Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/88b85894-3e17-3d1f-8a6b-a25c17bb0870.roa
File:                     88b85894-3e17-3d1f-8a6b-a25c17bb0870.roa (raw, json)
Hash identifier:          zfjCpc1D8xmtPniUdqVcYWGq2nDjxxoFiq9WQd3n8FA=
Subject key identifier:   E9:34:81:80:92:B4:29:62:AE:E6:73:D9:CD:8E:53:79:71:55:F2:ED
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F432858479EDBD943E3E5D65D72381780
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/88b85894-3e17-3d1f-8a6b-a25c17bb0870.roa
Signing time:             Tue 22 Oct 2024 01:00:31 +0000
ROA not before:           Tue 22 Oct 2024 01:00:31 +0000
ROA not after:            Mon 20 Jan 2025 02:00:31 +0000
asID:                     400725
IP address blocks:        50.114.114.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:9e:db:d9:43:e3:e5:d6:5d:72:38:17:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Oct 22 01:00:31 2024 GMT
            Not After : Jan 20 02:00:31 2025 GMT
        Subject: CN=681516af-a61c-4360-ada1-54fc25d142c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fc:d9:a8:e0:6b:c8:6d:d7:55:26:9b:df:b5:80:
                    83:4a:35:f0:77:8b:a0:76:14:07:7f:ea:fe:2b:46:
                    da:19:51:5f:a3:0e:b8:d5:cb:16:da:01:3d:9b:1d:
                    13:93:e3:4a:b9:5e:ee:9d:48:19:3d:52:18:6a:93:
                    7e:d6:ff:67:2a:96:64:e3:6c:e5:ad:d1:dd:5b:2f:
                    c4:b9:e4:63:88:ae:90:29:04:15:8a:26:8d:a5:52:
                    55:0c:32:c6:e6:46:8d:c0:9d:ea:51:08:8e:9e:f8:
                    16:f2:b3:12:cf:e5:5a:58:23:f8:cd:8f:f2:8a:c8:
                    95:7e:da:1f:8a:73:a2:ab:9e:98:28:9c:63:1c:c5:
                    52:96:16:9d:b0:22:2e:6a:19:70:4f:d7:21:a9:ce:
                    1d:bc:69:74:91:bd:dd:e2:f1:6c:a6:68:4f:a5:4d:
                    5f:99:e4:7f:ee:cc:0a:6b:2b:b7:a1:e4:f8:a7:f0:
                    fa:35:fb:8c:db:a4:2f:15:8c:db:98:90:d8:ff:bb:
                    6a:57:4a:75:63:7e:e5:c6:20:28:99:2a:fe:4a:f6:
                    dd:f7:fa:b0:f3:19:91:f2:55:b2:03:fe:47:53:0b:
                    2a:7c:31:c9:16:58:a8:2b:8a:2c:a0:50:41:9d:83:
                    c2:51:1f:2d:10:0a:98:d4:8f:8e:34:77:c1:36:a1:
                    d5:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:34:81:80:92:B4:29:62:AE:E6:73:D9:CD:8E:53:79:71:55:F2:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/88b85894-3e17-3d1f-8a6b-a25c17bb0870.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.114.114.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:51:4a:f0:09:d2:05:2f:b2:0d:8a:21:cd:3b:59:c9:93:df:
         2d:20:05:de:9b:b8:3f:24:ee:af:f6:c9:1e:33:5e:9d:f3:bc:
         3d:59:60:29:30:87:00:f5:7f:82:ed:e5:3f:79:5b:d8:0e:4c:
         e4:44:4c:62:48:17:b3:ce:c3:4c:4b:66:98:75:48:40:34:00:
         a3:b0:d9:f6:2f:04:42:8c:66:17:3d:17:80:1c:92:65:d5:73:
         95:4b:5f:6d:21:b0:58:f8:b5:43:fb:58:1e:f8:a3:8a:3f:cf:
         9f:d4:73:7f:8d:0e:99:d2:36:4d:2f:5a:92:72:65:f7:11:05:
         d8:ef:80:83:5d:62:d4:6e:c4:85:97:2e:74:3e:37:de:cd:fb:
         41:52:2d:55:16:1d:e8:e5:7e:46:e2:96:8d:7d:ff:b1:38:6d:
         f4:81:91:b1:f5:ec:33:68:cd:36:e8:e8:88:f1:0b:23:be:4c:
         cb:e8:de:ca:a8:48:c3:20:17:c0:44:6d:56:3d:50:91:f7:87:
         dc:5a:76:bd:ea:70:9a:09:29:82:39:49:eb:c9:5d:ad:9b:91:
         7d:fe:0f:a0:4c:0a:41:91:1f:8c:71:dd:49:09:53:41:8f:c1:
         9c:e1:cc:35:09:2b:c3:b0:ac:bf:a3:6e:df:09:13:00:33:49:
         06:41:3b:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 05:50:23 2024 by rpki-client on console-fra.rpki-client.org