Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/53204f03-db0e-3111-bb7e-b061227b802a.roa
File:                     53204f03-db0e-3111-bb7e-b061227b802a.roa (raw, json)
Hash identifier:          tRw00QdozSf/Zy31DkZMzyDDPnFM89CTK2SqieeXMsU=
Subject key identifier:   B4:B4:D4:9B:7D:8A:7D:49:BA:22:7D:7E:40:39:B6:EE:7D:78:1B:D9
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285845280AF8AB7A01CA8103047900
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/53204f03-db0e-3111-bb7e-b061227b802a.roa
Signing time:             Sun 10 Mar 2024 02:00:25 +0000
ROA not before:           Sun 10 Mar 2024 02:00:25 +0000
ROA not after:            Sat 08 Jun 2024 01:00:25 +0000
asID:                     61317
IP address blocks:        50.114.127.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:28:0a:f8:ab:7a:01:ca:81:03:04:79:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Mar 10 02:00:25 2024 GMT
            Not After : Jun  8 01:00:25 2024 GMT
        Subject: CN=a4239ff3-6c6c-45dc-b76c-33155e5bf774
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:1d:5e:f6:b7:e4:86:c8:35:d5:42:65:c1:fa:
                    85:64:d6:34:f4:99:c5:c3:b2:7f:a2:99:2d:40:54:
                    ae:46:6b:d0:3a:63:d3:b6:4d:81:86:8f:30:be:da:
                    41:ce:31:09:7d:b8:65:87:eb:5a:77:dc:2b:e2:32:
                    f3:3d:2c:ef:15:99:fe:43:50:fa:ac:84:b6:4f:d6:
                    b1:e3:af:cf:40:68:09:3d:16:30:e3:74:90:75:35:
                    73:04:1a:d7:ac:bc:6a:6f:8d:28:6e:8c:7b:da:4f:
                    24:55:8a:84:68:85:d6:8c:8c:58:3b:60:d0:b8:83:
                    06:31:94:42:e8:28:34:ae:9f:a6:50:ea:6a:8f:82:
                    ac:76:2a:93:5b:ef:94:d9:33:7f:8a:80:00:dc:6b:
                    2a:3e:f1:7e:36:30:8e:62:0d:aa:41:b4:e3:b5:15:
                    b6:9a:01:07:02:c0:44:1a:e9:fe:78:14:d0:ca:09:
                    cf:64:ba:70:b0:2b:12:3c:d6:ec:7e:10:f0:b1:48:
                    50:0b:e6:42:5e:4c:d1:a3:9a:db:a7:af:fe:d9:ee:
                    e8:69:44:61:bb:f3:92:8e:ca:0b:fa:0c:16:d3:6e:
                    0d:9e:bc:cf:c3:9a:45:3a:dd:fc:f3:bf:03:dc:e0:
                    8a:b0:af:82:89:cd:b0:bb:29:48:77:d8:87:d2:df:
                    83:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:B4:D4:9B:7D:8A:7D:49:BA:22:7D:7E:40:39:B6:EE:7D:78:1B:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/53204f03-db0e-3111-bb7e-b061227b802a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.114.127.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:36:b5:87:9a:52:2c:e9:11:98:dc:63:9e:1d:9b:61:a3:8b:
         7c:95:f6:bc:44:1a:f4:4f:c1:ef:3c:63:a7:10:07:53:c4:92:
         50:70:33:3f:a8:2e:62:27:ca:72:29:96:23:cc:3d:6b:0e:39:
         2f:b0:9c:dc:f4:63:f0:25:de:f0:23:63:2a:93:c3:5e:84:6e:
         a5:c3:06:5c:44:94:cd:e0:df:6d:23:bc:89:e1:b5:f3:ac:00:
         96:a9:44:ea:2f:67:03:3a:23:d3:95:b2:8c:e8:a7:aa:0c:07:
         a1:6a:38:2f:77:7c:78:63:b9:be:da:12:a3:90:47:97:83:3d:
         c4:18:40:b5:a1:1d:bb:ea:05:f8:40:36:47:f6:cd:75:00:d4:
         ce:d6:81:ed:4a:09:cd:7c:ef:7c:a5:4c:cb:d6:69:b0:49:8f:
         5b:8d:1f:61:6a:dc:18:10:47:78:8b:47:25:ae:21:69:6c:32:
         ff:bf:3a:b6:74:49:14:17:aa:40:c6:7d:89:b0:da:3c:7e:f4:
         23:00:a8:b5:22:08:9b:7b:30:aa:fd:e2:53:23:0e:62:04:3e:
         00:c7:0c:5e:d8:6a:50:b1:1b:01:9e:b2:01:2f:b6:0c:cd:46:
         fa:10:5b:4b:4b:f4:37:a6:fe:20:dd:81:72:a4:db:48:8a:0d:
         7e:a1:de:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 08:37:05 2024 by rpki-client on console-ams.rpki-client.org