Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/a9031573-f3b9-3933-8cab-e91e2a36fd6f.roa
File:                     a9031573-f3b9-3933-8cab-e91e2a36fd6f.roa (raw, json)
Hash identifier:          1aow0lTifPr9gsWFIcScBYUZA5ZEKzXteexi7zg/ZTA=
Subject key identifier:   97:4B:91:B1:A5:C6:47:57:2C:F5:C1:49:EE:D6:AA:61:A8:1F:B1:22
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285845B3836D64F3C8EC4294CC5C00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/a9031573-f3b9-3933-8cab-e91e2a36fd6f.roa
Signing time:             Mon 29 Apr 2024 01:00:25 +0000
ROA not before:           Mon 29 Apr 2024 01:00:25 +0000
ROA not after:            Sun 28 Jul 2024 01:00:25 +0000
asID:                     44477
IP address blocks:        50.114.173.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:b3:83:6d:64:f3:c8:ec:42:94:cc:5c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Apr 29 01:00:25 2024 GMT
            Not After : Jul 28 01:00:25 2024 GMT
        Subject: CN=8f246135-7514-4184-b662-9664c92808dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:21:bd:92:5f:fb:82:78:7f:15:3e:3f:65:a2:
                    14:fb:23:ad:c4:8b:38:0b:91:79:e9:ba:b8:95:aa:
                    87:d2:a7:48:96:87:05:ff:1b:29:b9:7c:2d:ee:88:
                    5e:33:db:23:99:fc:bd:9f:f1:1c:0d:73:cb:2b:2f:
                    b4:8a:c3:ef:a0:9a:ac:5b:39:97:12:61:26:ce:da:
                    27:ed:be:30:e8:49:42:a0:d0:5f:5d:8f:f3:9a:2e:
                    4d:63:f2:41:d7:ff:30:b7:83:db:57:4e:97:54:2f:
                    92:8a:92:cc:9d:27:e1:90:c4:e5:21:9a:ed:15:6f:
                    05:dc:e4:33:af:15:c9:51:69:0f:4a:87:da:0e:4c:
                    3f:df:47:c6:b6:0f:f6:c2:9e:77:36:76:c9:1b:17:
                    db:90:15:bd:c6:bc:0f:4a:74:8e:7b:43:51:76:6a:
                    8c:6c:33:ce:0a:e4:3c:a2:aa:0a:6d:0a:f8:08:ef:
                    3a:24:4c:da:a8:f5:e9:f2:14:f9:af:33:06:f8:bf:
                    c1:54:80:fb:ce:de:e0:a6:46:35:6a:85:f9:fd:21:
                    d6:4c:87:d4:49:a8:5d:a0:33:02:27:8c:c5:0e:29:
                    87:bb:fe:1a:76:2c:f4:49:ab:4e:ee:58:1a:93:e1:
                    aa:c0:43:ff:0c:a9:59:52:94:4e:1d:9b:c2:74:97:
                    7b:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:4B:91:B1:A5:C6:47:57:2C:F5:C1:49:EE:D6:AA:61:A8:1F:B1:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/a9031573-f3b9-3933-8cab-e91e2a36fd6f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.114.173.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:5e:65:64:1c:1b:fe:2e:91:7e:b0:24:ef:de:5c:59:b3:51:
         44:e4:af:3c:3a:ce:83:44:4a:90:90:2c:9e:38:59:2a:a6:bf:
         4a:9b:92:32:de:d9:b2:30:6b:76:95:8a:16:06:f3:6a:13:df:
         57:73:e7:57:14:b6:c0:61:f7:1c:44:80:41:a1:5e:7f:18:d6:
         0c:73:d6:b1:d3:92:b4:7e:b5:dc:2c:44:3a:6e:6f:ad:0e:18:
         ba:5a:04:ec:bd:fc:da:d2:b8:62:54:fe:4f:cc:42:b9:bb:bc:
         5b:2e:c5:f0:2a:e9:21:f9:d6:76:9e:e7:02:d7:f3:d5:d3:bf:
         6c:b5:3d:01:59:10:95:ae:cd:a5:be:f2:c2:d9:07:f3:22:d8:
         c3:69:ae:75:a1:c7:de:69:0f:db:3f:99:88:18:99:de:8a:0e:
         f2:6e:6a:8a:b7:23:21:67:cd:39:a1:68:0f:da:ab:0c:9e:21:
         ec:f7:8d:c1:54:2d:eb:3e:cb:e7:be:68:4f:2c:33:e2:c4:1f:
         e1:b9:b4:91:d4:2d:3e:f6:e8:85:05:7d:6b:01:8c:9d:db:bd:
         ec:5b:fc:b4:f1:ea:58:7c:61:94:a4:f0:a6:26:f1:ba:4a:72:
         5b:65:a4:0a:de:e4:6b:a3:d9:b3:d4:77:49:da:1a:e5:52:3e:
         d0:e5:83:84
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWzg21k88jsQpTMXAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI0MDQyOTAxMDAyNVoXDTI0MDcyODAxMDAyNVowLzEtMCsGA1UEAxMk
OGYyNDYxMzUtNzUxNC00MTg0LWI2NjItOTY2NGM5MjgwOGRkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgSG9kl/7gnh/FT4/ZaIU+yOtxIs4C5F56bq4
laqH0qdIlocF/xspuXwt7oheM9sjmfy9n/EcDXPLKy+0isPvoJqsWzmXEmEmzton
7b4w6ElCoNBfXY/zmi5NY/JB1/8wt4PbV06XVC+SipLMnSfhkMTlIZrtFW8F3OQz
rxXJUWkPSofaDkw/30fGtg/2wp53NnbJGxfbkBW9xrwPSnSOe0NRdmqMbDPOCuQ8
oqoKbQr4CO86JEzaqPXp8hT5rzMG+L/BVID7zt7gpkY1aoX5/SHWTIfUSahdoDMC
J4zFDimHu/4adiz0SatO7lgak+GqwEP/DKlZUpROHZvCdJd7hwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJdLkbGlxkdXLPXBSe7WqmGoH7EiMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvYTkwMzE1NzMtZjNiOS0z
OTMzLThjYWItZTkxZTJhMzZmZDZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAMnKtMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABxeZWQcG/4ukX6wJO/eXFmzUUTkrzw6zoNESpCQLJ44WSqmv0qbkjLe
2bIwa3aVihYG82oT31dz51cUtsBh9xxEgEGhXn8Y1gxz1rHTkrR+tdwsRDpub60O
GLpaBOy9/NrSuGJU/k/MQrm7vFsuxfAq6SH51nae5wLX89XTv2y1PQFZEJWuzaW+
8sLZB/Mi2MNprnWhx95pD9s/mYgYmd6KDvJuaoq3IyFnzTmhaA/aqwyeIez3jcFU
Les+y+e+aE8sM+LEH+G5tJHULT726IUFfWsBjJ3bvexb/LTx6lh8YZSk8KYm8bpK
cltlpAre5Guj2bPUd0naGuVSPtDlg4Q=
-----END CERTIFICATE-----
Generated at Fri May 3 17:56:27 2024 by rpki-client on console-fra.rpki-client.org