Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ecb1a152-9e48-3647-8ddd-a89e2b7cc9ba.roa
File:                     ecb1a152-9e48-3647-8ddd-a89e2b7cc9ba.roa (raw, json)
Hash identifier:          kKEWB9zfL8BG23msPmcnyHaZfuJqgNCEEzlYzgGjHIE=
Subject key identifier:   F8:F1:08:E6:13:FC:38:95:FF:64:6A:79:38:2B:3B:34:5B:90:2F:A3
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285847CD09FCE0700E0EDC3EDA2BC0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ecb1a152-9e48-3647-8ddd-a89e2b7cc9ba.roa
Signing time:             Thu 07 Nov 2024 14:00:39 +0000
ROA not before:           Thu 07 Nov 2024 14:00:39 +0000
ROA not after:            Wed 05 Feb 2025 14:00:39 +0000
asID:                     39600
IP address blocks:        50.114.119.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:cd:09:fc:e0:70:0e:0e:dc:3e:da:2b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Nov  7 14:00:39 2024 GMT
            Not After : Feb  5 14:00:39 2025 GMT
        Subject: CN=d2912f7f-a436-4d59-b8c0-c49695b02871
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:7a:0d:d0:ed:e1:58:e3:25:c6:28:3d:3e:a8:
                    a1:d8:bf:e3:25:3d:48:33:94:5f:fb:5a:28:db:50:
                    e6:4c:a0:62:81:23:50:ba:b1:0b:12:31:98:9f:46:
                    30:ec:26:27:7f:ce:d9:42:17:78:5d:50:f3:a8:f0:
                    10:79:42:9c:49:77:c5:f4:e9:ac:42:0a:c0:11:22:
                    e7:c0:e3:12:69:fa:c5:c7:71:35:82:7b:d3:b7:77:
                    c5:9a:70:f8:88:c1:70:dc:2b:b0:89:86:d5:ad:8e:
                    3f:ab:04:d1:1d:cc:63:ab:1f:54:66:a7:2f:b7:fc:
                    a7:dc:7d:8a:17:e9:e9:c5:5f:1b:f2:94:87:09:9c:
                    64:83:84:b1:48:d7:fe:b3:f6:81:11:ca:80:59:33:
                    7c:7c:5a:35:7f:18:5d:1f:25:a4:dd:3b:5e:7c:05:
                    89:4e:cb:5c:d3:2e:3c:d4:20:49:17:40:2f:ee:7f:
                    b6:4f:96:dc:65:0d:d3:1b:1e:7d:07:d9:62:db:9b:
                    60:f9:d4:ca:0d:ea:a3:c7:f3:17:3c:29:36:e9:55:
                    1a:7e:c0:01:1e:6a:d5:8b:ec:8a:5c:b2:44:20:f3:
                    75:d3:f1:fd:47:ea:c0:4e:a6:35:c5:40:ae:2b:b4:
                    7d:1c:d7:1a:ad:39:d6:c3:3d:35:62:b2:fc:21:78:
                    73:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:F1:08:E6:13:FC:38:95:FF:64:6A:79:38:2B:3B:34:5B:90:2F:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ecb1a152-9e48-3647-8ddd-a89e2b7cc9ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.114.119.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:1f:36:21:e4:0c:b4:19:31:a8:fc:d9:9d:9b:11:81:46:dd:
         27:b7:d5:c3:c2:63:a1:8c:e1:ba:0e:53:b7:25:e9:ed:9f:ab:
         69:98:05:a1:1a:5e:45:f9:af:b7:5b:d0:32:b0:5e:35:db:c9:
         68:b6:c2:6c:86:d5:a4:c8:49:e0:73:cf:9b:7f:9e:33:e6:bc:
         b9:1c:b9:27:12:0b:4f:38:28:73:1a:f4:f0:f1:fb:7e:f6:3a:
         c3:a1:bb:2a:d8:60:ae:5f:5d:27:0a:ed:9c:fe:98:b3:3c:5b:
         80:ea:fd:16:73:b5:cc:a9:ce:71:63:be:39:73:ff:ea:93:30:
         a9:9d:30:56:74:c3:a2:f2:72:5a:23:1e:d2:f7:4c:7e:86:da:
         cd:e3:7a:01:7d:a1:f9:e8:74:12:22:d8:2f:4c:56:52:26:de:
         95:bc:45:41:59:de:23:71:d5:57:d3:49:de:4a:aa:f3:b9:b5:
         63:c9:23:ad:3e:7d:83:cd:7c:fc:7b:cf:3d:f4:a6:f2:91:c6:
         77:bc:aa:ae:d9:1d:a7:80:a0:38:68:d9:f2:f4:2b:59:46:15:
         5a:a6:b0:04:6d:bd:34:33:68:0f:5a:ef:d4:30:a1:6d:18:50:
         8c:51:f5:cb:c7:5d:f7:87:44:93:c1:d1:35:1b:05:f7:e9:bb:
         e2:23:c7:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:37:51 2024 by rpki-client on console-ams.rpki-client.org