Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ec8cb2a9-f062-37ee-90dd-2c90ae5797b6.roa
File:                     ec8cb2a9-f062-37ee-90dd-2c90ae5797b6.roa (raw, json)
Hash identifier:          S4GGRLDG7ydtoBkvo+M0jRG0ba9MvWkexuI1+0QJRUg=
Subject key identifier:   96:AD:C4:4A:FF:27:06:36:EA:1D:C1:7B:FB:23:F6:84:5A:4D:F6:06
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F432858471E7058B121295A2776FF9080
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ec8cb2a9-f062-37ee-90dd-2c90ae5797b6.roa
Signing time:             Fri 06 Sep 2024 01:00:31 +0000
ROA not before:           Fri 06 Sep 2024 01:00:31 +0000
ROA not after:            Thu 05 Dec 2024 02:00:31 +0000
asID:                     26548
IP address blocks:        50.114.192.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:1e:70:58:b1:21:29:5a:27:76:ff:90:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Sep  6 01:00:31 2024 GMT
            Not After : Dec  5 02:00:31 2024 GMT
        Subject: CN=afb48883-1ca6-4c24-91ea-c88ba410730c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:fa:3f:06:bf:08:82:12:00:65:f3:be:07:72:
                    90:10:11:21:18:2d:83:08:61:ea:1c:cd:db:e7:d7:
                    69:84:5d:6c:74:2c:f1:77:84:1c:5d:e7:93:df:35:
                    ff:1e:ba:80:45:82:07:78:aa:cb:f0:39:cb:36:b5:
                    38:8a:83:1d:a7:33:a5:d3:f4:9e:08:64:b8:3a:b8:
                    4e:a7:ed:d0:b2:97:ea:6f:af:3f:df:27:d5:75:d2:
                    d0:e0:3d:13:58:13:78:3e:81:c1:d4:c6:27:13:6a:
                    b4:86:6a:56:87:d6:46:11:8d:ed:e8:63:ea:b0:05:
                    e6:1c:1f:aa:80:db:80:dc:09:49:33:98:cb:de:0e:
                    90:8b:1a:0a:d5:36:8c:6d:9f:8b:69:e6:77:5d:9b:
                    be:ef:c9:d4:40:c1:67:71:04:fd:d0:e5:b5:dd:14:
                    66:94:93:83:e2:d2:77:5f:05:51:8f:eb:0f:9c:cf:
                    f3:b0:a2:18:7e:88:50:a2:60:84:38:52:aa:37:a8:
                    80:39:98:21:2a:a8:75:43:25:dd:9b:a3:a4:59:1f:
                    78:dd:cd:06:70:f7:f7:2f:e0:c5:d3:95:f0:93:ce:
                    c0:4a:a9:0c:0b:66:a7:6a:d8:88:b5:db:f0:24:28:
                    01:24:db:21:84:bd:fc:86:18:f9:ea:46:8f:40:60:
                    8b:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:AD:C4:4A:FF:27:06:36:EA:1D:C1:7B:FB:23:F6:84:5A:4D:F6:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ec8cb2a9-f062-37ee-90dd-2c90ae5797b6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.114.192.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:da:60:65:0b:a2:ce:be:2c:e8:da:c0:0d:02:b5:aa:cb:f0:
         86:63:df:c4:6e:ee:1f:59:aa:79:83:b2:db:43:95:67:24:36:
         5d:47:8f:4f:2c:a6:cf:d1:2a:d6:77:64:41:38:39:58:05:9c:
         6a:cf:5e:2a:e3:0d:0e:e1:94:9a:28:45:f6:8a:91:ea:92:06:
         d5:49:3c:4e:76:4b:21:2a:d5:ad:ff:32:73:e3:d8:d3:90:29:
         8f:54:7b:7f:51:9c:8c:57:06:63:28:63:9c:fc:dd:92:72:94:
         49:5c:08:cc:40:9a:e5:63:f0:ed:fd:b8:56:26:aa:11:90:59:
         b6:a1:a1:58:c8:82:24:2f:45:b6:0d:59:e5:5f:1f:a7:48:6e:
         d8:a1:7a:4a:84:a5:79:18:38:e6:52:aa:ca:2d:3f:5e:7d:ee:
         cc:f7:1a:4d:76:f1:63:51:1f:0d:de:ee:5f:5c:18:4f:4c:18:
         f7:8f:8e:84:f9:44:6a:51:e9:09:14:aa:44:98:ed:30:aa:62:
         00:d0:87:e7:10:1b:3f:cd:df:bc:30:2b:45:81:59:22:e4:0c:
         ab:2e:0e:d9:8f:97:de:36:58:fa:65:b9:d6:33:a6:63:c4:2b:
         a6:8e:68:80:ca:22:b1:8e:60:e6:91:73:a1:5a:f2:7e:a5:82:
         ff:17:34:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:18:24 2024 by rpki-client on console-fra.rpki-client.org