Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/7f99ad23-b248-3b28-9d76-d40650d33818.roa
File:                     7f99ad23-b248-3b28-9d76-d40650d33818.roa (raw, json)
Hash identifier:          s229Zu5GAaEnGaurajB579AE1l60KyZvcmxMnIyVWfY=
Subject key identifier:   6A:E9:EF:76:B3:A7:B4:E0:13:3C:F7:31:75:CA:91:09:EA:C5:C8:6E
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584760BF2A5EC93D18C3110BAB80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/7f99ad23-b248-3b28-9d76-d40650d33818.roa
Signing time:             Sun 29 Sep 2024 19:02:44 +0000
ROA not before:           Sun 29 Sep 2024 19:02:44 +0000
ROA not after:            Sat 28 Dec 2024 20:02:44 +0000
asID:                     14315
IP address blocks:        50.114.242.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:60:bf:2a:5e:c9:3d:18:c3:11:0b:ab:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Sep 29 19:02:44 2024 GMT
            Not After : Dec 28 20:02:44 2024 GMT
        Subject: CN=fe563a67-a792-4813-8f8e-32b96e79f1d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:d1:e8:74:09:ef:2c:20:51:04:73:f3:6e:fc:
                    c5:ae:f3:41:12:2f:5e:3b:c8:8a:38:66:01:68:ba:
                    b1:93:bb:28:29:f2:0b:d8:82:ec:ac:2a:18:f0:ea:
                    11:c9:f3:17:0c:ee:7d:53:54:31:88:71:a2:2d:68:
                    23:7e:bf:13:8a:88:2d:d4:2e:9a:e9:19:59:25:de:
                    5a:b3:f9:09:e6:6c:8b:46:c0:62:96:fc:53:a3:42:
                    44:3e:93:2a:8b:ea:9a:86:a2:f8:cb:d7:0e:29:7b:
                    62:a6:d5:85:db:5c:9f:89:6c:35:65:7b:3e:02:2e:
                    ef:90:99:40:fa:7f:b4:38:7a:9c:9d:a1:56:48:30:
                    31:5e:1e:4d:ea:ed:09:08:bc:56:54:93:c3:97:24:
                    c5:08:16:69:6c:e8:5a:ac:ec:51:e7:5b:8b:ac:c6:
                    9d:ef:84:f1:54:e8:f1:f0:e0:61:04:4b:58:ba:7a:
                    ae:45:75:e5:b0:04:5c:d2:7d:1d:bf:2e:3e:72:d3:
                    26:03:c9:12:70:b4:a6:de:fd:bd:32:03:7b:ad:fb:
                    c5:4e:45:09:7b:f8:f7:ee:5a:d3:04:3e:3b:84:38:
                    c1:94:57:2b:a1:e5:2f:90:5a:ed:76:04:e2:5d:6b:
                    68:0f:bb:91:c1:cb:e2:30:78:bc:a2:6a:d3:80:35:
                    1b:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:E9:EF:76:B3:A7:B4:E0:13:3C:F7:31:75:CA:91:09:EA:C5:C8:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/7f99ad23-b248-3b28-9d76-d40650d33818.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.114.242.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:0d:27:fb:2d:78:56:88:f3:8a:7b:c8:c7:90:f1:01:3c:14:
         cc:90:87:14:92:7b:0c:c1:03:6b:a7:e8:c3:7d:0d:48:5e:4f:
         cd:ee:fc:e4:a3:4a:96:42:95:d7:f7:ab:8d:20:2e:c6:7d:b9:
         65:62:b6:89:ea:e5:21:f3:89:7e:24:b1:0d:03:cf:2b:15:66:
         b8:be:d7:4b:1a:50:95:aa:c5:47:89:7e:1b:aa:b2:b1:7e:55:
         4f:0c:f8:d2:8c:26:92:ea:4d:38:de:f8:93:b5:51:d4:d2:39:
         6e:da:43:90:79:87:ec:2f:2d:e2:d3:32:a3:73:d7:5f:48:59:
         69:55:8b:9f:eb:6e:df:fa:c6:52:27:e7:56:42:9e:16:d5:c0:
         48:42:89:5b:30:c1:79:ce:c9:1d:31:50:23:32:dd:99:47:e8:
         5c:74:42:ea:b6:4e:21:90:86:71:f5:85:3f:18:23:83:61:65:
         ca:e1:22:b0:a4:54:fd:1d:ac:2d:85:29:40:14:af:90:e5:cd:
         27:d8:4c:25:d1:b0:98:d4:65:c6:0c:1e:e6:c9:64:05:a7:56:
         55:cc:5d:98:66:d0:af:d4:2c:6a:ad:d9:4d:7d:24:e9:27:6f:
         6d:e1:24:b4:f8:ff:3c:45:dc:92:40:29:4d:29:11:5d:5e:d1:
         c6:2b:82:90
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdgvypeyT0YwxELq4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI0MDkyOTE5MDI0NFoXDTI0MTIyODIwMDI0NFowLzEtMCsGA1UEAxMk
ZmU1NjNhNjctYTc5Mi00ODEzLThmOGUtMzJiOTZlNzlmMWQxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA69HodAnvLCBRBHPzbvzFrvNBEi9eO8iKOGYB
aLqxk7soKfIL2ILsrCoY8OoRyfMXDO59U1QxiHGiLWgjfr8Tiogt1C6a6RlZJd5a
s/kJ5myLRsBilvxTo0JEPpMqi+qahqL4y9cOKXtiptWF21yfiWw1ZXs+Ai7vkJlA
+n+0OHqcnaFWSDAxXh5N6u0JCLxWVJPDlyTFCBZpbOharOxR51uLrMad74TxVOjx
8OBhBEtYunquRXXlsARc0n0dvy4+ctMmA8kScLSm3v29MgN7rfvFTkUJe/j37lrT
BD47hDjBlFcroeUvkFrtdgTiXWtoD7uRwcviMHi8omrTgDUbAwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGrp73azp7TgEzz3MXXKkQnqxchuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvN2Y5OWFkMjMtYjI0OC0z
YjI4LTlkNzYtZDQwNjUwZDMzODE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAMnLyMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAD0NJ/steFaI84p7yMeQ8QE8FMyQhxSSewzBA2un6MN9DUheT83u/OSj
SpZCldf3q40gLsZ9uWVitonq5SHziX4ksQ0DzysVZri+10saUJWqxUeJfhuqsrF+
VU8M+NKMJpLqTTje+JO1UdTSOW7aQ5B5h+wvLeLTMqNz119IWWlVi5/rbt/6xlIn
51ZCnhbVwEhCiVswwXnOyR0xUCMy3ZlH6Fx0Quq2TiGQhnH1hT8YI4NhZcrhIrCk
VP0drC2FKUAUr5DlzSfYTCXRsJjUZcYMHubJZAWnVlXMXZhm0K/ULGqt2U19JOkn
b23hJLT4/zxF3JJAKU0pEV1e0cYrgpA=
-----END CERTIFICATE-----
Generated at Fri Nov 22 06:37:44 2024 by rpki-client on console-ams.rpki-client.org