Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/9be18a89-606d-3af3-9b4e-1fdd60da0645.roa
File:                     9be18a89-606d-3af3-9b4e-1fdd60da0645.roa (raw, json)
Hash identifier:          C/Axi9/9vbTIazhIptiBHzrDevDFCoNJyahf2Vj3hXM=
Subject key identifier:   54:27:26:99:4B:86:6D:AC:C3:FA:D5:6B:3B:4E:03:0D:35:8E:C6:0E
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584777C63B76421BE754B8B4B2E0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/9be18a89-606d-3af3-9b4e-1fdd60da0645.roa
Signing time:             Tue 08 Oct 2024 01:00:31 +0000
ROA not before:           Tue 08 Oct 2024 01:00:31 +0000
ROA not after:            Mon 06 Jan 2025 02:00:31 +0000
asID:                     16509
IP address blocks:        50.114.92.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:77:c6:3b:76:42:1b:e7:54:b8:b4:b2:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Oct  8 01:00:31 2024 GMT
            Not After : Jan  6 02:00:31 2025 GMT
        Subject: CN=f4c1b25e-bb22-4b48-9d1b-b6edf8372400
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:1d:c3:74:48:46:3b:ca:90:0a:f5:07:25:92:
                    1b:4b:c3:44:b2:29:a2:42:1e:bd:b3:85:bb:28:dc:
                    78:75:f0:24:86:32:8e:7c:d7:0b:57:1c:71:d5:9a:
                    76:9c:0a:c4:b9:4d:e5:7c:b8:f6:1f:58:58:e5:c1:
                    db:a6:f1:24:00:25:4c:b0:26:2b:d5:6c:75:7e:23:
                    68:46:ca:66:aa:bb:22:2b:39:bc:75:ea:8c:96:d6:
                    89:67:8d:d4:63:99:9c:8a:40:46:9f:38:46:9e:f1:
                    e4:b1:e2:dc:da:44:15:da:4f:74:ff:b3:1d:b7:14:
                    d7:00:07:c1:a9:55:34:cb:19:28:09:49:e3:23:dc:
                    89:c1:24:cc:43:65:f9:41:ae:23:b7:5e:95:f6:1f:
                    ec:ed:95:6a:34:a0:d2:09:4d:e2:3e:4c:47:26:f6:
                    67:41:6c:cb:c3:d3:1a:55:0d:61:b9:38:75:07:9f:
                    92:7c:a3:80:6d:b3:c4:25:d3:dd:e2:8b:ea:fd:85:
                    50:fc:ef:b3:d6:67:77:07:e8:6c:c9:2f:08:59:6b:
                    f5:e5:12:0c:bf:02:9c:dc:45:7f:e1:ce:4a:99:79:
                    a1:c6:e1:47:f1:ad:48:93:6b:f8:26:9c:0f:99:ad:
                    61:c5:c9:0f:18:4c:7f:c4:4a:fc:91:a2:81:ba:76:
                    cb:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:27:26:99:4B:86:6D:AC:C3:FA:D5:6B:3B:4E:03:0D:35:8E:C6:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/9be18a89-606d-3af3-9b4e-1fdd60da0645.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.114.92.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:6f:f5:09:ca:34:c9:d0:2e:45:83:a5:56:cf:dd:8a:70:13:
         80:a3:99:5f:e4:a7:e8:ae:bf:a0:69:b9:00:a6:42:21:2d:29:
         d2:1c:88:9e:91:25:95:57:24:30:63:44:7a:18:93:90:0d:e0:
         d8:22:aa:8d:85:cf:a4:24:5e:3f:09:d9:0e:c8:dd:3c:7e:65:
         49:9b:e4:cb:a3:eb:2b:c1:49:e6:49:fe:b9:aa:e7:6c:61:bf:
         dc:7a:78:56:05:14:c0:53:65:77:e7:80:fd:97:55:0e:81:26:
         c9:f8:18:39:71:27:70:c3:60:e7:2d:01:7f:c7:dc:09:e3:78:
         34:d8:0c:12:48:9c:af:7b:95:be:50:65:51:81:67:24:ba:06:
         8d:f6:45:bf:07:11:d5:4d:db:0e:6d:ec:e0:bf:cb:1f:0d:6b:
         62:33:c1:04:b8:2d:fd:de:f8:bc:fa:23:3e:65:36:97:50:70:
         ad:0f:cd:35:4c:16:84:a6:16:29:85:97:e4:17:8b:88:89:52:
         cc:67:ac:f9:be:56:08:5d:fc:f1:38:fe:d3:d9:71:a5:97:bb:
         31:45:fe:0c:4b:e7:29:35:ab:4b:61:56:17:d3:c9:5e:7e:82:
         9f:27:c5:de:2b:17:99:96:de:3f:c9:52:43:72:00:58:9e:99:
         72:9e:14:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:00:13 2024 by rpki-client on console-ams.rpki-client.org