Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/99030aa8-5573-306e-bb2a-1981f398f6b4.roa
File:                     99030aa8-5573-306e-bb2a-1981f398f6b4.roa (raw, json)
Hash identifier:          bqw4101kvFg+yc70X6kTbPqYdgzcguGUnGDgv2L5D0k=
Subject key identifier:   55:63:CF:16:44:D8:26:63:B7:C7:F2:AD:76:C2:E5:E6:7D:70:26:F9
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F432858477BF65A537ADCF5793509F080
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/99030aa8-5573-306e-bb2a-1981f398f6b4.roa
Signing time:             Wed 09 Oct 2024 13:00:42 +0000
ROA not before:           Wed 09 Oct 2024 13:00:42 +0000
ROA not after:            Tue 07 Jan 2025 14:00:42 +0000
asID:                     271729
IP address blocks:        50.114.62.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:7b:f6:5a:53:7a:dc:f5:79:35:09:f0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Oct  9 13:00:42 2024 GMT
            Not After : Jan  7 14:00:42 2025 GMT
        Subject: CN=ca9e1d8c-471b-4f12-ab2b-67dd7523a7ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:9f:5f:a0:0e:d7:aa:d6:64:63:fd:59:af:8e:
                    f0:18:c7:0e:34:6b:08:9c:a3:b3:06:32:31:1a:e9:
                    54:10:b9:15:79:98:f2:b9:b3:7d:f3:8d:6f:70:ad:
                    e2:dc:ec:6b:c8:34:ca:13:6f:33:bd:87:8c:26:04:
                    2c:c2:f9:1a:77:fe:00:05:d2:2c:3e:10:9c:25:5f:
                    d3:ed:58:79:d4:5c:cc:dd:2c:3d:69:14:45:8d:e6:
                    fd:4a:3b:90:2c:59:36:a1:cf:d0:98:97:b4:a9:84:
                    b9:f2:ce:9a:2b:30:02:27:fb:f2:b4:99:ad:bb:16:
                    c0:e1:d8:67:13:58:2e:f8:4d:08:74:6f:bb:f0:e9:
                    5e:2a:c2:9d:99:c7:12:df:70:57:ca:a8:cb:d1:f6:
                    b6:2b:f4:a9:22:2a:73:6b:ed:33:d5:f8:52:a3:80:
                    2e:d2:b3:a5:cc:d5:f7:f1:a5:e1:a6:b1:7a:fc:5d:
                    14:f0:1c:c4:db:30:ad:f9:b2:60:41:7a:96:6f:89:
                    0c:43:86:2c:11:1f:7a:20:ef:d8:22:c3:1d:9f:d3:
                    70:57:73:0b:d8:ed:6d:b7:0b:2b:17:4a:0f:db:4a:
                    ab:43:9b:48:b0:54:f9:65:9e:c7:0e:b2:b7:15:60:
                    02:cc:f8:b3:b7:31:dd:9d:ab:1f:b8:20:7f:48:06:
                    2e:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:63:CF:16:44:D8:26:63:B7:C7:F2:AD:76:C2:E5:E6:7D:70:26:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/99030aa8-5573-306e-bb2a-1981f398f6b4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.114.62.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:10:f2:44:61:ae:3b:21:f5:87:25:10:f1:ae:fe:54:ed:eb:
         44:c0:65:cc:93:31:1b:fb:c3:5d:ce:a3:77:b3:fd:51:66:0f:
         31:14:bf:44:d6:a0:ed:57:49:79:c0:29:34:78:d5:14:da:e3:
         31:69:21:b0:c8:eb:67:15:9c:d6:b8:b0:b5:16:fe:de:41:b9:
         36:da:e6:d6:df:2d:fd:1b:e6:4e:e1:86:b7:22:9f:7c:0a:da:
         0f:4a:a5:79:6e:13:e8:2b:ed:32:4c:32:99:4b:80:40:4b:b5:
         3e:6f:37:c3:9d:f7:49:0e:b3:80:42:c8:be:44:52:13:2b:f1:
         6e:71:dd:d1:93:29:bd:b1:50:82:92:81:48:93:e2:ae:aa:85:
         7c:1c:a1:ab:77:4c:5b:b9:07:3c:da:93:24:5e:9e:de:c2:05:
         3a:5e:74:77:34:0d:0b:8f:c5:e8:c2:25:a5:ed:49:de:3b:21:
         00:61:18:02:3d:f5:51:92:c0:8a:aa:33:38:44:d1:94:e7:d1:
         0b:be:09:9e:17:7b:16:ed:af:b6:91:7c:19:3a:65:bf:89:da:
         fd:d8:3b:18:58:c1:57:68:b3:95:a4:5d:ca:33:26:70:c4:4a:
         04:ef:8d:72:74:37:97:b2:0f:af:8f:c3:b5:fc:d1:62:9c:35:
         47:89:a1:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 05:50:24 2024 by rpki-client on console-fra.rpki-client.org