Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/da370290-0c95-3b92-a24e-2d25e14566e4.roa
File:                     da370290-0c95-3b92-a24e-2d25e14566e4.roa (raw, json)
Hash identifier:          rcIgi5Yrph5TlijHq/hYYneM9H23/PT++DB8Toj7+B4=
Subject key identifier:   BF:12:8F:86:67:22:16:22:6A:BC:95:2E:38:95:43:E8:8B:F3:4D:79
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285847B3CC18F963A3AEB3F94F7500
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/da370290-0c95-3b92-a24e-2d25e14566e4.roa
Signing time:             Tue 29 Oct 2024 13:00:40 +0000
ROA not before:           Tue 29 Oct 2024 13:00:40 +0000
ROA not after:            Mon 27 Jan 2025 14:00:40 +0000
asID:                     397423
IP address blocks:        50.114.123.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:b3:cc:18:f9:63:a3:ae:b3:f9:4f:75:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Oct 29 13:00:40 2024 GMT
            Not After : Jan 27 14:00:40 2025 GMT
        Subject: CN=b5aa208b-46e2-49a6-85ec-a36c00fe8586
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:97:ee:8c:d9:25:0f:18:d2:f8:c8:8e:67:cc:
                    b0:d9:74:33:26:6c:14:96:0d:d1:e1:41:d7:0b:05:
                    37:c8:50:da:c0:13:88:3a:fd:12:ed:e0:14:b7:b5:
                    a3:67:19:a0:b9:25:7c:37:38:65:e2:52:6b:b3:14:
                    c5:a4:0d:d1:93:d9:89:c9:ef:a4:92:c1:3f:f0:84:
                    0d:5b:d1:6f:c8:da:d3:7e:af:f8:a9:7d:54:51:b5:
                    d6:d3:8d:12:44:00:54:26:72:9f:86:c4:1b:c8:1e:
                    3f:7e:b6:a2:87:2a:64:f8:e2:bd:47:48:58:75:29:
                    7c:a8:12:44:be:65:d5:d9:f2:f5:1c:15:aa:db:f3:
                    bf:61:12:dd:db:2f:b7:3b:98:4d:aa:ac:a2:e8:db:
                    1c:f2:2d:9f:39:fb:3a:03:64:de:35:7c:33:88:43:
                    b3:28:06:ce:c5:16:b1:d1:fe:4b:29:39:34:6b:57:
                    90:2c:a2:81:7b:7c:c3:e4:35:44:ab:71:cf:c6:d2:
                    20:d9:0d:1d:ab:7c:16:76:f4:c3:74:fc:91:63:09:
                    89:b8:17:11:c0:46:2a:dd:3b:4f:ba:8a:0b:e6:ab:
                    25:fb:e4:03:dd:4b:3d:66:75:ad:b1:45:37:08:96:
                    7a:44:e7:a9:f9:eb:15:6b:7d:4e:e7:36:a6:aa:f4:
                    81:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:12:8F:86:67:22:16:22:6A:BC:95:2E:38:95:43:E8:8B:F3:4D:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/da370290-0c95-3b92-a24e-2d25e14566e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.114.123.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:65:e7:6f:99:b3:6a:f3:d9:22:5e:2d:a6:24:44:7e:99:c0:
         1f:63:24:c5:ec:45:b4:5f:11:c9:23:3f:fb:ee:9a:54:d8:d8:
         fe:36:fa:a0:49:10:ae:f8:cc:bf:11:d3:72:1b:f5:1f:23:66:
         71:66:a0:16:54:b5:5f:1b:58:b7:6a:e1:c9:62:73:1c:de:55:
         67:84:e4:e3:bb:48:49:b1:fb:03:5d:e5:b7:f2:52:63:6b:64:
         62:a8:e1:a6:20:c0:bd:93:f9:89:79:5a:8a:60:9c:94:68:03:
         f2:97:26:5f:50:48:b3:a7:cb:d1:87:98:f6:9b:a6:19:62:fd:
         a3:18:80:f7:e3:2a:55:e7:33:43:17:2d:14:eb:b7:71:11:ad:
         97:fd:e5:3d:d7:d0:28:58:5a:d4:fa:cc:ad:f7:1e:11:84:d6:
         81:71:c0:62:74:81:ae:ca:4b:4b:d0:60:ab:8f:7f:7f:93:25:
         e2:fc:76:bc:ee:be:0b:9e:8f:39:49:fe:5d:b8:30:03:0a:d2:
         ee:45:e3:ac:18:bc:35:d3:c8:de:e3:85:2c:0d:b5:12:e8:6b:
         66:ff:74:98:5c:16:2e:7a:07:2c:20:62:bb:4d:93:48:59:c3:
         ea:53:74:26:6b:b2:85:92:80:c1:fd:34:11:eb:25:9b:3a:a1:
         20:4f:38:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:18:20 2024 by rpki-client on console-fra.rpki-client.org