Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/87e5cadd-74c9-3d83-a843-6a634174d81a.roa
File:                     87e5cadd-74c9-3d83-a843-6a634174d81a.roa (raw, json)
Hash identifier:          HTmeN1Ovqju8Ut1Y85R6jPKqbpGSzIlSvqI0c5C2igI=
Subject key identifier:   1D:9B:85:D9:C4:FF:A1:39:FF:FA:F5:A8:A2:9F:3F:4D:93:36:B1:23
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285847C8D9E27C2C96033A6DC64600
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/87e5cadd-74c9-3d83-a843-6a634174d81a.roa
Signing time:             Wed 06 Nov 2024 02:00:28 +0000
ROA not before:           Wed 06 Nov 2024 02:00:28 +0000
ROA not after:            Tue 04 Feb 2025 02:00:28 +0000
asID:                     61317
IP address blocks:        50.114.96.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c8:d9:e2:7c:2c:96:03:3a:6d:c6:46:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Nov  6 02:00:28 2024 GMT
            Not After : Feb  4 02:00:28 2025 GMT
        Subject: CN=aa801724-d1c0-4080-9c86-d0a2c13593ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:c4:c6:ac:97:02:f9:aa:ed:7b:f5:1c:85:72:
                    65:7a:d5:15:e8:c8:ba:8a:b6:2e:59:7a:8f:2e:50:
                    0e:f3:2e:fa:22:d8:bd:16:23:fa:89:1d:5d:18:6a:
                    02:18:76:5f:39:fc:82:b6:f5:fa:b3:63:dd:98:5d:
                    06:8a:b1:f9:55:7b:d5:a5:7a:53:c7:ff:09:71:61:
                    2d:ad:cd:02:09:1a:21:51:d6:2f:e5:31:b7:16:59:
                    73:b3:fa:04:65:c4:26:08:e9:d1:af:dd:59:29:4a:
                    d8:46:f5:f9:ee:7b:39:7f:61:2e:d8:82:49:87:b7:
                    a4:e1:83:cb:21:96:20:9d:16:19:03:16:ea:bb:24:
                    3c:03:50:8b:6f:5b:31:ef:7d:7e:45:8d:25:6c:12:
                    ec:21:79:c0:44:b9:e3:5e:22:6d:dc:ec:78:d2:93:
                    61:de:13:39:ce:5c:99:48:c3:e7:46:9a:58:d7:20:
                    51:2e:f8:76:22:be:00:65:94:7f:43:2f:3d:a2:82:
                    e8:c1:8f:53:c6:af:c9:7a:23:69:d8:d1:2b:50:85:
                    63:49:ea:43:ed:5a:63:eb:0b:48:c5:d6:03:e2:5d:
                    6a:52:e4:4e:47:76:ce:c6:c9:6e:71:23:db:22:7a:
                    5b:a5:82:73:cf:78:aa:21:07:fb:1b:47:d3:08:75:
                    22:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:9B:85:D9:C4:FF:A1:39:FF:FA:F5:A8:A2:9F:3F:4D:93:36:B1:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/87e5cadd-74c9-3d83-a843-6a634174d81a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.114.96.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:a1:9e:21:3e:b8:56:c9:85:b4:47:36:bd:07:8e:4d:bd:b6:
         7f:93:2f:48:d3:06:0c:31:0d:a3:41:f5:4f:83:e8:e1:1b:c9:
         ea:14:75:27:0d:58:cc:77:ec:fe:33:c9:2a:58:51:73:b4:df:
         ed:c5:e4:5a:53:74:75:32:da:4e:5b:9c:6d:32:26:4f:24:59:
         ff:a0:f6:1f:54:4c:65:04:8d:af:f1:5e:01:ee:09:41:d8:33:
         c8:5d:b2:e6:1b:23:9f:c1:80:20:8c:73:95:e4:4e:4b:46:e2:
         99:a8:9c:f6:e0:67:dc:c6:d8:84:f2:ec:55:b4:4d:aa:2c:b2:
         85:01:5d:a9:5b:4d:c0:53:aa:84:0b:80:23:90:1f:b9:ca:13:
         b1:1a:f6:23:aa:56:2f:44:f3:04:8f:71:43:2f:f4:a5:ba:45:
         c8:5c:7d:8c:d2:df:d6:4f:58:d7:74:32:62:7f:12:90:9c:c9:
         f3:3b:58:bb:a1:03:07:95:67:8b:23:a7:0e:76:d2:e1:76:82:
         b7:00:ae:24:d1:5c:26:52:59:a9:37:e0:62:91:ac:ee:ec:67:
         7f:5c:e4:e7:9e:f3:2b:a2:d4:1c:fa:bc:bc:67:fb:c9:b6:16:
         19:eb:b0:0c:8f:c9:7f:b6:8e:3d:ec:5d:bf:f0:53:d0:77:1a:
         da:36:64:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:34:59 2024 by rpki-client on console-fra.rpki-client.org