Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/45a0950d-66dc-3ced-b654-87e33aaf6575.roa
File:                     45a0950d-66dc-3ced-b654-87e33aaf6575.roa (raw, json)
Hash identifier:          MDXHKOJ1V6C5YsX+4zV1ZpoQqr0WBk9QQL950KYGtF4=
Subject key identifier:   48:8B:84:D2:3C:1B:58:E0:07:5D:44:70:AF:A4:04:64:30:1F:6F:2D
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285847EFEF82438F70F3128ECA4640
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/45a0950d-66dc-3ced-b654-87e33aaf6575.roa
Signing time:             Wed 20 Nov 2024 02:00:39 +0000
ROA not before:           Wed 20 Nov 2024 02:00:39 +0000
ROA not after:            Tue 18 Feb 2025 02:00:39 +0000
asID:                     61317
IP address blocks:        50.114.18.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ef:ef:82:43:8f:70:f3:12:8e:ca:46:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Nov 20 02:00:39 2024 GMT
            Not After : Feb 18 02:00:39 2025 GMT
        Subject: CN=8bb13a22-16cb-4708-b75d-fb42a565cfb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:13:17:9b:dc:cb:c7:99:29:3b:22:69:84:17:
                    48:b9:0b:eb:43:91:1e:46:36:a3:9d:a0:96:c6:8a:
                    6b:6e:69:0a:37:e0:67:37:c4:fd:d1:d1:df:d7:29:
                    18:ba:91:45:db:d0:73:bf:1d:d2:fd:f7:a6:4f:48:
                    dd:01:15:b1:50:5c:c7:ce:e5:a2:30:2d:19:ed:74:
                    df:b8:be:20:c7:ba:58:23:09:6e:a3:b7:8f:36:cd:
                    b3:d1:9e:d0:9a:92:2a:02:eb:b2:22:c6:98:46:7d:
                    cb:58:ba:f5:67:bc:3b:79:22:83:f1:12:57:bd:7a:
                    07:cf:7c:ab:5b:5c:0e:ca:5e:a6:04:d7:97:36:61:
                    65:30:da:0d:c6:aa:39:2e:f9:13:5f:7d:a8:bc:8f:
                    f6:2b:1f:25:ff:1d:42:f2:f5:f6:8b:cc:ac:5a:31:
                    73:f2:25:32:3f:b2:31:97:e2:b6:97:a4:63:4c:df:
                    a0:74:17:60:44:c6:43:5d:62:a6:1f:f2:e8:b2:e0:
                    5d:79:a7:9c:2b:76:59:32:4a:0b:05:24:30:32:34:
                    17:99:ff:e6:7f:61:71:1d:15:98:ce:d4:6b:44:5c:
                    f9:e1:f0:30:82:96:ca:17:2c:30:ba:82:6e:4b:37:
                    3b:9c:a5:12:8d:2d:36:52:77:4f:f1:25:77:84:56:
                    bc:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:8B:84:D2:3C:1B:58:E0:07:5D:44:70:AF:A4:04:64:30:1F:6F:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/45a0950d-66dc-3ced-b654-87e33aaf6575.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.114.18.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:a8:fc:7b:2c:6b:3c:ac:80:ae:90:ec:1b:0f:29:40:65:62:
         f3:19:5a:87:e0:09:f8:48:7f:df:45:49:76:ed:94:d7:29:0f:
         82:db:6f:f2:82:dd:7f:27:7d:5c:6a:38:84:11:3b:8a:66:a4:
         64:9f:8c:6c:66:41:d5:64:89:d3:ef:26:5d:58:66:6e:b4:ea:
         e7:66:00:9e:86:9e:34:29:11:e4:6e:17:3c:8c:93:a0:4c:9c:
         9c:e5:c4:d8:d1:91:82:07:4e:26:1b:38:c6:6b:ed:ed:f7:52:
         df:a2:07:a6:da:0b:59:12:bf:3d:a9:82:28:d0:10:89:3b:b1:
         e5:47:4a:39:78:e9:94:c6:c0:d8:42:40:00:ca:7d:59:1b:78:
         59:52:ac:2f:8f:c6:58:30:cf:42:d3:1c:d0:c1:4f:d7:1d:dc:
         6e:3e:ef:fa:16:db:e0:ae:d3:e8:e8:37:01:65:60:d2:59:05:
         44:1d:04:aa:4a:2b:0b:7f:de:f5:92:eb:93:c9:13:c3:14:06:
         b7:28:5e:0c:ac:2b:1b:08:2b:e3:fb:2e:dc:ce:86:96:96:76:
         34:56:18:1e:44:64:53:ae:3a:72:d9:d4:83:99:d4:cc:b7:41:
         39:e1:a1:d9:70:29:e1:bf:41:3e:35:39:60:55:50:a1:e4:e5:
         28:e4:d4:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:34:49 2024 by rpki-client on console-fra.rpki-client.org