Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/81c10a6d-7328-34f3-9ce8-c3c0a78b7870.roa
File:                     81c10a6d-7328-34f3-9ce8-c3c0a78b7870.roa (raw, json)
Hash identifier:          KIauT0r3I3itCNtKxci88cHjKxREDzvs5ENqctn91eA=
Subject key identifier:   11:ED:DA:FE:17:A7:25:37:06:E5:49:21:1F:14:AD:89:AC:6B:1B:A3
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F432858454F02BFD15680A5F189811980
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/81c10a6d-7328-34f3-9ce8-c3c0a78b7870.roa
Signing time:             Sun 24 Mar 2024 01:00:24 +0000
ROA not before:           Sun 24 Mar 2024 01:00:24 +0000
ROA not after:            Sat 22 Jun 2024 01:00:24 +0000
asID:                     399300
IP address blocks:        50.114.97.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:4f:02:bf:d1:56:80:a5:f1:89:81:19:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Mar 24 01:00:24 2024 GMT
            Not After : Jun 22 01:00:24 2024 GMT
        Subject: CN=be483bc2-47ee-4be9-be1b-2e43be34e04d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:61:2c:c4:8d:60:b0:73:38:ff:c6:d2:e4:90:
                    e8:ce:41:0e:07:a8:a0:c7:70:70:70:ce:fe:db:8d:
                    ee:ea:57:ee:e4:76:db:35:c3:03:bd:7e:08:d6:a9:
                    22:43:83:d8:6b:70:d2:58:88:83:64:d2:3a:a9:a1:
                    3d:83:f5:8b:cc:cb:c3:58:cb:27:d3:88:f5:4b:88:
                    ad:c8:e1:7f:cd:27:ae:7e:34:92:1e:b5:d5:98:88:
                    93:e6:24:2e:82:b7:22:c9:40:0e:c4:d1:c4:85:47:
                    a0:11:e7:04:7c:0d:67:41:c9:3c:50:2b:03:1c:47:
                    50:97:e0:15:53:e2:d6:20:f8:3b:6b:91:14:58:03:
                    94:91:b1:1b:7f:fc:20:6e:e0:45:ad:13:eb:b9:da:
                    06:59:4a:0c:94:c1:b7:23:b5:70:28:16:c4:7c:cb:
                    25:45:e6:77:53:de:55:a7:a4:7f:bb:be:d6:b8:f0:
                    36:07:a8:69:0f:7f:c4:fa:b5:2e:e1:c5:6c:4b:19:
                    ec:0f:83:ad:30:db:14:d3:0c:d9:dd:b5:07:31:95:
                    4f:ae:73:3c:f5:20:40:61:c1:bc:92:3a:18:d3:ac:
                    d2:ae:ef:77:9f:ae:13:c8:6b:27:ca:b2:a2:86:38:
                    e0:ed:50:0e:37:af:5e:10:b1:b7:3a:87:0a:ed:da:
                    63:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:ED:DA:FE:17:A7:25:37:06:E5:49:21:1F:14:AD:89:AC:6B:1B:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/81c10a6d-7328-34f3-9ce8-c3c0a78b7870.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.114.97.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:d0:05:3a:ab:b6:66:9a:ee:09:1e:96:10:c5:c4:25:48:3c:
         96:5c:91:08:cb:23:bd:64:95:c8:b6:29:3b:bc:3e:a6:62:5c:
         e7:bf:43:eb:42:81:a1:61:8d:b9:c2:26:2c:e4:fb:cf:b1:af:
         77:00:33:66:97:88:a9:0b:9c:ca:a4:ba:2c:bb:91:6b:84:dc:
         86:df:a8:38:34:80:cd:59:bd:9a:c0:55:96:1e:86:79:0b:4b:
         ad:a0:40:4d:fb:9d:04:27:4f:b4:4f:2b:8d:36:9f:ce:0a:a5:
         f7:2a:13:12:dc:5b:b9:70:b7:bd:14:1a:62:4e:27:cc:90:09:
         e5:2d:3e:7f:6a:7d:0f:96:49:a7:16:a6:70:2f:e8:7f:1d:7f:
         f0:b3:1a:11:13:f0:77:cd:b6:f0:3e:79:9f:01:42:d9:c0:fe:
         18:bc:0a:ce:af:69:2d:6a:cb:e6:10:a3:6c:3e:f5:b9:28:7d:
         a9:48:2a:c7:3a:7e:83:d4:9c:68:20:28:fe:82:0b:dc:e2:8e:
         06:8f:05:0c:ff:6c:7a:27:52:ac:04:e9:12:c8:49:d2:1d:44:
         55:bf:e0:80:b4:5a:44:74:72:c5:cd:b5:99:26:a0:a6:9a:7d:
         1f:78:78:30:4c:f5:69:29:d7:d1:f3:3b:97:be:5f:95:8d:62:
         d5:4e:fe:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 15:32:23 2024 by rpki-client on console-ams.rpki-client.org