Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/aeb2b111-1b62-3097-bdb0-ccf6a0095496.roa
File:                     aeb2b111-1b62-3097-bdb0-ccf6a0095496.roa (raw, json)
Hash identifier:          eucjVsQBLiyNbXEy8JUcb5Id84ST4F3ePM2st9ozfd4=
Subject key identifier:   76:99:68:0F:7D:7F:37:04:C8:D0:12:53:4D:A1:16:20:87:59:E2:83
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285847FD293678F83C60A47A386A00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/aeb2b111-1b62-3097-bdb0-ccf6a0095496.roa
Signing time:             Sun 24 Nov 2024 19:42:30 +0000
ROA not before:           Sun 24 Nov 2024 19:42:30 +0000
ROA not after:            Sat 22 Feb 2025 19:42:30 +0000
asID:                     11798
IP address blocks:        50.114.74.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:fd:29:36:78:f8:3c:60:a4:7a:38:6a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Nov 24 19:42:30 2024 GMT
            Not After : Feb 22 19:42:30 2025 GMT
        Subject: CN=f3f1908e-28a5-4645-8a92-faddb07f8893
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:6e:59:17:ef:51:ef:db:c4:66:15:cc:e6:04:
                    ba:f2:68:fc:5e:ea:aa:a6:79:bf:7e:0f:93:92:e9:
                    fa:82:46:5d:c6:5a:e6:4b:94:04:b6:2e:72:8b:ec:
                    13:44:2b:82:90:ca:48:c3:0c:2f:ec:ac:3c:17:79:
                    30:4b:c5:05:d4:35:73:3e:50:61:9b:c9:61:64:1d:
                    22:63:eb:5a:31:6b:7c:a5:a9:f7:97:4d:66:f9:96:
                    5a:97:3d:fe:9f:ed:71:05:4f:12:3d:ae:ab:b9:d4:
                    d9:96:9f:0b:68:c7:38:ea:d4:af:4f:b8:da:06:73:
                    8b:5f:9d:d3:7e:61:62:b6:f2:c4:66:4b:fd:b5:a1:
                    48:e8:d9:27:31:e2:d0:65:13:7e:6a:05:b2:02:0f:
                    50:c4:86:f7:d1:4a:56:32:15:83:7c:bd:b2:9d:bb:
                    44:87:53:a1:b2:ae:23:f8:9b:67:05:fe:8e:aa:79:
                    60:45:40:38:71:17:74:6a:6b:53:07:f3:91:dc:d3:
                    d6:32:d0:35:ad:20:a2:eb:fa:b4:e5:b8:d2:4d:c3:
                    60:d2:bb:76:2c:62:fb:44:1d:19:7f:15:c3:8b:ae:
                    9d:26:52:9f:ca:4f:96:9d:c3:92:89:c1:c6:0c:9a:
                    9d:67:c6:46:b1:34:fd:10:7e:56:b6:4d:5d:37:3e:
                    bf:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:99:68:0F:7D:7F:37:04:C8:D0:12:53:4D:A1:16:20:87:59:E2:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/aeb2b111-1b62-3097-bdb0-ccf6a0095496.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.114.74.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:63:1d:2a:19:96:b1:01:81:4a:e8:58:53:32:08:38:c9:2d:
         9b:45:fc:93:23:74:da:f8:b8:5c:ea:e4:b0:76:f7:6a:06:e8:
         37:5b:ae:13:82:83:f9:b1:cb:27:a6:95:70:ca:f0:e2:f3:2e:
         fb:a7:78:05:81:b7:9a:bc:8d:e8:55:bf:0e:a9:e2:8c:19:17:
         bb:c5:39:be:fb:a5:6a:c7:0d:b6:52:99:a9:a1:52:f3:a3:d2:
         f2:41:ad:0f:2d:26:9b:65:d0:03:bc:b1:f2:51:6d:21:c6:a3:
         96:e7:d1:6c:18:07:9e:74:4d:74:56:96:da:a4:32:3c:59:df:
         9e:22:60:03:3d:09:2e:e2:7b:28:a9:ac:1e:65:67:14:7d:e3:
         f8:ed:e5:a9:ad:33:a7:d5:c3:18:23:fc:ca:61:48:03:d9:8b:
         ad:a9:d2:ff:8a:e6:33:b2:9e:2b:af:cb:2d:48:ec:63:82:be:
         65:6d:0e:dc:71:3c:ec:4a:d9:d2:65:7b:48:3c:69:45:82:bf:
         58:7f:1f:12:55:4e:eb:7e:d9:e0:75:08:40:f6:4d:c8:74:d3:
         f5:b1:17:be:84:00:05:3d:8a:eb:89:ad:9c:e0:d9:d1:15:a4:
         d9:a8:1c:78:dc:f3:59:08:ac:19:3f:24:d6:71:2c:1b:9a:a1:
         0b:ad:9e:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 13:30:31 2024 by rpki-client on console-fra.rpki-client.org