Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/63e4aa4e-5f91-3888-9397-0b430eb4e4ea.roa
File:                     63e4aa4e-5f91-3888-9397-0b430eb4e4ea.roa (raw, json)
Hash identifier:          89L6b0eFYFO0QNsr99eP25qSFDTRRAR+MFst4msKU/c=
Subject key identifier:   37:99:A6:6A:59:E8:44:1D:AA:DA:0F:52:07:04:64:CA:8F:FA:30:20
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285848A9962D418AF8B44DA0C9C600
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/63e4aa4e-5f91-3888-9397-0b430eb4e4ea.roa
Signing time:             Sat 25 Jan 2025 14:00:52 +0000
ROA not before:           Sat 25 Jan 2025 14:00:52 +0000
ROA not after:            Fri 25 Apr 2025 13:00:52 +0000
asID:                     21859
IP address blocks:        50.114.60.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 19 Feb 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a9:96:2d:41:8a:f8:b4:4d:a0:c9:c6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jan 25 14:00:52 2025 GMT
            Not After : Apr 25 13:00:52 2025 GMT
        Subject: CN=f3ef4c17-017a-40bb-a1ef-7915b19ed163
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:70:b6:c4:14:37:a3:3d:bf:dc:0b:b1:47:f6:
                    1a:49:4d:a0:eb:4e:6c:ca:2c:73:16:dc:f8:91:7c:
                    64:e8:7d:82:e6:2e:e0:85:c1:98:9e:78:49:b3:eb:
                    b2:ac:a4:3f:03:fd:51:cf:e3:0f:3c:c7:9c:65:0a:
                    5a:ae:85:b4:24:9a:14:d5:b1:99:6a:17:0c:66:23:
                    b5:74:f0:d6:8c:8c:74:00:09:81:5d:8f:31:12:d8:
                    24:b9:cf:71:72:2d:08:26:0e:fe:4b:15:ce:68:0a:
                    e0:c6:05:fc:8f:ae:a5:f9:d2:a4:4d:ee:49:36:0e:
                    08:dd:50:7c:4d:d8:01:80:ca:cc:92:db:62:c1:f6:
                    2d:1f:06:cf:28:2b:fa:56:24:ab:16:06:ae:13:f7:
                    8c:5d:cb:88:34:8b:43:bd:6c:a5:2d:7c:2a:84:8e:
                    7c:8b:c4:68:68:2c:a9:f8:90:86:3d:1a:33:95:ee:
                    4e:10:5e:19:fb:c3:91:40:af:42:11:b7:e5:2f:a3:
                    2f:55:ce:d5:fd:ae:4b:18:93:ee:ad:54:d2:88:cc:
                    d3:20:9c:22:0a:d8:cb:9f:29:5f:b8:f8:76:ef:43:
                    30:f3:06:57:73:f5:7c:b5:51:d6:f4:44:98:d0:0c:
                    51:38:1b:2e:a9:1c:27:90:b2:c1:67:d5:9c:1f:2d:
                    1a:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:99:A6:6A:59:E8:44:1D:AA:DA:0F:52:07:04:64:CA:8F:FA:30:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/63e4aa4e-5f91-3888-9397-0b430eb4e4ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.114.60.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:30:6b:a4:83:ee:d5:33:5d:f7:77:ab:9c:6c:dc:84:8c:b6:
         be:c2:4b:65:4a:2d:c4:59:32:e0:27:44:61:e6:01:29:f3:53:
         3b:be:7f:78:29:02:d5:b5:48:97:80:4f:de:af:44:38:f1:02:
         5c:8a:94:4b:e3:27:04:69:0c:a6:f5:d2:65:f7:e8:e0:3d:0c:
         75:63:9c:08:dc:2b:27:4e:f5:78:98:96:b2:e4:a3:1a:f3:04:
         08:5b:28:49:32:bd:6a:93:35:88:4d:53:06:87:43:9a:06:fd:
         3f:2a:07:1d:15:4a:46:51:77:ca:0a:5a:57:9b:1c:f3:be:d3:
         c9:49:99:ee:08:70:94:b1:c1:71:5a:8d:30:c8:48:0e:93:3f:
         d4:dc:fb:6a:12:83:83:d9:5f:53:96:65:7e:79:b2:69:24:6f:
         62:85:2a:56:dc:71:f3:27:ac:7d:a2:ac:7e:03:ea:38:07:06:
         d1:29:69:93:c1:e9:37:d1:6f:ef:03:ca:3b:21:dd:6d:a9:80:
         d8:53:b8:d2:41:94:82:64:8a:3d:c8:1f:40:92:eb:c4:0b:98:
         8e:ad:1f:d4:bf:86:9d:36:4e:6c:9d:ed:4e:8d:da:55:37:a5:
         a8:3e:5c:fd:1b:21:f0:1b:91:24:f9:20:ad:15:47:ba:b9:98:
         b9:33:11:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:40:31 2025 by rpki-client