Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/aceb24a5-7e98-3508-aae2-7e015c6f1762.roa
File:                     aceb24a5-7e98-3508-aae2-7e015c6f1762.roa (raw, json)
Hash identifier:          ODQCNIoQnOISP/J1Kru6XV07rqYlVIE44a002U03zEc=
Subject key identifier:   53:D3:72:A0:EE:48:49:45:D4:9D:C4:2F:F3:C8:E8:D6:99:E8:E8:0B
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584565583557E30CC140955F1C40
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/aceb24a5-7e98-3508-aae2-7e015c6f1762.roa
Signing time:             Mon 01 Apr 2024 01:00:26 +0000
ROA not before:           Mon 01 Apr 2024 01:00:26 +0000
ROA not after:            Sun 30 Jun 2024 01:00:26 +0000
asID:                     135375
IP address blocks:        50.114.33.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 01 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:65:58:35:57:e3:0c:c1:40:95:5f:1c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Apr  1 01:00:26 2024 GMT
            Not After : Jun 30 01:00:26 2024 GMT
        Subject: CN=0c65dd28-7038-4327-86cc-eab09ef9b6d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:8f:a4:74:1c:52:66:a2:21:3e:55:d2:bc:49:
                    69:47:86:b7:a7:26:0a:9b:e2:4a:53:b8:d1:88:6f:
                    14:0e:74:65:2a:42:c2:9d:90:ce:92:66:02:44:e6:
                    83:7a:f1:0c:fa:c6:ce:31:5c:00:ae:55:aa:5f:fd:
                    28:af:ac:b9:cd:86:7d:8f:c9:14:8f:bc:6b:c0:5e:
                    0c:73:1d:0a:0c:be:a8:8f:45:fb:53:b6:76:ba:a5:
                    f9:52:da:e9:cb:69:20:8b:98:33:4e:cc:bc:6e:4b:
                    5a:cc:46:06:21:83:14:46:f0:ff:b2:e7:a7:7b:71:
                    65:1e:c7:52:bc:10:bc:cf:e9:aa:57:35:0d:e2:f4:
                    8e:08:c9:36:42:38:5e:de:7a:21:4f:78:7a:56:45:
                    ac:54:5c:6a:ba:74:da:18:81:03:c0:6e:97:cb:5a:
                    8d:2b:ba:b0:2b:b8:90:a9:eb:12:9a:b8:a3:84:68:
                    b5:67:f7:d3:fe:6a:a2:f1:dc:87:88:2c:5b:82:8b:
                    69:ae:6d:df:57:5a:5e:3a:b5:a7:f9:3a:a6:a0:dc:
                    ac:b5:04:7d:81:3f:cb:6a:15:85:51:58:40:ff:eb:
                    12:20:63:91:a8:a2:ef:a3:fa:a1:0b:47:ae:82:d5:
                    ee:25:91:4b:36:44:49:39:a7:2e:1d:df:29:57:b9:
                    9a:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:D3:72:A0:EE:48:49:45:D4:9D:C4:2F:F3:C8:E8:D6:99:E8:E8:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/aceb24a5-7e98-3508-aae2-7e015c6f1762.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.114.33.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:0d:51:fd:a3:44:4a:7f:01:e5:21:3d:19:25:07:98:33:97:
         b4:28:46:3b:fc:b4:60:24:97:ca:1f:f6:a6:cd:8f:4d:1e:42:
         61:ca:64:4e:7a:c3:d5:dc:34:65:61:b2:7a:57:65:80:7f:36:
         ec:67:80:c2:34:22:81:8f:ba:25:ba:ee:cd:00:40:95:d3:02:
         b9:90:35:e2:c8:12:98:1e:a2:aa:a1:da:62:9c:d3:9c:79:85:
         0d:3a:7d:51:0c:a7:ba:29:e3:f3:b6:8d:18:b3:67:be:28:91:
         46:b8:e4:0c:41:7d:97:c8:ce:fa:12:05:4e:bb:8e:1d:d8:67:
         08:a6:0e:6a:77:8c:d4:92:64:a5:8b:35:99:95:77:e1:57:31:
         c0:81:f6:11:44:66:c5:d7:e3:d4:9d:d5:2b:54:7e:35:f4:d9:
         f9:57:56:a5:9d:d8:d3:50:f4:59:fb:f8:21:5d:c0:a2:5d:47:
         ca:7c:41:60:71:9f:c6:c6:31:c7:ee:3b:81:e8:50:ed:c7:0a:
         11:6a:2b:b4:b5:c8:8d:07:b8:6e:31:78:1b:96:13:4e:a4:b1:
         80:81:11:a1:79:db:1b:6a:81:32:19:75:01:93:e7:74:63:b3:
         57:6f:5e:e3:a5:18:1c:e0:67:f8:6a:08:48:f4:f1:19:a8:94:
         6f:a4:9f:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 16:10:41 2024 by rpki-client on console-fra.rpki-client.org