Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/eaa9968a-04da-3321-bae3-6e45c1621bf4.roa
File:                     eaa9968a-04da-3321-bae3-6e45c1621bf4.roa (raw, json)
Hash identifier:          kBjpFkSnu216XqxhrxK+TJdoXrpxe6rdAc6e0Bfl4H8=
Subject key identifier:   2A:BE:78:32:D5:66:67:79:F1:BC:6F:18:68:EF:10:65:B6:A8:F2:A5
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584581430B2B40A3CFC807EB20C0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/eaa9968a-04da-3321-bae3-6e45c1621bf4.roa
Signing time:             Thu 11 Apr 2024 01:00:25 +0000
ROA not before:           Thu 11 Apr 2024 01:00:25 +0000
ROA not after:            Wed 10 Jul 2024 01:00:25 +0000
asID:                     47516
IP address blocks:        50.114.185.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:81:43:0b:2b:40:a3:cf:c8:07:eb:20:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Apr 11 01:00:25 2024 GMT
            Not After : Jul 10 01:00:25 2024 GMT
        Subject: CN=3226048e-3c25-4835-abe2-a3c2f3c41dc5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:59:0b:3c:ad:27:24:8e:18:a7:f5:b2:b6:90:
                    18:95:0b:f5:99:5e:e3:95:59:36:0d:ab:ac:28:86:
                    e3:ff:cd:bc:e8:81:02:0c:b3:66:43:d2:5b:cc:f8:
                    7f:8f:04:61:3a:81:90:cf:02:a6:e5:b5:58:66:80:
                    25:92:1d:fb:52:58:08:fb:3b:bc:e4:54:21:28:dc:
                    01:1b:db:fd:5b:00:d6:87:61:59:e6:d4:f2:25:ef:
                    8e:21:d7:5c:b1:58:27:7e:03:2c:9d:37:20:57:58:
                    d4:19:29:08:aa:83:64:85:f4:b8:08:a0:34:35:7d:
                    6d:3e:59:6b:1a:f5:32:2d:3e:b9:ad:c6:45:97:ea:
                    cc:e7:92:48:0f:f4:fc:fd:e9:11:f7:dd:19:7f:67:
                    53:24:a7:ab:e3:14:71:b7:22:4b:51:ca:f7:82:ca:
                    a6:c9:ed:64:eb:e1:00:a2:84:76:8e:dd:d2:77:9c:
                    58:c5:bd:95:16:6a:10:6f:b1:d2:ab:fe:bd:8a:43:
                    a0:60:20:94:5d:b6:8f:9a:9f:d9:de:05:ae:2a:67:
                    7c:40:a2:e3:8f:ec:01:1b:e8:fb:00:22:9b:61:d9:
                    be:d6:ca:fc:7b:0b:b5:3e:bf:1e:77:d8:15:12:66:
                    5c:1a:ab:ca:ea:b8:dd:07:8a:aa:c1:a1:8f:60:57:
                    07:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:BE:78:32:D5:66:67:79:F1:BC:6F:18:68:EF:10:65:B6:A8:F2:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/eaa9968a-04da-3321-bae3-6e45c1621bf4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.114.185.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:f9:d5:62:17:d3:6a:c0:96:ff:f2:c8:3f:cc:c3:8d:d4:9f:
         ef:c2:24:9f:f2:c5:74:79:d9:3a:76:a5:e2:a9:17:b4:8d:0f:
         09:db:3a:b9:a1:eb:33:0d:db:82:0b:76:ba:4d:81:37:a0:65:
         e5:ab:a4:11:10:b5:25:01:a3:58:9c:5a:93:18:14:31:9a:ee:
         74:60:6e:42:9a:d9:c6:7c:ad:d9:1a:2b:2e:1b:0c:98:2c:ae:
         6b:b0:02:ff:50:5e:96:da:f1:f3:63:28:51:71:42:f8:8c:4c:
         00:f9:82:25:02:4b:bc:51:c1:85:dd:1e:64:c2:d6:42:e2:dd:
         e9:f3:94:06:0e:ab:aa:61:f1:9b:e7:2d:1c:b3:41:34:36:78:
         e4:52:62:09:c1:af:32:19:17:20:dd:8a:85:ab:bb:e4:e2:29:
         57:ac:cf:2b:7a:07:cf:19:76:40:fd:f9:9c:dc:5d:fc:66:40:
         92:d3:81:1c:4a:24:0d:42:70:37:20:cd:54:32:10:d5:ce:bb:
         5c:ed:6e:73:a4:57:86:2f:96:5c:ed:a6:40:12:6a:e2:a9:79:
         f3:9b:69:8b:78:8c:6c:aa:63:9a:fc:61:b4:63:75:e5:a0:16:
         cb:82:b9:71:fd:91:82:6d:a0:37:0f:a0:a9:5f:0a:ea:6a:6e:
         0e:ce:27:25
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWBQwsrQKPPyAfrIMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI0MDQxMTAxMDAyNVoXDTI0MDcxMDAxMDAyNVowLzEtMCsGA1UEAxMk
MzIyNjA0OGUtM2MyNS00ODM1LWFiZTItYTNjMmYzYzQxZGM1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk1kLPK0nJI4Yp/WytpAYlQv1mV7jlVk2Daus
KIbj/8286IECDLNmQ9JbzPh/jwRhOoGQzwKm5bVYZoAlkh37UlgI+zu85FQhKNwB
G9v9WwDWh2FZ5tTyJe+OIddcsVgnfgMsnTcgV1jUGSkIqoNkhfS4CKA0NX1tPllr
GvUyLT65rcZFl+rM55JID/T8/ekR990Zf2dTJKer4xRxtyJLUcr3gsqmye1k6+EA
ooR2jt3Sd5xYxb2VFmoQb7HSq/69ikOgYCCUXbaPmp/Z3gWuKmd8QKLjj+wBG+j7
ACKbYdm+1sr8ewu1Pr8ed9gVEmZcGqvK6rjdB4qqwaGPYFcHJQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCq+eDLVZmd58bxvGGjvEGW2qPKlMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvZWFhOTk2OGEtMDRkYS0z
MzIxLWJhZTMtNmU0NWMxNjIxYmY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAMnK5MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFv51WIX02rAlv/yyD/Mw43Un+/CJJ/yxXR52Tp2peKpF7SNDwnbOrmh
6zMN24ILdrpNgTegZeWrpBEQtSUBo1icWpMYFDGa7nRgbkKa2cZ8rdkaKy4bDJgs
rmuwAv9QXpba8fNjKFFxQviMTAD5giUCS7xRwYXdHmTC1kLi3enzlAYOq6ph8Zvn
LRyzQTQ2eORSYgnBrzIZFyDdioWru+TiKVeszyt6B88ZdkD9+ZzcXfxmQJLTgRxK
JA1CcDcgzVQyENXOu1ztbnOkV4YvllztpkASauKpefObaYt4jGyqY5r8YbRjdeWg
FsuCuXH9kYJtoDcPoKlfCupqbg7OJyU=
-----END CERTIFICATE-----
Generated at Fri May 3 22:27:30 2024 by rpki-client on console-ams.rpki-client.org