Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/52111221-9db8-3785-8f34-e3749f9fe266.roa
File:                     52111221-9db8-3785-8f34-e3749f9fe266.roa (raw, json)
Hash identifier:          XRchttzR/qhu1MafxfD8if2KboHwxYSn3jEJRi6XjW0=
Subject key identifier:   EB:36:3A:A4:03:E6:0B:5F:02:28:63:0E:55:FA:2F:1B:CF:BE:4C:15
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285847E35F708B114CB08A77CBFC80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/52111221-9db8-3785-8f34-e3749f9fe266.roa
Signing time:             Fri 15 Nov 2024 14:00:39 +0000
ROA not before:           Fri 15 Nov 2024 14:00:39 +0000
ROA not after:            Thu 13 Feb 2025 14:00:39 +0000
asID:                     20473
IP address blocks:        50.114.95.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e3:5f:70:8b:11:4c:b0:8a:77:cb:fc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Nov 15 14:00:39 2024 GMT
            Not After : Feb 13 14:00:39 2025 GMT
        Subject: CN=37ae7eed-dc4b-4910-9ace-f87d6c878d9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ca:1e:21:98:6b:db:63:a1:b1:07:9e:62:da:
                    8b:d2:12:a5:fb:a4:30:48:e5:f2:a2:ed:36:05:d9:
                    44:81:0f:36:92:e9:2b:5d:fa:8e:cc:8a:d1:44:fa:
                    1b:94:78:32:33:fc:7a:75:e2:59:8a:e7:1c:43:92:
                    f3:6b:7c:be:5a:95:16:47:55:fc:67:0f:76:e7:14:
                    c0:9b:d0:4b:7d:40:9a:8f:18:37:43:e0:1b:ef:62:
                    54:5b:6e:01:e0:fa:44:5b:63:ee:24:e5:6f:76:40:
                    77:3f:10:91:7b:91:8b:37:ef:5f:ee:d7:1e:89:cd:
                    92:4c:0d:5a:73:54:32:79:db:20:31:be:89:7b:61:
                    ca:7f:87:05:33:9d:c5:bb:b1:8a:87:5d:95:a0:8a:
                    44:81:35:05:96:26:9b:f6:91:4b:ff:0b:02:97:5b:
                    51:c0:ff:23:27:0b:d3:b2:7b:47:09:78:e9:e3:2c:
                    b8:4f:88:3a:b2:33:b1:76:98:03:7d:46:2e:6e:f1:
                    9e:f3:2f:3a:5d:fe:7f:36:70:b5:dc:1e:35:fa:24:
                    e3:65:74:68:88:3d:84:e3:cc:0a:89:25:35:04:4a:
                    3e:be:a0:47:60:26:ac:82:1a:06:eb:0e:55:f4:13:
                    a7:02:79:5c:21:32:a2:9c:e6:49:b9:24:f2:0e:26:
                    30:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:36:3A:A4:03:E6:0B:5F:02:28:63:0E:55:FA:2F:1B:CF:BE:4C:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/52111221-9db8-3785-8f34-e3749f9fe266.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.114.95.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:d1:73:3e:da:79:7d:47:3f:d5:5c:97:41:4f:16:bd:df:e9:
         c3:87:41:70:7b:cc:b2:3b:1c:42:a9:09:99:a2:1f:fe:e8:b1:
         0b:e7:34:60:b4:ce:ee:5a:88:df:47:03:7f:8b:5b:f6:18:a7:
         2b:ca:84:1e:c0:97:b4:58:d1:51:4b:05:9a:56:de:50:ae:c1:
         d2:0a:b0:ba:97:24:5c:d9:cb:0a:c0:b3:58:55:b4:e5:61:97:
         92:46:52:bc:82:70:e8:7e:c1:bf:45:23:16:9e:72:f6:4f:46:
         20:68:b2:06:15:2c:3d:cf:7b:bc:a0:31:73:dc:b9:cd:dd:65:
         0d:aa:4c:49:08:09:22:7d:40:ba:f4:21:b5:6a:b2:c1:e3:46:
         29:13:90:a8:5a:fd:1e:22:fb:6c:34:6f:26:70:c1:68:e3:41:
         b2:0d:3b:68:13:17:8b:70:33:5b:dd:1e:4d:41:0d:eb:0e:84:
         a2:4a:f8:67:11:a2:4e:a7:79:40:f5:d3:ca:e2:e2:8d:f3:b7:
         c3:a4:fa:78:5d:26:a2:88:cc:ea:fd:4b:d9:a2:c2:46:87:5a:
         80:70:76:a4:11:e7:8e:67:33:6c:d4:6a:28:ce:8a:0f:1b:a2:
         ba:82:d2:02:7b:dd:27:82:71:9f:5e:44:91:64:09:15:5a:c6:
         60:e7:01:1e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfjX3CLEUywinfL/IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI0MTExNTE0MDAzOVoXDTI1MDIxMzE0MDAzOVowLzEtMCsGA1UEAxMk
MzdhZTdlZWQtZGM0Yi00OTEwLTlhY2UtZjg3ZDZjODc4ZDliMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAssoeIZhr22OhsQeeYtqL0hKl+6QwSOXyou02
BdlEgQ82kukrXfqOzIrRRPoblHgyM/x6deJZiuccQ5Lza3y+WpUWR1X8Zw925xTA
m9BLfUCajxg3Q+Ab72JUW24B4PpEW2PuJOVvdkB3PxCRe5GLN+9f7tceic2STA1a
c1QyedsgMb6Je2HKf4cFM53Fu7GKh12VoIpEgTUFliab9pFL/wsCl1tRwP8jJwvT
sntHCXjp4yy4T4g6sjOxdpgDfUYubvGe8y86Xf5/NnC13B41+iTjZXRoiD2E48wK
iSU1BEo+vqBHYCasghoG6w5V9BOnAnlcITKinOZJuSTyDiYw1QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOs2OqQD5gtfAihjDlX6LxvPvkwVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvNTIxMTEyMjEtOWRiOC0z
Nzg1LThmMzQtZTM3NDlmOWZlMjY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAMnJfMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHbRcz7aeX1HP9Vcl0FPFr3f6cOHQXB7zLI7HEKpCZmiH/7osQvnNGC0
zu5aiN9HA3+LW/YYpyvKhB7Al7RY0VFLBZpW3lCuwdIKsLqXJFzZywrAs1hVtOVh
l5JGUryCcOh+wb9FIxaecvZPRiBosgYVLD3Pe7ygMXPcuc3dZQ2qTEkICSJ9QLr0
IbVqssHjRikTkKha/R4i+2w0byZwwWjjQbINO2gTF4twM1vdHk1BDesOhKJK+GcR
ok6neUD108ri4o3zt8Ok+nhdJqKIzOr9S9miwkaHWoBwdqQR545nM2zUaijOig8b
orqC0gJ73SeCcZ9eRJFkCRVaxmDnAR4=
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:34:51 2024 by rpki-client on console-fra.rpki-client.org