Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d30bbb99-efc9-3b8b-ade3-be8b79825c5b.roa
File:                     d30bbb99-efc9-3b8b-ade3-be8b79825c5b.roa (raw, json)
Hash identifier:          6kVMh5adCSvVOqyNip2gDORqoIr+M2c17Za+Zp8yNMo=
Subject key identifier:   92:34:A4:F3:3E:47:A2:01:C8:A7:17:93:32:3B:1B:29:63:CD:0B:6A
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285847A6627B2116CC3B5ACC403700
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d30bbb99-efc9-3b8b-ade3-be8b79825c5b.roa
Signing time:             Thu 24 Oct 2024 17:42:34 +0000
ROA not before:           Thu 24 Oct 2024 17:42:34 +0000
ROA not after:            Wed 22 Jan 2025 18:42:34 +0000
asID:                     210644
IP address blocks:        50.114.117.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:a6:62:7b:21:16:cc:3b:5a:cc:40:37:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Oct 24 17:42:34 2024 GMT
            Not After : Jan 22 18:42:34 2025 GMT
        Subject: CN=3d495ead-65f7-4f29-9745-aa7331e42ac9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:59:ac:31:80:62:49:77:cb:23:6c:76:d7:a5:
                    ae:9e:93:cb:c9:00:a3:7e:d1:69:ac:68:9a:ab:42:
                    a7:89:e4:a9:ce:7b:cf:86:e5:a5:6b:a1:77:00:ba:
                    7c:48:5f:b4:33:89:86:52:fa:6b:c0:5c:d7:d3:c9:
                    c1:16:1d:c6:6c:32:26:b4:52:26:f9:a8:64:70:97:
                    31:2c:b1:63:5a:c6:76:91:fb:6a:ce:37:ff:d8:7f:
                    40:ae:49:4a:ac:17:5c:4e:cb:c6:75:cc:e0:ca:44:
                    99:c4:50:ce:fd:68:9d:8a:8f:db:22:3d:f2:f7:d7:
                    ab:35:e8:1e:02:f4:72:1c:5e:42:2c:93:d6:a9:9d:
                    d8:54:a4:f0:f5:07:6f:b0:aa:8a:10:3d:4d:18:61:
                    e0:57:c8:25:4b:fc:ce:55:36:a5:10:3b:bf:c7:81:
                    94:b6:40:bf:84:b8:34:48:de:de:b7:64:b7:6c:5e:
                    a0:b1:3e:99:81:63:83:24:91:fa:49:55:e8:8c:91:
                    14:28:5e:d9:1d:87:cb:56:bf:9c:9f:2b:fc:21:24:
                    3e:31:82:0a:10:f9:b2:f5:2a:e4:cf:8b:68:db:88:
                    b6:77:17:3d:b0:05:23:77:34:95:c5:1f:86:a7:22:
                    30:d4:94:a0:53:a6:82:e0:cb:28:53:5f:c5:29:02:
                    3e:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:34:A4:F3:3E:47:A2:01:C8:A7:17:93:32:3B:1B:29:63:CD:0B:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d30bbb99-efc9-3b8b-ade3-be8b79825c5b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.114.117.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:25:cd:9d:22:aa:c3:1a:27:6c:98:52:1f:e7:6b:8e:5d:5b:
         17:03:06:6f:ad:68:03:f1:9c:1e:8a:01:c7:fb:b1:ae:1a:3c:
         52:d3:68:8f:43:27:70:a1:cb:b0:b3:cc:64:11:72:c0:42:66:
         6a:c3:9d:bc:30:5d:24:2a:12:9d:61:56:4f:18:7e:a2:1b:63:
         a7:4d:b8:ad:f4:f1:81:87:8f:ca:3c:73:9d:70:88:41:75:cf:
         18:00:e3:2b:f1:c7:cf:bc:a2:0e:ee:11:cf:4d:33:68:0e:f5:
         5e:33:0e:f3:17:a3:f2:d8:9c:55:2e:5a:14:72:f2:42:3a:51:
         f6:74:e7:0c:e0:43:61:e8:f8:06:7c:f8:52:9f:fe:cd:2a:a8:
         20:43:dd:81:85:aa:6c:3c:da:e6:9d:cf:9d:38:c6:3d:52:74:
         82:62:f5:c7:ab:6f:5f:06:e1:da:51:db:95:e4:7e:9d:e7:48:
         be:d3:63:5d:00:77:72:c2:28:16:75:a5:69:8a:4c:82:66:0d:
         a1:9e:37:9f:55:ec:2a:f8:77:9a:5e:04:c4:63:84:26:bd:7a:
         ea:e8:56:5f:2c:ac:dd:63:00:f4:03:13:d4:2b:85:ef:23:7d:
         0b:dd:bf:ca:65:c7:99:da:aa:af:19:b0:d6:a6:25:b6:3c:83:
         1c:9f:68:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:37:48 2024 by rpki-client on console-ams.rpki-client.org