Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/5438ebe8-f89c-377e-95ac-e3af27862b07.roa
File:                     5438ebe8-f89c-377e-95ac-e3af27862b07.roa (raw, json)
Hash identifier:          DB1y24diar1tXR5dwCElasugB8kx2R9HdPQsux5X/8U=
Subject key identifier:   59:98:45:C0:C5:67:0E:24:ED:FD:D7:59:36:B3:0D:AD:74:BF:98:55
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285847CA3F84CF9A169F50ADBF6300
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/5438ebe8-f89c-377e-95ac-e3af27862b07.roa
Signing time:             Wed 06 Nov 2024 14:00:41 +0000
ROA not before:           Wed 06 Nov 2024 14:00:41 +0000
ROA not after:            Tue 04 Feb 2025 14:00:41 +0000
asID:                     21859
IP address blocks:        50.114.197.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ca:3f:84:cf:9a:16:9f:50:ad:bf:63:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Nov  6 14:00:41 2024 GMT
            Not After : Feb  4 14:00:41 2025 GMT
        Subject: CN=38ed6f3c-af09-436e-89fa-80bf9ccedfe5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:40:77:66:3c:cb:4b:5c:47:37:03:34:0b:82:
                    3f:2f:b0:7e:75:19:ff:95:20:5c:fd:51:8a:25:5b:
                    f7:0b:df:44:1f:ce:c1:f7:d4:f5:2d:60:00:7b:99:
                    65:d7:9b:09:e1:c1:a8:b0:24:28:15:49:d9:ee:49:
                    c2:dd:c7:6a:5e:de:c6:9f:25:60:72:2a:db:75:85:
                    a0:3b:66:6d:70:2e:52:cf:0f:05:ae:f1:ed:aa:e1:
                    bc:3f:8d:1b:f1:5b:98:34:13:fb:80:ab:f5:87:4b:
                    90:2d:9a:ea:21:a8:3f:69:4c:08:84:b1:cf:e5:a6:
                    8a:c1:d9:cf:64:91:25:a9:f5:0c:54:d6:3e:cf:74:
                    1c:db:17:c3:8b:2b:bf:cb:d7:99:36:e6:cf:9d:c9:
                    8f:16:89:0d:5f:d6:b0:0c:22:0e:bd:b4:63:61:38:
                    7a:8f:39:50:d2:a1:09:2f:1a:dc:4b:ee:a1:83:36:
                    83:de:a5:d6:20:e9:d7:26:7b:10:2f:2c:b5:e9:b2:
                    98:9d:01:3b:2e:6f:63:8e:16:ee:f2:7c:d0:7b:d9:
                    82:aa:1c:9d:25:b8:76:0a:3d:b0:a1:52:b5:a0:8d:
                    ba:e9:16:c8:98:84:03:4c:22:b0:63:21:9c:3d:3e:
                    62:70:f1:80:53:c9:67:88:30:5f:9d:d9:38:13:4d:
                    59:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:98:45:C0:C5:67:0E:24:ED:FD:D7:59:36:B3:0D:AD:74:BF:98:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/5438ebe8-f89c-377e-95ac-e3af27862b07.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.114.197.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:9b:4e:41:2c:30:52:4d:8e:81:47:36:e1:2b:3b:6b:13:a3:
         b8:ae:5c:2c:e5:93:6d:93:4e:de:9c:8f:21:eb:ee:27:8d:d9:
         bc:3c:b5:48:6b:db:a3:de:0f:92:49:ab:48:0e:99:06:d6:eb:
         6c:15:9a:60:36:de:76:28:2e:a8:3d:36:03:97:b0:58:95:0f:
         1a:31:57:07:cd:21:9d:a6:ff:0b:f0:9f:3a:d5:0a:ca:5b:d8:
         27:0f:bf:6d:3c:14:0f:aa:a4:ea:5b:c6:43:a8:ef:b9:26:24:
         6c:6a:0c:38:50:a2:4e:8d:29:34:b1:ee:cf:c1:f5:5c:1e:9d:
         76:48:db:71:4d:b3:a1:70:f4:49:0c:f0:57:45:f3:88:25:cc:
         20:ad:4d:61:81:4b:a9:8b:58:ea:9e:c4:25:47:cc:80:99:5d:
         21:a8:e7:cb:9b:1c:9d:c1:ae:9c:8d:12:3d:ed:df:fe:84:f4:
         76:15:f2:1f:23:d4:ab:80:3b:e2:42:f8:39:aa:4f:e8:1c:04:
         ca:2b:fd:96:ab:18:fb:96:14:ab:a5:28:65:82:46:b6:2b:e5:
         16:11:e7:09:91:fc:12:db:53:bd:4e:52:10:05:a7:3a:f7:5b:
         e2:54:9a:13:a9:bc:78:e3:06:3c:3b:18:14:80:88:5d:b5:5e:
         30:19:8b:64
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfKP4TPmhafUK2/YwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI0MTEwNjE0MDA0MVoXDTI1MDIwNDE0MDA0MVowLzEtMCsGA1UEAxMk
MzhlZDZmM2MtYWYwOS00MzZlLTg5ZmEtODBiZjljY2VkZmU1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2UB3ZjzLS1xHNwM0C4I/L7B+dRn/lSBc/VGK
JVv3C99EH87B99T1LWAAe5ll15sJ4cGosCQoFUnZ7knC3cdqXt7GnyVgcirbdYWg
O2ZtcC5Szw8FrvHtquG8P40b8VuYNBP7gKv1h0uQLZrqIag/aUwIhLHP5aaKwdnP
ZJElqfUMVNY+z3Qc2xfDiyu/y9eZNubPncmPFokNX9awDCIOvbRjYTh6jzlQ0qEJ
LxrcS+6hgzaD3qXWIOnXJnsQLyy16bKYnQE7Lm9jjhbu8nzQe9mCqhydJbh2Cj2w
oVK1oI266RbImIQDTCKwYyGcPT5icPGAU8lniDBfndk4E01ZLQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFmYRcDFZw4k7f3XWTazDa10v5hVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvNTQzOGViZTgtZjg5Yy0z
NzdlLTk1YWMtZTNhZjI3ODYyYjA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAMnLFMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIabTkEsMFJNjoFHNuErO2sTo7iuXCzlk22TTt6cjyHr7ieN2bw8tUhr
26PeD5JJq0gOmQbW62wVmmA23nYoLqg9NgOXsFiVDxoxVwfNIZ2m/wvwnzrVCspb
2CcPv208FA+qpOpbxkOo77kmJGxqDDhQok6NKTSx7s/B9VwenXZI23FNs6Fw9EkM
8FdF84glzCCtTWGBS6mLWOqexCVHzICZXSGo58ubHJ3BrpyNEj3t3/6E9HYV8h8j
1KuAO+JC+DmqT+gcBMor/ZarGPuWFKulKGWCRrYr5RYR5wmR/BLbU71OUhAFpzr3
W+JUmhOpvHjjBjw7GBSAiF21XjAZi2Q=
-----END CERTIFICATE-----
Generated at Thu Nov 21 19:15:37 2024 by rpki-client on console-fra.rpki-client.org