Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/52cd4476-4e97-30ed-a5d8-6b33031fc8d5.roa
File:                     52cd4476-4e97-30ed-a5d8-6b33031fc8d5.roa (raw, json)
Hash identifier:          RqxWb3otWTZ9Rn5NRs8PQo4/5z99cPippFYRmqjxSiA=
Subject key identifier:   22:1D:84:C2:01:C6:1C:7E:B9:E3:6B:F9:31:92:35:47:08:C7:69:11
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F432858472DCB31E09F14B678CBDD0600
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/52cd4476-4e97-30ed-a5d8-6b33031fc8d5.roa
Signing time:             Wed 11 Sep 2024 13:00:42 +0000
ROA not before:           Wed 11 Sep 2024 13:00:42 +0000
ROA not after:            Tue 10 Dec 2024 14:00:42 +0000
asID:                     202662
IP address blocks:        50.114.152.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:2d:cb:31:e0:9f:14:b6:78:cb:dd:06:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Sep 11 13:00:42 2024 GMT
            Not After : Dec 10 14:00:42 2024 GMT
        Subject: CN=fb046e75-3c64-48c8-8641-13459431424c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:64:3b:93:57:02:56:ca:b4:59:07:0f:50:36:
                    c1:d4:41:f6:ba:4c:4f:4e:bf:40:33:5b:96:9b:23:
                    cc:97:8e:40:de:d9:1c:5e:0d:22:1e:2f:d5:93:dc:
                    2d:76:cc:70:bc:c5:6e:5c:05:27:79:29:dd:dc:27:
                    ad:52:b7:f7:6d:1f:be:f5:e9:d3:e9:f1:2f:16:d9:
                    20:a8:6f:db:0b:5b:fe:0a:3b:43:ae:f2:df:90:74:
                    16:60:24:c0:0d:e0:09:ef:d0:65:31:fd:d6:e6:bc:
                    b1:c6:63:43:fd:24:6f:53:53:24:e0:62:c8:36:20:
                    9f:2d:75:b6:ae:f3:9a:cf:3f:dc:2e:6c:af:6a:70:
                    18:c0:43:3d:26:f5:4f:de:da:eb:a8:5b:4d:16:86:
                    d5:c3:6c:20:7c:04:25:51:b9:4b:87:f4:a0:17:59:
                    e0:ca:09:07:22:1c:54:5b:ce:8b:3f:7b:3d:f8:60:
                    b1:c2:55:64:71:91:51:d2:42:cb:32:73:bb:34:17:
                    40:d5:2b:2c:f3:6c:fb:8b:9b:82:49:f5:92:7f:6b:
                    87:1f:8a:50:89:73:fa:b7:f7:79:ea:1c:42:5c:63:
                    3d:6f:b0:2a:6c:42:5c:f0:8b:c8:e9:7c:ae:97:74:
                    65:b3:83:59:cc:6b:c6:7e:8b:13:2d:bf:ca:f5:f1:
                    e7:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:1D:84:C2:01:C6:1C:7E:B9:E3:6B:F9:31:92:35:47:08:C7:69:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/52cd4476-4e97-30ed-a5d8-6b33031fc8d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.114.152.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:87:c7:93:34:f8:2c:61:54:33:66:55:74:eb:48:5d:43:39:
         a8:56:30:05:45:a6:e1:7f:22:9b:aa:86:96:d5:80:04:53:c3:
         6d:20:46:b9:87:c8:50:eb:75:5f:56:90:18:cb:ab:a7:5f:65:
         be:a5:e7:1e:a4:42:b1:85:cf:4e:18:fd:bd:88:a7:3a:0f:e7:
         20:b0:88:b0:4d:55:41:8d:f3:4d:28:b3:86:f8:59:2c:7e:ae:
         f4:7f:73:18:12:b7:2b:d4:5f:bf:38:ee:f6:df:e1:e6:8a:4f:
         88:46:b2:9a:52:81:0f:6e:b2:96:3a:dd:0e:80:20:66:b5:ce:
         e3:a9:00:95:12:34:39:4d:1c:37:17:b3:67:46:0a:30:45:aa:
         de:27:21:9f:ce:6c:93:cd:8b:1c:5a:e2:ac:eb:af:9e:99:11:
         a1:42:9a:65:e3:46:73:5f:5c:a1:45:74:0f:bd:fe:df:b9:e6:
         8a:40:b2:f6:3c:02:4d:7a:78:ac:c4:21:50:62:69:16:e8:c7:
         06:34:64:cb:46:eb:39:9b:ce:57:eb:88:64:cb:aa:67:fa:90:
         0d:51:51:b4:ba:42:73:cc:6c:e2:8c:b8:4f:c6:62:2e:4a:e3:
         b6:33:d4:28:f3:09:38:0d:36:fc:f7:87:5e:cf:b2:13:50:ae:
         4d:61:7d:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 05:50:19 2024 by rpki-client on console-fra.rpki-client.org