Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ceb1c911-5548-3e7b-aa54-eca96352219a.roa
File:                     ceb1c911-5548-3e7b-aa54-eca96352219a.roa (raw, json)
Hash identifier:          U4U9XNOQmL/MevJrHQSLLKdQeKuhKttWSQihnelBp00=
Subject key identifier:   4E:BA:3E:3F:E3:0A:64:53:36:88:C5:5D:13:5B:83:C8:FB:EF:3F:F1
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F432858476E00FAC100E6D8E3D5716340
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ceb1c911-5548-3e7b-aa54-eca96352219a.roa
Signing time:             Fri 04 Oct 2024 13:00:42 +0000
ROA not before:           Fri 04 Oct 2024 13:00:42 +0000
ROA not after:            Thu 02 Jan 2025 14:00:42 +0000
asID:                     19437
IP address blocks:        50.114.105.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6e:00:fa:c1:00:e6:d8:e3:d5:71:63:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Oct  4 13:00:42 2024 GMT
            Not After : Jan  2 14:00:42 2025 GMT
        Subject: CN=e3273bc7-3ac9-4450-9d73-2fe719887eb3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:6d:6c:56:72:3c:0e:11:de:9a:70:0f:e2:d3:
                    6c:56:2e:b4:ca:f7:b3:e6:17:5a:fd:08:18:7a:bb:
                    ed:9b:bb:45:67:4c:cd:07:a8:95:a3:ec:fb:95:f2:
                    e5:89:29:b4:09:ef:9d:9d:db:2a:2e:16:47:3c:d9:
                    06:50:7f:62:d6:46:b9:79:22:0f:7b:48:55:43:5f:
                    ad:cb:b8:b1:87:fa:f2:ab:18:f7:45:40:56:0b:dc:
                    48:c7:bc:df:47:56:b8:86:d5:d2:15:67:d1:5d:78:
                    1d:c8:b1:a8:45:9e:51:6e:c8:0f:47:9b:1c:34:64:
                    d5:8f:93:93:d2:86:66:03:2b:06:8d:b7:83:77:4b:
                    d1:6f:0b:94:d3:76:cd:86:0f:64:18:2e:31:20:56:
                    27:fc:57:a0:52:0f:fc:92:b7:67:0e:7e:b0:a7:65:
                    59:a4:74:78:0e:29:d2:68:f6:81:e2:af:85:d4:88:
                    0b:10:9e:ca:c0:59:38:5a:cc:76:05:14:f9:ad:96:
                    13:0e:ba:c6:c7:10:b9:08:6a:b1:36:84:e3:04:9e:
                    d9:79:43:8d:27:51:d0:62:3f:2e:cc:5b:17:19:98:
                    e2:6f:a3:62:cc:16:c5:3d:84:a1:08:89:d8:c7:6f:
                    67:cd:7b:90:ce:45:88:dd:84:02:bb:36:1a:a0:17:
                    34:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:BA:3E:3F:E3:0A:64:53:36:88:C5:5D:13:5B:83:C8:FB:EF:3F:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ceb1c911-5548-3e7b-aa54-eca96352219a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.114.105.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:1e:4b:1b:b9:0f:9c:4a:8e:9d:38:5b:5b:c1:a7:38:1d:8e:
         5b:b7:4c:1a:b8:2b:50:69:58:8a:07:f1:54:aa:29:1a:6a:62:
         9b:00:0d:38:de:bd:5b:d3:72:06:0d:38:4f:88:4c:75:0d:b6:
         70:a7:60:0e:ed:46:e4:5c:b4:d9:aa:54:72:7a:71:d2:ba:8f:
         23:3e:3f:f1:32:96:82:2c:47:a1:02:fd:68:6d:9e:ec:98:52:
         0c:2f:65:ff:50:14:e0:0f:09:2f:9b:d3:20:7e:68:7c:25:fb:
         48:02:47:80:12:3b:31:81:bc:d4:38:a9:71:65:1a:75:20:82:
         94:2a:d5:06:da:3a:5a:50:6e:ff:c5:ef:56:7e:a0:24:ad:be:
         47:fb:a3:35:d3:a2:5f:db:cf:62:3e:2a:e0:19:1a:87:a2:b3:
         fd:c7:49:9a:55:62:d5:e4:74:e0:e9:5f:7f:8c:da:98:1c:1d:
         48:1d:86:16:06:87:14:00:0f:3f:f2:63:27:7d:ca:cd:1d:02:
         55:32:ed:b6:01:e1:f8:ff:5c:a3:93:bb:29:cb:67:b7:a7:1c:
         93:0e:93:c7:67:91:f8:6d:c9:95:91:f5:64:e9:44:8d:02:fc:
         98:57:75:45:d2:46:6e:a0:79:b8:26:f3:62:10:79:21:ca:cd:
         ff:ba:40:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:37:48 2024 by rpki-client on console-ams.rpki-client.org