Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3b22c299-c68b-3feb-a9d1-7e2083d9a269.roa
File:                     3b22c299-c68b-3feb-a9d1-7e2083d9a269.roa (raw, json)
Hash identifier:          /JMTcQXI7RE+p88oCk277ROm9X5aGsz7aFXDoe2VBQE=
Subject key identifier:   D6:C3:C1:E4:C3:6A:D4:0D:DC:04:59:41:9E:20:7A:35:F8:38:BD:52
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285847BD915C4629447799E51B7280
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3b22c299-c68b-3feb-a9d1-7e2083d9a269.roa
Signing time:             Sat 02 Nov 2024 01:00:31 +0000
ROA not before:           Sat 02 Nov 2024 01:00:31 +0000
ROA not after:            Fri 31 Jan 2025 02:00:31 +0000
asID:                     206092
IP address blocks:        50.114.94.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:bd:91:5c:46:29:44:77:99:e5:1b:72:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Nov  2 01:00:31 2024 GMT
            Not After : Jan 31 02:00:31 2025 GMT
        Subject: CN=447dd4dd-576a-4e75-8bef-d2d38f185fbf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:cb:d3:a4:60:a0:d1:a9:28:f3:bf:90:02:65:
                    69:7b:76:c8:fd:11:8b:08:48:04:c4:66:70:2f:07:
                    f9:de:0e:6a:c7:5b:5a:bb:26:b7:1d:0d:bb:9a:46:
                    a6:fd:54:58:79:4c:a3:2f:65:05:4e:46:31:9a:26:
                    00:91:75:a6:f4:7b:03:03:fe:d8:a2:31:cc:a1:8a:
                    54:cd:2e:a8:0c:7e:3c:d5:5b:88:a0:be:f2:79:75:
                    dd:af:9f:14:4f:21:17:ec:d4:3e:5a:2a:e2:d7:ee:
                    62:99:4a:ce:4f:20:eb:e0:21:e2:c7:aa:e4:fb:b9:
                    7c:3a:d6:73:d8:2b:0c:36:cf:d5:45:6a:c5:a3:c5:
                    0d:c3:57:49:3b:73:96:62:9c:b6:a0:db:fc:18:1b:
                    83:71:73:49:fe:4f:9e:31:27:b0:3a:5c:49:0f:2f:
                    92:3d:f4:7c:69:c2:91:81:ed:6d:84:cb:d9:4f:ce:
                    e9:70:bd:3b:de:df:0b:71:3e:38:d0:4f:22:6c:8e:
                    b8:64:24:5a:e4:f6:4e:26:9e:d1:1f:ab:b1:1b:66:
                    78:7f:4f:70:5e:e4:3c:7c:13:44:13:59:ec:94:e2:
                    47:39:1f:e8:72:47:fb:18:6a:47:6c:40:ab:f8:dc:
                    d2:52:a6:05:12:40:cb:fb:7a:ed:c2:28:6e:3c:36:
                    a5:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:C3:C1:E4:C3:6A:D4:0D:DC:04:59:41:9E:20:7A:35:F8:38:BD:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3b22c299-c68b-3feb-a9d1-7e2083d9a269.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.114.94.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:e8:b7:2f:8b:d7:6f:86:a7:84:07:79:77:ac:1b:f5:a0:70:
         c5:d4:fe:c6:21:c6:46:3b:41:ab:71:cc:86:60:73:cd:7c:05:
         bd:73:1b:9c:0a:bb:5c:aa:55:03:9c:21:13:ca:a8:be:75:9d:
         e1:02:a7:0a:79:e1:90:e9:fb:52:be:d7:a6:a1:0c:1c:ba:21:
         57:ae:70:43:8f:5a:64:01:90:aa:df:f9:96:ab:db:8f:8a:d1:
         b9:5a:cb:5c:76:f5:1e:28:ae:15:60:7a:fd:0d:75:20:3b:54:
         89:16:a3:36:9b:2a:31:b8:ca:b7:a2:aa:0b:1b:10:f8:23:42:
         71:00:e8:02:4a:df:e9:8a:c4:ff:e3:56:f6:e9:5d:a3:08:11:
         40:ad:e2:6a:25:07:74:75:f2:4b:d0:e0:53:50:56:fc:f4:eb:
         c9:e9:15:20:1c:b3:59:4c:15:5f:14:75:5e:f9:2e:c3:f7:4a:
         5f:c0:b7:a3:fd:5a:94:4b:62:12:6e:50:91:a2:c5:3f:93:fd:
         fb:51:e8:61:d8:39:55:f7:5f:1a:a7:7e:dd:49:ab:1f:86:1a:
         21:e3:f8:5c:f5:df:cb:b8:0f:bc:45:a6:f2:5f:8e:ca:91:8d:
         ea:f4:18:2b:c5:92:f7:36:ea:80:7e:fa:b7:9f:7c:f3:52:2a:
         1c:e8:8c:0e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEe9kVxGKUR3meUbcoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI0MTEwMjAxMDAzMVoXDTI1MDEzMTAyMDAzMVowLzEtMCsGA1UEAxMk
NDQ3ZGQ0ZGQtNTc2YS00ZTc1LThiZWYtZDJkMzhmMTg1ZmJmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlsvTpGCg0ako87+QAmVpe3bI/RGLCEgExGZw
Lwf53g5qx1tauya3HQ27mkam/VRYeUyjL2UFTkYxmiYAkXWm9HsDA/7YojHMoYpU
zS6oDH481VuIoL7yeXXdr58UTyEX7NQ+Wiri1+5imUrOTyDr4CHix6rk+7l8OtZz
2CsMNs/VRWrFo8UNw1dJO3OWYpy2oNv8GBuDcXNJ/k+eMSewOlxJDy+SPfR8acKR
ge1thMvZT87pcL073t8LcT440E8ibI64ZCRa5PZOJp7RH6uxG2Z4f09wXuQ8fBNE
E1nslOJHOR/ockf7GGpHbECr+NzSUqYFEkDL+3rtwihuPDal2QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNbDweTDatQN3ARZQZ4gejX4OL1SMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvM2IyMmMyOTktYzY4Yi0z
ZmViLWE5ZDEtN2UyMDgzZDlhMjY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAMnJeMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFHoty+L12+Gp4QHeXesG/WgcMXU/sYhxkY7QatxzIZgc818Bb1zG5wK
u1yqVQOcIRPKqL51neECpwp54ZDp+1K+16ahDBy6IVeucEOPWmQBkKrf+Zar24+K
0blay1x29R4orhVgev0NdSA7VIkWozabKjG4yreiqgsbEPgjQnEA6AJK3+mKxP/j
VvbpXaMIEUCt4molB3R18kvQ4FNQVvz068npFSAcs1lMFV8UdV75LsP3Sl/At6P9
WpRLYhJuUJGixT+T/ftR6GHYOVX3Xxqnft1Jqx+GGiHj+Fz138u4D7xFpvJfjsqR
jer0GCvFkvc26oB++reffPNSKhzojA4=
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:32:30 2024 by rpki-client on console-ams.rpki-client.org