Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/db27b031-e22e-3460-9c14-0c2d14ac40a0.roa
File:                     db27b031-e22e-3460-9c14-0c2d14ac40a0.roa (raw, json)
Hash identifier:          cmRuI4kcW/ec5VmQYnipf1C5FQExCN5XNHfU0rhwCyw=
Subject key identifier:   9F:02:1F:4F:22:A5:98:34:E3:8D:94:C2:A7:32:66:24:97:84:C6:F6
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F432858472F307B25FD29909060213080
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/db27b031-e22e-3460-9c14-0c2d14ac40a0.roa
Signing time:             Thu 12 Sep 2024 01:00:31 +0000
ROA not before:           Thu 12 Sep 2024 01:00:31 +0000
ROA not after:            Wed 11 Dec 2024 02:00:31 +0000
asID:                     140902
IP address blocks:        50.114.80.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:2f:30:7b:25:fd:29:90:90:60:21:30:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Sep 12 01:00:31 2024 GMT
            Not After : Dec 11 02:00:31 2024 GMT
        Subject: CN=002f2263-971c-494e-a84a-c6aa1163743d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:d5:8c:44:bb:c1:79:a8:77:57:75:7b:b3:62:
                    ff:b3:0c:41:e6:75:26:98:1a:1e:5f:c9:07:8a:d4:
                    6f:05:3c:b2:9f:ea:45:07:fa:49:e2:8c:ba:00:e6:
                    1b:17:bb:e4:2b:2c:c2:e1:4d:a7:1e:61:9b:7d:6c:
                    05:9a:39:b1:e5:fa:cc:45:37:d1:ce:0b:06:cb:c2:
                    21:41:00:39:0b:9f:de:f2:2a:55:ae:49:f7:0e:c2:
                    35:63:ad:f0:94:88:2d:ef:e0:c8:dc:0b:6a:46:32:
                    cb:f9:fa:27:95:3a:f5:cd:1b:fc:fa:c0:c3:7d:8a:
                    e0:51:bd:ab:64:3e:2e:eb:79:5f:b7:04:2a:35:e7:
                    1c:57:4e:c5:68:e2:b1:27:e3:7a:89:85:c2:31:e8:
                    06:1d:d7:75:9c:8c:43:10:33:f5:17:2f:52:0e:bb:
                    81:e2:62:36:42:22:d6:34:89:6f:37:9f:8b:e5:46:
                    26:3f:39:57:a6:ef:c9:0f:17:5f:07:2e:da:e8:eb:
                    48:ff:0e:00:41:e8:ee:0e:71:67:8f:a1:97:a8:cf:
                    07:a5:e0:76:1b:ba:3a:e8:95:65:7f:9b:db:41:9e:
                    b0:34:1d:a5:45:75:15:34:39:32:6f:dd:02:6e:80:
                    bc:de:d0:3e:4a:02:63:c7:6f:fb:05:75:97:fb:0e:
                    01:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:02:1F:4F:22:A5:98:34:E3:8D:94:C2:A7:32:66:24:97:84:C6:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/db27b031-e22e-3460-9c14-0c2d14ac40a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.114.80.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:08:a5:b7:17:af:e1:72:9a:fc:cd:77:49:96:60:53:6e:a1:
         e5:5c:a0:67:f3:bc:9e:ef:02:e5:b5:8b:68:62:e9:da:d1:2c:
         5d:a4:98:cc:56:bd:23:00:18:38:25:12:f3:a3:c2:ef:ea:7a:
         52:af:cc:56:2e:d8:8f:ea:53:c8:e7:a2:f5:46:a6:ae:55:42:
         d4:8d:d0:5b:ac:31:34:79:59:7f:57:3f:40:15:c2:4f:69:89:
         22:46:99:fe:8a:ad:75:24:f3:ce:13:c2:a0:92:25:0c:82:78:
         3a:b5:54:5a:0e:36:23:f7:b7:f7:10:ee:da:a4:e2:24:d0:f2:
         b5:c3:5e:dd:37:b2:2d:b8:27:33:15:b4:b6:8b:a0:03:15:d0:
         f4:e8:30:75:fc:39:49:3a:43:20:90:64:50:de:93:58:75:21:
         ca:e8:d2:a1:03:6e:5c:a4:c8:75:86:19:40:f7:a1:0c:bb:ca:
         a4:56:54:03:9f:e5:a0:b0:7b:1a:61:52:87:50:c7:49:9f:e0:
         2a:76:91:88:b4:e0:cf:1b:39:ba:c6:2d:0b:63:74:fa:76:1b:
         50:35:14:dd:49:88:3e:dd:57:d1:27:d1:3a:b3:0b:88:71:d5:
         3b:5a:59:4a:d4:a6:55:6a:aa:60:fd:b5:8a:ef:56:78:fe:a3:
         eb:ca:79:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 05:50:28 2024 by rpki-client on console-fra.rpki-client.org