
                    8b:43:f3:94:31:fd:47:75:74:d8:69:89:7c:7b:fb:
                    b7:a2:6a:40:22:8b:92:c0:a8:11:d7:9d:01:bd:db:
                    30:44:c8:46:69:0d:50:3f:f7:62:74:98:11:5d:9b:
                    d5:30:6c:6a:ba:e5:91:a4:66:0f:98:0a:f4:fc:b5:
                    5f:2a:bb:86:04:ed:23:75:17:7a:a4:90:5b:ef:f3:
                    18:56:a7:9f:2c:9f:9e:d5:3d:ca:2b:62:0b:88:15:
                    8a:1d:0d:4c:d0:3d:a6:5e:e7:3b:bc:c6:cf:bc:40:
                    30:4a:44:c6:41:07:34:c9:50:c3:bd:71:e5:f6:c8:
                    5e:85:ff:3e:8d:df:65:fd:78:da:c9:d1:e7:f6:d8:
                    50:f7:e4:05:3d:30:d3:86:ec:2d:f2:ef:88:93:f5:
                    e7:a2:ac:fb:16:dd:bb:9d:7e:c6:23:65:e5:f8:9d:
                    8e:62:d9:af:c8:34:3f:fd:26:01:86:b5:0b:fe:49:
                    7c:ed:96:1a:6f:47:64:dc:a6:67:6d:d0:fe:98:04:
                    37:58:16:37:f8:36:23:ae:54:73:6e:48:82:10:ab:
                    75:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:E1:74:2A:93:91:37:0D:02:4A:75:7B:55:C2:35:D4:85:80:25:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/32b7be68-48e4-3f90-96a4-1d98234e996d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.114.8.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:a3:b2:f1:a9:9d:90:6f:90:0f:a6:24:40:11:05:48:4b:59:
         e1:8b:56:ce:c7:7b:f3:4b:37:37:65:d8:36:f4:29:55:9c:f1:
         ea:bd:2d:d8:25:39:6d:8a:07:32:3c:eb:25:33:29:63:8f:60:
         cf:c4:1d:3d:c9:92:48:15:4e:c1:d4:a1:f8:e0:72:20:e4:bf:
         4a:e6:4a:9a:76:e5:83:2d:fa:9a:bb:c2:4f:d4:1c:40:c7:ae:
         df:1b:db:e3:a4:d4:8c:61:d7:58:3a:2b:18:c1:40:a3:97:ab:
         40:a6:db:f2:52:63:ab:04:4d:d7:88:51:70:c6:e4:39:5b:42:
         c6:4e:04:8e:28:7b:d6:56:47:ba:e2:d9:7d:61:9b:0c:f9:7b:
         b0:05:e3:32:ce:db:45:49:de:37:ff:6f:29:08:46:0f:d1:c1:
         7e:06:d5:be:45:e4:da:5f:15:0e:08:6b:e3:60:c8:eb:4d:60:
         77:2f:ad:4f:c2:a0:8f:91:9c:7e:a5:15:85:af:7f:d2:41:d1:
         3b:37:96:d6:d2:cb:0f:ff:c1:c2:c2:f4:e7:72:bc:64:39:e2:
         83:49:f6:05:f3:f9:c3:4b:c0:e7:80:3c:fa:82:6f:c9:ad:62:
         3a:24:06:8c:8e:2b:19:f2:af:53:d7:80:37:5e:e2:c8:f8:95:
         d4:5d:5d:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:37:39 2024 by rpki-client on console-ams.rpki-client.org