Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/de464278-5dea-3a2e-9260-ed087807c0b4.roa
File:                     de464278-5dea-3a2e-9260-ed087807c0b4.roa (raw, json)
Hash identifier:          nXBjPEh5lmc2+ThGONquLjQM4fObZnx//0xIqh93o4E=
Subject key identifier:   8D:CC:B8:22:8C:8C:02:06:0E:F4:15:43:77:D2:C5:40:27:BA:ED:69
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F432858483E1ABEF68EF7FD61C3405F40
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/de464278-5dea-3a2e-9260-ed087807c0b4.roa
Signing time:             Wed 18 Dec 2024 02:00:39 +0000
ROA not before:           Wed 18 Dec 2024 02:00:39 +0000
ROA not after:            Tue 18 Mar 2025 01:00:39 +0000
asID:                     46450
IP address blocks:        50.114.124.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 09 Feb 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:3e:1a:be:f6:8e:f7:fd:61:c3:40:5f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Dec 18 02:00:39 2024 GMT
            Not After : Mar 18 01:00:39 2025 GMT
        Subject: CN=09d33a74-784f-4259-8d61-ead30865c107
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:4c:07:06:2d:10:ba:21:86:4b:7d:73:64:1a:
                    d3:c4:c3:33:cc:81:5e:90:9b:0c:91:68:e3:3e:03:
                    5c:8e:de:a4:58:37:c1:05:fa:94:9b:6f:7e:9d:8b:
                    8b:c6:fe:7f:b3:23:5d:71:02:4f:39:db:22:38:69:
                    d1:d6:44:e1:40:b5:29:81:0c:e1:b0:14:c3:1c:54:
                    e1:e9:0a:dd:16:20:c3:56:d6:59:a6:d7:8c:3c:eb:
                    44:fc:cc:82:3d:74:86:bc:3b:6a:86:ce:d7:3b:25:
                    ef:8b:b0:2b:2e:59:cb:65:1b:fe:a6:b2:a2:e6:4e:
                    16:fd:55:ce:c2:be:4f:0d:d7:d5:8d:ee:c6:90:07:
                    81:4b:f4:83:22:d4:8a:3f:41:9b:6f:49:b0:24:8e:
                    53:53:20:ac:4e:8f:25:e4:35:0a:01:ab:70:5e:6d:
                    64:59:58:2c:69:8e:3e:d9:c4:4c:27:4e:6f:8d:3a:
                    0c:79:c6:b3:e9:fd:40:c6:08:a8:54:99:d6:7c:e5:
                    89:0c:b1:fd:e9:0b:71:85:c3:1d:0b:0d:14:f3:62:
                    bb:8b:fe:ac:2f:d0:12:1b:4d:b9:e2:f7:ea:e6:ae:
                    69:d6:ee:b4:2b:7b:22:86:74:f9:93:4a:10:8e:cd:
                    d0:f8:97:58:a8:ae:89:70:a2:eb:a9:79:13:08:be:
                    6f:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:CC:B8:22:8C:8C:02:06:0E:F4:15:43:77:D2:C5:40:27:BA:ED:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/de464278-5dea-3a2e-9260-ed087807c0b4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.114.124.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:4f:87:71:03:61:f5:3e:c5:26:2a:9e:21:c2:c2:fb:04:87:
         71:89:d7:07:05:8f:24:56:10:e0:89:0f:91:f5:65:bf:df:c1:
         c0:1f:c6:44:65:e5:4e:ba:24:5b:16:3a:68:42:27:1c:0e:97:
         d4:4c:f5:48:40:8b:b2:25:bc:b6:53:d1:e0:4b:38:ea:ac:44:
         4a:24:05:95:a4:7f:2e:76:80:d9:76:d2:8e:de:53:32:b1:d6:
         c1:a7:d1:f5:99:0d:62:84:af:11:cb:47:04:db:c8:16:71:41:
         b0:c6:cb:53:35:a4:ab:32:67:a4:6c:69:a8:2c:64:49:d4:23:
         f0:7d:96:a6:5a:70:77:62:19:9b:ab:cb:d3:43:9b:d4:09:fa:
         fe:d2:64:0f:27:c2:4c:4b:20:ac:33:fa:b5:26:ef:f5:16:83:
         34:af:c6:ac:c3:39:1a:4e:86:4a:f4:ea:6a:5e:5b:02:02:a7:
         a0:2d:9a:c2:6a:69:76:68:e7:b5:42:4d:91:3b:8d:a4:8d:b3:
         f3:4a:51:51:d8:1c:c4:85:0d:e8:5c:f2:75:02:40:43:e9:41:
         f5:bc:a9:61:2d:f5:61:a2:1e:31:31:8d:b5:22:53:19:04:1b:
         a0:7e:da:a6:59:22:d0:b9:55:46:54:8a:9a:8b:29:3a:81:b7:
         24:0d:5e:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 7 17:10:39 2025 by rpki-client