Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3ea637fa-be09-339d-9281-96ef24d1ee95.roa
File:                     3ea637fa-be09-339d-9281-96ef24d1ee95.roa (raw, json)
Hash identifier:          tTGU5XQiwtjXNJEpDL/sHoRxCvS9heA3FeF0uM8Zmcg=
Subject key identifier:   04:73:C0:BC:DA:D3:EA:AC:D8:A3:74:1A:B4:BD:EB:90:C2:BD:D3:E1
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285845B3836C9BD6A0BFCA1C560F40
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3ea637fa-be09-339d-9281-96ef24d1ee95.roa
Signing time:             Mon 29 Apr 2024 01:00:25 +0000
ROA not before:           Mon 29 Apr 2024 01:00:25 +0000
ROA not after:            Sun 28 Jul 2024 01:00:25 +0000
asID:                     44477
IP address blocks:        50.114.189.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:b3:83:6c:9b:d6:a0:bf:ca:1c:56:0f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Apr 29 01:00:25 2024 GMT
            Not After : Jul 28 01:00:25 2024 GMT
        Subject: CN=c6d2f4b8-01cd-4c2f-be0b-79cfab76bbda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:5c:a7:5e:c9:df:55:94:15:fe:d4:c9:f7:ce:
                    3f:e3:3d:a1:77:ac:20:30:09:ed:05:47:47:71:3c:
                    d0:3a:5d:85:d0:0d:db:9b:7b:d4:6f:4d:06:e2:f2:
                    7f:c3:d8:27:b7:28:f5:a8:0c:26:36:7f:ce:80:76:
                    a9:b5:0e:35:02:6e:53:48:42:49:6a:0a:36:ec:05:
                    82:ef:dd:f9:de:c1:21:aa:15:aa:c4:90:9f:86:c9:
                    b7:4b:0e:40:dd:00:e6:72:1e:18:43:13:01:24:65:
                    ce:88:d8:45:5d:17:18:fc:81:c5:7f:2c:38:e9:c0:
                    9d:d2:b6:78:23:25:f9:78:b9:b5:ff:ce:0a:0b:9f:
                    54:f2:eb:24:1f:10:39:27:f7:97:b0:e4:cb:47:62:
                    49:fd:b9:9b:3e:6f:9c:fa:13:12:a4:12:94:c5:51:
                    56:d2:18:5c:b9:c2:65:47:5c:f1:90:28:7c:6d:fc:
                    7f:27:aa:67:34:5b:d6:fc:8a:d5:42:10:1f:27:f3:
                    0a:a3:6f:0d:8e:3d:bd:22:e9:c7:fe:b8:c6:4c:77:
                    53:a7:9f:ed:c4:62:37:d1:d9:53:cd:e5:8f:6b:6d:
                    1b:de:42:63:e9:eb:47:25:f3:92:a8:80:ba:ae:57:
                    a3:9a:70:6d:fb:a7:72:33:1c:78:9e:13:1c:28:31:
                    05:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:73:C0:BC:DA:D3:EA:AC:D8:A3:74:1A:B4:BD:EB:90:C2:BD:D3:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3ea637fa-be09-339d-9281-96ef24d1ee95.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.114.189.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b1:a7:c8:ce:d1:0c:ba:97:55:f0:63:08:08:bc:8c:cf:9a:5d:
         d2:25:c6:0a:9b:41:ae:8a:0f:79:85:73:78:80:21:66:30:76:
         f6:00:82:ba:74:44:6c:f8:e0:d3:c1:90:8d:4a:ee:61:71:30:
         9e:bb:36:ef:f5:87:9c:2b:87:1e:38:fe:00:bc:66:7d:f9:a1:
         03:aa:59:20:86:9c:57:72:c7:7e:97:7a:17:c5:12:2e:92:ab:
         ef:7c:4b:e6:4d:bc:67:a8:cd:63:76:94:45:7b:7d:47:ad:a1:
         e5:74:4f:e6:ea:6c:82:77:2d:f6:4b:25:1e:a5:5f:3a:5d:f8:
         c8:af:39:da:53:5e:00:64:25:96:b6:d9:b4:81:d6:4e:b8:58:
         0a:c2:4c:21:22:19:14:c3:b5:07:5a:9c:c6:95:1a:fd:d1:ef:
         e1:bd:f0:08:54:d5:45:64:29:ea:6a:9c:6d:04:24:1f:08:fb:
         c3:50:41:99:db:f7:5e:7c:38:b5:57:f1:8b:f0:09:b3:50:85:
         72:fd:fe:2f:96:a7:5c:4c:58:0e:ed:c2:63:4c:ad:a0:64:af:
         82:04:08:c9:59:e9:53:84:2e:80:05:03:54:7d:1a:a4:7f:a5:
         77:a9:02:90:b2:f4:bc:26:ce:8f:3d:fe:08:c7:df:44:10:cf:
         28:fc:ef:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 17:56:19 2024 by rpki-client on console-fra.rpki-client.org