Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/543a11b8-55b2-38a0-9fc7-1116396ad726.roa
File:                     543a11b8-55b2-38a0-9fc7-1116396ad726.roa (raw, json)
Hash identifier:          DvR5ui+W8nSj7mkBwdg+eCfcjw7SCk2TWIVzoZTIOnE=
Subject key identifier:   63:73:EA:D7:6F:43:E2:7B:87:C5:B9:E2:C9:F9:1A:F4:C2:AF:5D:96
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285847A6627AB5C0BC3A39ABE474E0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/543a11b8-55b2-38a0-9fc7-1116396ad726.roa
Signing time:             Thu 24 Oct 2024 17:42:34 +0000
ROA not before:           Thu 24 Oct 2024 17:42:34 +0000
ROA not after:            Wed 22 Jan 2025 18:42:34 +0000
asID:                     210644
IP address blocks:        50.114.82.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:a6:62:7a:b5:c0:bc:3a:39:ab:e4:74:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Oct 24 17:42:34 2024 GMT
            Not After : Jan 22 18:42:34 2025 GMT
        Subject: CN=f5b665ab-5009-4837-9d30-0ab8d20cfe2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:31:33:6d:e2:2e:32:cb:65:ea:a4:80:a3:1a:
                    46:8c:a5:bd:c5:d6:82:84:64:31:88:70:78:1d:c1:
                    4c:b0:e9:08:05:f8:88:24:bb:a7:b4:b9:d8:7a:42:
                    0f:85:40:c6:0c:76:83:42:1c:87:a0:0a:8b:a0:3b:
                    da:d9:03:80:9c:9d:f0:95:c5:cf:09:61:f8:1e:47:
                    c9:0c:b8:59:f7:3c:83:9a:77:d1:c0:88:d3:5b:f9:
                    73:9e:72:55:79:1e:cf:bd:f9:3f:5a:8c:f8:7b:f4:
                    5f:0d:3b:33:fa:2e:3b:e3:e2:d3:7b:2d:19:f1:fc:
                    a3:1d:db:82:2d:9d:8b:c3:4f:61:c2:1f:94:e0:b1:
                    3a:26:40:99:a7:9c:33:18:31:91:39:f2:4c:e1:6e:
                    b3:7b:de:02:e7:d2:d4:73:bb:30:dd:e5:91:f8:6b:
                    25:3e:37:cc:13:8c:24:75:b7:82:7f:a0:4c:e1:19:
                    bb:d2:5a:68:bf:55:5a:e1:1e:76:fe:6f:ae:06:27:
                    7d:98:78:b4:5b:86:78:32:02:b2:c9:17:62:0d:99:
                    93:ab:76:39:24:13:a8:fd:11:c1:a0:4e:b7:f3:aa:
                    07:aa:8c:17:17:26:cf:64:9b:bd:6a:10:b2:db:8f:
                    2c:98:ad:7c:af:34:e1:14:d2:e9:f3:6a:1a:f8:7e:
                    2d:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:73:EA:D7:6F:43:E2:7B:87:C5:B9:E2:C9:F9:1A:F4:C2:AF:5D:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/543a11b8-55b2-38a0-9fc7-1116396ad726.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.114.82.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:96:a3:cc:ce:b8:8f:aa:91:cf:a2:63:8d:1d:b5:7d:ac:b5:
         c3:0e:e5:ab:3d:85:45:95:34:18:84:f8:d5:fb:23:c4:f7:9b:
         c2:f6:bd:cc:49:f2:75:96:4a:2e:ea:2a:f2:0b:4d:66:7d:bb:
         86:31:57:02:e9:b0:36:d7:41:4b:9f:4a:28:11:18:3c:8a:c1:
         0b:ac:8f:47:73:8c:fb:5e:bb:01:42:47:9d:23:78:d1:af:1e:
         fc:94:8a:a7:39:27:22:cf:2a:df:4a:4d:a6:e5:ad:92:27:0c:
         c8:81:8f:7d:ea:a8:aa:c3:4a:bb:18:f7:d5:99:a6:a7:00:ba:
         d3:c1:75:ea:f4:55:ef:ce:65:ec:0b:1e:da:a4:ba:79:8f:0a:
         68:55:40:65:fc:ed:37:3b:ce:35:a4:08:0f:e6:d9:b0:25:fc:
         dc:5a:2a:d0:13:c3:cf:3c:63:ab:0a:59:08:72:af:d3:46:0a:
         48:eb:ca:7b:5b:e2:ac:21:d8:a5:01:9a:e5:e6:65:25:3c:98:
         78:37:fc:43:8d:17:8b:58:28:3a:7c:66:34:1f:22:82:b4:3a:
         e5:aa:35:0c:13:14:48:29:fe:2d:85:a7:2c:8e:91:af:80:8b:
         a1:1f:c3:bb:aa:72:aa:f3:77:a4:e2:27:17:f8:51:b2:35:6b:
         d8:66:e5:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 05:50:19 2024 by rpki-client on console-fra.rpki-client.org