Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/a5b75c81-0d63-32a0-8375-32f290fa9449.roa
File:                     a5b75c81-0d63-32a0-8375-32f290fa9449.roa (raw, json)
Hash identifier:          cTMdEGtHxiAZKeOLUuDjVSwHXilV+Zt6xw9xXLWEAxE=
Subject key identifier:   03:AA:1C:0A:72:E2:59:F6:81:A5:65:9D:EE:F6:4D:EA:FC:C2:47:6C
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F432858454F02C51EBA23DAB021930140
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/a5b75c81-0d63-32a0-8375-32f290fa9449.roa
Signing time:             Sun 24 Mar 2024 01:00:24 +0000
ROA not before:           Sun 24 Mar 2024 01:00:24 +0000
ROA not after:            Sat 22 Jun 2024 01:00:24 +0000
asID:                     269070
IP address blocks:        50.114.48.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:4f:02:c5:1e:ba:23:da:b0:21:93:01:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Mar 24 01:00:24 2024 GMT
            Not After : Jun 22 01:00:24 2024 GMT
        Subject: CN=eed3646f-8f21-40d7-be32-b9b80d4a1c93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:de:9f:b4:2a:79:ee:b4:0f:c8:25:20:5a:1f:
                    07:c0:4d:16:e7:9a:1b:d5:f6:3a:47:f1:05:44:01:
                    61:6b:ae:00:ca:03:d4:b1:f0:61:da:b7:4c:90:a0:
                    af:d3:31:21:15:95:46:d6:0e:27:f4:d5:6f:fc:af:
                    11:84:9c:9e:d6:4a:cb:75:ad:25:1b:31:24:35:c8:
                    f7:cf:b3:58:e6:af:44:56:55:f2:c7:6e:36:b6:dc:
                    0d:99:a7:e6:84:4e:78:64:3e:d2:be:5c:f1:b8:c6:
                    b9:46:ea:2a:94:16:d2:ce:1c:ef:8a:b2:1d:0d:2e:
                    2b:c6:d1:16:50:72:29:80:2a:2e:54:46:c5:97:98:
                    20:a6:99:e1:74:25:a6:44:73:dc:d5:a2:98:db:0b:
                    aa:6e:6f:59:85:e9:af:a8:3c:9b:34:24:c7:bb:72:
                    8c:44:e3:54:90:9e:32:f6:ab:57:1a:d9:c8:fd:c8:
                    e2:fc:a5:8a:49:e5:c3:1b:9f:9b:7f:85:75:31:a4:
                    3d:59:cc:f4:6f:0c:e2:a7:78:47:e3:48:c7:82:64:
                    35:e3:4d:c7:d1:49:c0:cc:b6:46:b2:be:15:b6:66:
                    87:6c:c9:33:fd:24:89:e2:55:0d:e2:5d:0f:45:23:
                    c8:99:09:09:aa:42:f6:c5:8f:a9:78:6f:86:57:89:
                    16:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:AA:1C:0A:72:E2:59:F6:81:A5:65:9D:EE:F6:4D:EA:FC:C2:47:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/a5b75c81-0d63-32a0-8375-32f290fa9449.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.114.48.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:87:9c:5b:d4:f3:ce:dd:a7:96:d7:41:dd:3d:03:4a:bc:47:
         47:f7:f3:3e:85:9c:24:ad:35:6a:c9:c2:2b:8e:a1:6b:05:00:
         77:c1:7a:b5:2e:2a:04:67:7d:48:0b:7e:d9:c3:86:17:2f:15:
         1a:7a:ed:5e:a1:88:bd:e9:de:6f:ba:89:ce:5d:12:13:73:75:
         9e:34:7d:e1:f1:95:fd:66:05:3e:f5:a1:eb:82:8a:6a:7f:52:
         d6:67:bb:d0:60:62:08:16:53:05:50:94:27:56:6a:10:09:8c:
         e2:79:d9:8d:9b:60:88:83:7c:a7:bc:5d:0c:35:1f:af:10:a8:
         fe:82:13:8c:33:20:44:91:8c:80:b6:cc:16:ad:fd:88:bb:53:
         be:73:11:c1:c1:44:38:2a:7e:19:73:dc:16:e5:3c:97:b6:25:
         63:1a:e4:5d:03:64:16:b8:58:f3:57:83:2e:47:64:48:fc:24:
         5d:eb:43:c0:1c:cb:36:5b:e9:b7:0e:16:4d:12:0e:1e:53:a3:
         d6:7f:fd:15:b7:a9:01:81:7c:2c:1e:78:a8:fb:f8:7e:9d:dd:
         99:36:d4:47:ec:17:08:21:a1:73:9f:be:cd:63:58:ae:b0:98:
         dc:df:63:e6:54:bc:f9:6a:33:22:82:f4:fb:ed:9f:38:77:33:
         ea:e1:6c:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 21:45:44 2024 by rpki-client on console-fra.rpki-client.org