Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b50a4317-b04f-3c04-a452-411d181b88de.roa
File:                     b50a4317-b04f-3c04-a452-411d181b88de.roa (raw, json)
Hash identifier:          QjTCfmKC2eoHyiI+2rTHISaZ1soo8sDHTf/V37Mdugc=
Subject key identifier:   49:93:7A:5C:3E:F0:B3:2A:0E:50:65:B3:09:87:14:4D:71:63:17:00
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285847EA9C148913CCB83207B86F20
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b50a4317-b04f-3c04-a452-411d181b88de.roa
Signing time:             Mon 18 Nov 2024 04:13:35 +0000
ROA not before:           Mon 18 Nov 2024 04:13:35 +0000
ROA not after:            Sun 16 Feb 2025 04:13:35 +0000
asID:                     834
IP address blocks:        50.114.12.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ea:9c:14:89:13:cc:b8:32:07:b8:6f:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Nov 18 04:13:35 2024 GMT
            Not After : Feb 16 04:13:35 2025 GMT
        Subject: CN=472982c6-ba18-448b-8628-79499a910c46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:62:2c:f0:23:92:f9:da:2d:d4:f0:d9:68:77:
                    8a:44:5b:84:01:89:b1:c8:c1:1d:37:d9:0d:d0:85:
                    81:1d:b3:10:2b:52:aa:fd:61:ff:69:e6:57:82:90:
                    5c:18:4c:01:23:b8:1d:77:78:6a:2c:03:b0:ce:59:
                    38:c7:67:1a:7d:b7:ac:fb:83:de:a7:aa:bf:ac:b1:
                    cc:4f:59:b1:3a:f3:aa:1e:27:27:8b:f7:93:eb:c1:
                    54:8a:95:75:63:8c:ff:a0:4e:fb:07:88:ea:5d:b6:
                    a0:d8:ab:9d:be:1a:a2:7d:16:45:b2:eb:8e:de:4d:
                    7c:79:7f:cb:60:dc:f6:6b:dc:c1:4d:96:d6:35:37:
                    43:96:c6:3c:25:e5:19:84:c9:8c:6a:cb:36:37:ae:
                    5d:76:e6:1d:0e:0b:92:a3:21:16:9b:e4:02:23:b3:
                    c9:b9:ff:74:b7:3e:0f:8a:e2:5d:3e:b5:c2:31:f2:
                    47:b3:2b:f6:fb:57:ce:71:51:c2:77:6a:0a:95:f2:
                    7b:30:fd:01:a8:f8:a4:ee:7e:1a:27:18:13:53:2c:
                    f6:57:68:f0:c5:29:de:a3:db:72:dc:a8:9a:e5:e3:
                    c1:bc:06:d4:c0:2a:7b:14:1d:ec:d1:7c:25:93:58:
                    7c:2a:9f:77:77:11:22:4b:3e:83:8f:04:11:ca:ad:
                    d1:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:93:7A:5C:3E:F0:B3:2A:0E:50:65:B3:09:87:14:4D:71:63:17:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b50a4317-b04f-3c04-a452-411d181b88de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.114.12.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:e2:35:b5:c5:9b:a7:35:07:fd:e9:14:8f:03:66:9c:05:da:
         7c:08:b7:5d:ec:39:8c:de:09:ef:d5:dd:09:60:85:23:0a:a4:
         3d:44:c3:52:6e:57:0f:7b:f1:fb:3a:5b:3f:62:9a:22:dd:33:
         d5:2a:04:84:43:47:4d:ef:f9:5b:6e:c0:6b:00:93:b3:ce:f6:
         7f:75:b3:93:e8:d6:69:d9:dc:37:7c:0a:fc:9f:6a:fa:1a:58:
         d2:14:84:c0:e3:27:93:10:35:9d:a1:38:0c:56:a1:66:d3:d4:
         2d:3b:7f:62:78:22:be:46:cb:55:dd:3c:90:af:90:08:8b:d6:
         d7:a8:12:1b:0d:29:6c:1b:68:c3:96:91:f2:2d:84:a9:cd:a4:
         49:ab:d7:2f:e6:a3:fc:b3:0e:96:d1:a7:53:9f:7b:95:cc:3a:
         ca:f2:09:96:c5:0b:e2:50:41:36:0e:d1:fe:38:f2:27:fe:d0:
         a6:b0:dd:60:71:be:d8:93:9b:7c:62:d2:50:95:9c:7a:fc:2f:
         f2:d1:72:c1:1e:fa:e9:0d:d0:be:06:93:a4:1b:7f:1a:02:75:
         8b:35:ec:f9:8e:10:7e:5d:3c:ca:7d:12:6b:95:f0:fb:69:2b:
         dc:d7:76:64:3a:7e:64:8e:e6:18:9c:b6:d0:67:c2:78:8a:8f:
         bd:29:12:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:00:17 2024 by rpki-client on console-ams.rpki-client.org