Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/a5b75c81-0d63-32a0-8375-32f290fa9449.roa
File:                     a5b75c81-0d63-32a0-8375-32f290fa9449.roa (raw, json)
Hash identifier:          lUInm9GyJmxdExRnmo8eLoIhuNZ4rr2YjPZPFILMenM=
Subject key identifier:   67:D7:FF:61:A8:E1:54:DA:97:6F:4D:FB:CE:86:A1:A5:75:4D:26:61
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285847EE8A2FAE9912AE7602915980
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/a5b75c81-0d63-32a0-8375-32f290fa9449.roa
Signing time:             Tue 19 Nov 2024 14:00:39 +0000
ROA not before:           Tue 19 Nov 2024 14:00:39 +0000
ROA not after:            Mon 17 Feb 2025 14:00:39 +0000
asID:                     269070
IP address blocks:        50.114.48.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ee:8a:2f:ae:99:12:ae:76:02:91:59:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Nov 19 14:00:39 2024 GMT
            Not After : Feb 17 14:00:39 2025 GMT
        Subject: CN=ea474ef6-1e8c-4444-ade0-48cb23f6a603
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:73:38:e8:21:a1:d6:8c:5d:e9:97:2a:08:47:
                    be:d3:f6:0b:4f:08:fc:d1:4d:e9:49:f8:22:22:0a:
                    98:1e:71:0f:ed:13:8a:1d:63:e9:2a:e2:2c:35:4a:
                    a1:ee:30:45:57:15:28:21:66:d8:5e:cf:6c:18:49:
                    79:f7:c6:ff:d6:c7:c8:d7:1f:0f:15:43:79:f5:13:
                    13:c4:0a:5d:30:91:61:8b:2c:34:89:3f:21:9f:78:
                    67:3b:42:17:50:35:1c:3c:f0:1d:dd:6f:47:04:fc:
                    e2:41:72:c0:e2:63:d1:90:7c:24:5c:e2:df:12:4f:
                    c9:76:32:44:f5:47:87:8f:94:a9:b2:a8:5b:0c:97:
                    7f:46:2b:aa:4a:e4:9c:04:5d:d3:fc:06:14:d8:73:
                    f7:cb:e7:db:e3:7b:fc:76:d9:f8:6e:00:da:17:48:
                    1e:7f:e9:45:3b:63:d4:1c:e9:e0:3f:17:fc:1c:cb:
                    95:e3:d4:da:f9:4a:dd:e8:a6:95:a6:47:96:9a:8f:
                    b3:0c:b4:8d:eb:32:07:e4:cd:e0:48:d9:cc:b7:a4:
                    e3:e4:03:2d:0c:e7:2b:19:cb:5b:bd:23:bb:67:c2:
                    9a:9e:85:d7:41:02:66:fa:01:4b:90:f9:d2:63:0f:
                    3b:ce:55:45:d1:e3:35:5c:7e:02:cb:d5:81:97:a4:
                    83:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:D7:FF:61:A8:E1:54:DA:97:6F:4D:FB:CE:86:A1:A5:75:4D:26:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/a5b75c81-0d63-32a0-8375-32f290fa9449.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.114.48.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:c7:54:8b:db:a1:c3:e4:8d:73:c4:3c:b3:dd:2d:84:f7:52:
         50:85:fe:46:a2:0a:e7:3e:2a:19:61:11:28:94:2d:bc:de:18:
         1d:c9:23:02:4b:8e:64:f0:9e:3c:c8:c6:09:b7:02:a8:9e:f8:
         67:c0:b8:d9:1a:09:b6:30:4b:7e:43:f5:3c:c3:17:72:21:98:
         6b:ac:b2:80:02:a6:6d:11:5b:35:52:6c:d0:0a:e2:e9:bd:92:
         eb:7d:ce:42:0e:05:29:64:79:d7:5e:9d:b5:58:56:46:fd:bf:
         f3:8e:e9:1e:81:49:3d:37:a3:1e:d2:98:7e:76:2a:36:98:ba:
         91:bd:29:e4:7c:d8:f7:d2:99:81:da:9c:0c:78:a5:ab:97:b4:
         41:68:00:ca:41:c6:f4:61:20:2b:47:c9:28:92:03:21:1f:d7:
         e1:01:ab:c3:4b:d7:22:93:8a:c7:4a:63:b9:05:63:08:d7:86:
         bb:bd:b3:8a:90:7f:ee:31:d3:d0:a9:5d:78:ba:a2:13:37:be:
         a1:a6:20:8f:86:9d:a0:09:57:78:9f:da:96:88:26:a1:10:a2:
         6d:70:2e:45:3b:fe:d7:e8:03:03:e1:ee:62:ff:dd:24:45:e1:
         be:03:6e:56:ee:f1:b5:c3:2f:6d:13:5e:ca:86:5d:43:72:f3:
         97:17:c4:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:15:43 2024 by rpki-client on console-fra.rpki-client.org