Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c14efc23-2da0-38e9-892d-6102c9098409.roa
File:                     c14efc23-2da0-38e9-892d-6102c9098409.roa (raw, json)
Hash identifier:          ipd8wuyAIwlBBNExAByzFB1cMF44jp83JmKck0fHtrU=
Subject key identifier:   A2:CE:88:79:AD:8B:D3:A4:53:EB:F6:A1:03:37:A1:D4:75:3E:46:65
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F432858451E5F1C3C92E05B0F451D4E80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c14efc23-2da0-38e9-892d-6102c9098409.roa
Signing time:             Wed 06 Mar 2024 14:51:58 +0000
ROA not before:           Wed 06 Mar 2024 14:51:58 +0000
ROA not after:            Tue 04 Jun 2024 13:51:58 +0000
asID:                     395898
IP address blocks:        50.114.31.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:1e:5f:1c:3c:92:e0:5b:0f:45:1d:4e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Mar  6 14:51:58 2024 GMT
            Not After : Jun  4 13:51:58 2024 GMT
        Subject: CN=191e186e-ec45-4e0c-a9f0-81869a9bfb98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:8f:df:6b:01:c9:19:fe:c0:8f:77:bb:13:cc:
                    8b:1b:d5:65:58:de:8f:13:d7:81:15:41:a3:6d:db:
                    65:d9:1c:13:5f:99:dd:69:b9:17:15:13:ba:74:db:
                    62:fe:cd:e7:95:49:94:a0:1e:3f:62:73:e7:3f:d4:
                    0c:53:47:7e:f9:fe:ac:a8:a6:da:1c:77:25:c1:f9:
                    c9:34:0e:e0:d5:1d:6e:f1:0f:6b:aa:c7:9a:ea:13:
                    d1:a0:3c:1a:cc:51:db:ac:e8:47:f0:ee:10:81:4b:
                    96:47:4b:ad:81:fb:75:59:47:b7:67:0d:35:26:70:
                    5f:1f:d5:56:35:39:64:9a:df:ed:dd:bb:7f:a5:1a:
                    ec:2f:b0:6e:66:94:62:5f:d7:1b:46:7b:bd:41:00:
                    78:47:1f:c3:34:a4:e7:39:ba:be:a4:bc:1e:34:55:
                    05:e8:00:e3:06:5d:3d:18:86:77:42:f0:5b:6d:1f:
                    3f:bb:90:e5:40:96:7d:e2:29:b3:e2:9d:2b:a1:30:
                    a1:8e:ae:d2:c2:73:e9:33:7f:f2:a8:18:7d:fd:28:
                    f3:f0:30:df:cf:76:67:de:00:7c:9b:12:6c:ea:db:
                    6b:91:b4:b5:ab:26:e6:34:b8:7d:32:f9:60:a3:d8:
                    50:dd:fe:47:5c:12:0b:5d:5e:61:d1:11:43:92:e6:
                    ad:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:CE:88:79:AD:8B:D3:A4:53:EB:F6:A1:03:37:A1:D4:75:3E:46:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c14efc23-2da0-38e9-892d-6102c9098409.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.114.31.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:ca:a8:14:9b:5c:81:da:bb:c9:0a:25:26:15:cf:c8:13:79:
         9c:95:29:a1:ca:dd:8c:4e:00:06:11:d9:7e:c6:fb:a3:f0:0d:
         a2:93:d9:c0:44:78:9c:f2:e1:00:5c:53:c6:ba:b2:7d:e0:b9:
         f3:1a:95:0b:fd:99:eb:d6:b3:ba:5c:56:bb:a8:cd:b1:e2:27:
         ba:0a:95:3b:7e:76:ff:c7:c1:2c:cc:ab:2a:31:62:e2:b2:32:
         cc:93:f7:1e:7d:8f:9e:8a:be:8d:d2:40:46:7e:e5:76:cf:fd:
         4d:c3:d7:07:3c:3a:62:82:dd:07:07:c3:5f:2c:3e:c5:e8:59:
         65:b5:b7:a6:14:62:cd:50:4d:fd:06:5e:ab:cb:73:6a:8b:ea:
         5a:1f:cf:83:e8:94:96:7b:77:c7:39:09:eb:09:06:96:0d:ff:
         70:9b:38:ba:19:0f:b6:ad:2d:2e:b5:33:a5:ae:b0:9a:b6:b7:
         ee:aa:0d:9a:f9:ec:68:3b:db:d9:22:cc:3e:f8:7d:e4:9c:d0:
         b4:11:b5:f4:05:aa:ba:79:97:8f:e5:b0:73:4c:30:53:f1:f3:
         d4:55:c9:0d:1c:03:f0:f6:e9:16:e6:90:c5:1a:fb:a9:2b:c1:
         61:96:c8:6d:d6:0a:96:ef:50:69:6a:ae:34:bb:0f:98:dc:52:
         db:7a:fb:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 02:06:34 2024 by rpki-client on console-ams.rpki-client.org