Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/4783d647-9f48-38ba-a727-7414131d5e7a.roa
File:                     4783d647-9f48-38ba-a727-7414131d5e7a.roa (raw, json)
Hash identifier:          rzlKY/1TvYPJgvIBsCW0H2l1fgLKYYEvsIqHY2f+xQo=
Subject key identifier:   85:AF:7F:0B:B7:35:E4:79:BB:DE:1F:52:F0:6F:29:01:72:98:71:EB
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584563F2FB11AA48E1D4926087A0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/4783d647-9f48-38ba-a727-7414131d5e7a.roa
Signing time:             Sun 31 Mar 2024 13:00:36 +0000
ROA not before:           Sun 31 Mar 2024 13:00:36 +0000
ROA not after:            Sat 29 Jun 2024 13:00:36 +0000
asID:                     26548
IP address blocks:        50.114.192.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:63:f2:fb:11:aa:48:e1:d4:92:60:87:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Mar 31 13:00:36 2024 GMT
            Not After : Jun 29 13:00:36 2024 GMT
        Subject: CN=17051f8c-3d4a-4b98-a81a-14154eae478e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:3e:76:e8:88:78:67:06:6f:0a:b1:fc:fc:42:
                    d7:94:ae:c6:16:6b:a3:73:c1:ae:c4:9f:8d:8c:44:
                    26:4f:36:44:fd:28:2a:bd:3b:f7:d8:49:26:d5:7f:
                    30:ab:9b:0d:28:7f:f1:54:7d:1e:75:6a:c1:6c:43:
                    26:21:17:0d:e3:53:77:6f:37:0a:18:8c:33:39:bf:
                    ac:2a:b4:a1:54:49:cf:5d:41:29:96:88:e3:f0:a0:
                    87:41:22:8f:1b:c4:03:e8:fa:f1:bb:b4:54:de:b5:
                    64:49:d9:7f:0a:e6:bb:9f:eb:5f:cc:78:66:bf:c5:
                    5a:7b:72:9a:bd:2b:75:2c:d8:7b:b8:8a:a3:e4:c6:
                    d3:dc:b6:6a:9a:35:b4:58:01:24:f5:dc:f5:a4:a8:
                    7f:ba:f9:f0:6c:62:40:cb:1b:75:06:33:f8:2e:53:
                    35:2f:df:c4:2f:04:29:f8:b7:ef:14:eb:a9:6e:8f:
                    22:b5:3f:96:7e:1b:23:90:97:ed:42:27:48:6e:a0:
                    36:9d:3c:4d:53:cb:e4:35:59:a0:cf:c0:66:35:5a:
                    15:f8:bd:20:0b:05:79:27:87:e1:5c:7a:5d:fb:17:
                    33:26:4b:61:56:b7:a8:87:ee:80:4a:74:59:77:04:
                    3d:ac:c9:6e:81:56:7e:ea:6e:d0:8c:55:a3:54:d5:
                    06:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:AF:7F:0B:B7:35:E4:79:BB:DE:1F:52:F0:6F:29:01:72:98:71:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/4783d647-9f48-38ba-a727-7414131d5e7a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.114.192.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:c2:d5:07:9b:c9:c3:8a:47:12:46:84:4e:3f:88:0f:74:0c:
         05:47:92:75:7d:3f:4b:f9:c5:c0:69:a1:02:09:b3:db:07:69:
         a6:cc:e1:3f:b4:e7:28:b8:97:f0:f3:94:25:72:75:f9:cf:8e:
         ed:9c:ce:79:93:6b:e8:57:fe:95:23:29:8d:a8:25:2f:ab:64:
         ed:3f:f4:5f:fa:80:2d:cc:e3:51:f1:c4:26:06:68:90:95:4f:
         64:a4:3c:e9:6b:b5:e7:f4:bd:ff:df:a6:b6:69:f1:fa:be:1b:
         6b:e9:2f:7e:eb:47:25:e1:3c:28:14:c3:82:8c:8e:e3:96:1b:
         3c:98:ee:40:50:82:f1:e9:40:ef:9a:11:3f:ac:8e:c2:e4:5e:
         e6:9d:b1:10:3e:a9:fe:9e:86:70:8d:46:32:5a:e4:fd:92:3d:
         af:97:32:82:67:25:50:13:a2:e6:be:a4:b2:ec:14:98:8d:96:
         e9:de:71:75:46:53:b6:a7:fa:03:26:f1:3e:b3:41:09:ab:8e:
         50:56:52:a2:80:f5:48:5f:ed:35:3b:46:82:cc:eb:b2:08:9c:
         90:07:d5:d0:48:6e:6c:94:8e:d1:44:b5:24:d4:5c:0b:5f:a1:
         da:df:66:0f:1b:a4:36:2d:1b:ee:a9:60:ed:31:3f:f9:0c:f9:
         e5:06:54:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 17:56:20 2024 by rpki-client on console-fra.rpki-client.org