Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f27d37cf-326a-38a7-bba9-2e31137cea8a.roa
File:                     f27d37cf-326a-38a7-bba9-2e31137cea8a.roa (raw, json)
Hash identifier:          I2cG89z13jNdQaF3sI9Ab2j8Ia/kUwChFKa1wP7Z5n0=
Subject key identifier:   06:E5:61:F1:82:53:BF:D6:3E:C5:FC:C9:F7:3D:F8:B4:31:07:B2:6C
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285847FB1A26593A36819F8092B3C0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f27d37cf-326a-38a7-bba9-2e31137cea8a.roa
Signing time:             Sun 24 Nov 2024 02:00:27 +0000
ROA not before:           Sun 24 Nov 2024 02:00:27 +0000
ROA not after:            Sat 22 Feb 2025 02:00:27 +0000
asID:                     20473
IP address blocks:        50.114.65.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:fb:1a:26:59:3a:36:81:9f:80:92:b3:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Nov 24 02:00:27 2024 GMT
            Not After : Feb 22 02:00:27 2025 GMT
        Subject: CN=a25b12ab-1e90-4b4d-a41f-c61d01f0aaa6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:b3:0b:ba:f2:eb:71:55:15:4d:ec:41:eb:9c:
                    84:66:92:8e:a8:39:b0:7b:7c:d6:b5:7f:da:f2:1f:
                    5d:50:61:7b:ec:ea:df:26:52:ed:c0:31:7f:28:c9:
                    c1:f9:64:c1:15:15:b0:39:6f:c6:4b:9f:ea:26:25:
                    aa:a0:77:87:19:99:e6:fd:37:2e:47:d1:3b:24:37:
                    8d:e6:06:d7:bc:a6:d9:00:97:61:d7:29:c8:f7:2a:
                    59:a4:b7:a7:66:e6:fd:cd:66:1a:d5:72:45:89:df:
                    fd:0b:cb:09:fe:1d:e3:93:a5:a4:7f:3b:69:0f:5c:
                    9f:08:2a:ec:ba:7d:17:12:0b:f4:b2:51:fc:3d:d1:
                    d7:e8:65:d9:6d:d1:3f:01:2a:ee:7a:eb:25:ad:10:
                    9c:d9:7d:3d:e7:94:b7:5d:e6:51:40:3b:02:ae:e4:
                    f9:5d:49:9f:37:ab:fd:ed:85:40:d9:25:4a:47:f0:
                    e9:1d:56:ec:d6:a7:ac:fa:2f:dd:2f:15:a8:21:7c:
                    47:41:14:58:2e:87:43:fc:17:88:4d:0a:46:46:a3:
                    c2:a4:f9:63:4f:92:84:ca:24:18:95:75:4a:49:60:
                    2d:37:ef:f6:db:20:24:b6:0d:5e:7b:42:78:75:02:
                    d6:bb:0e:9b:9f:b8:1c:ba:db:4c:92:a8:50:ba:89:
                    7d:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:E5:61:F1:82:53:BF:D6:3E:C5:FC:C9:F7:3D:F8:B4:31:07:B2:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f27d37cf-326a-38a7-bba9-2e31137cea8a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.114.65.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:ad:a7:59:9c:7f:ec:5e:a5:e9:61:89:ca:27:22:99:df:ed:
         67:80:3f:2b:97:3b:c9:04:75:f7:43:e6:da:1a:32:6a:5e:36:
         d2:5c:33:ef:be:a6:43:23:98:f6:2a:47:42:b3:0b:e2:8a:3f:
         a7:5c:d1:e5:76:2f:26:13:2a:bf:bb:3c:67:5e:96:8c:3b:1b:
         a8:56:24:63:fe:21:0b:c8:8a:b6:ef:30:e0:95:9d:bb:98:e2:
         15:4b:91:63:f9:53:f0:a2:88:ac:ef:12:d0:be:52:da:d4:1f:
         bb:08:e5:b4:12:2b:e1:5b:26:93:9b:6e:c9:d3:f5:9a:74:b4:
         bc:fa:8f:26:82:38:82:9b:a5:11:97:57:be:2a:59:bd:f5:75:
         72:60:a1:3d:63:c1:c1:17:5e:52:84:4f:eb:0d:e6:6a:9b:0a:
         a5:48:62:cf:e9:94:85:a8:6e:f1:6d:d4:94:30:dc:ba:c1:21:
         09:2a:4e:a7:00:63:a5:01:de:f7:cc:9d:6b:df:61:d2:a3:69:
         de:e1:fe:f4:6c:72:9c:13:b3:74:29:e4:d8:1b:ea:a3:8a:6a:
         85:f4:5e:b8:ab:37:90:21:ca:7d:91:6f:98:d2:3c:9f:2f:39:
         7e:a7:08:57:82:ec:0b:05:58:fb:99:6d:2e:15:92:26:84:8f:
         fd:59:9b:92
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEf7GiZZOjaBn4CSs8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI0MTEyNDAyMDAyN1oXDTI1MDIyMjAyMDAyN1owLzEtMCsGA1UEAxMk
YTI1YjEyYWItMWU5MC00YjRkLWE0MWYtYzYxZDAxZjBhYWE2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqbMLuvLrcVUVTexB65yEZpKOqDmwe3zWtX/a
8h9dUGF77OrfJlLtwDF/KMnB+WTBFRWwOW/GS5/qJiWqoHeHGZnm/TcuR9E7JDeN
5gbXvKbZAJdh1ynI9ypZpLenZub9zWYa1XJFid/9C8sJ/h3jk6WkfztpD1yfCCrs
un0XEgv0slH8PdHX6GXZbdE/ASrueuslrRCc2X0955S3XeZRQDsCruT5XUmfN6v9
7YVA2SVKR/DpHVbs1qes+i/dLxWoIXxHQRRYLodD/BeITQpGRqPCpPljT5KEyiQY
lXVKSWAtN+/22yAktg1ee0J4dQLWuw6bn7gcuttMkqhQuol9wQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAblYfGCU7/WPsX8yfc9+LQxB7JsMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvZjI3ZDM3Y2YtMzI2YS0z
OGE3LWJiYTktMmUzMTEzN2NlYThhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAMnJBMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIqtp1mcf+xepelhiconIpnf7WeAPyuXO8kEdfdD5toaMmpeNtJcM+++
pkMjmPYqR0KzC+KKP6dc0eV2LyYTKr+7PGdelow7G6hWJGP+IQvIirbvMOCVnbuY
4hVLkWP5U/CiiKzvEtC+UtrUH7sI5bQSK+FbJpObbsnT9Zp0tLz6jyaCOIKbpRGX
V74qWb31dXJgoT1jwcEXXlKET+sN5mqbCqVIYs/plIWobvFt1JQw3LrBIQkqTqcA
Y6UB3vfMnWvfYdKjad7h/vRscpwTs3Qp5Ngb6qOKaoX0XrirN5Ahyn2Rb5jSPJ8v
OX6nCFeC7AsFWPuZbS4VkiaEj/1Zm5I=
-----END CERTIFICATE-----
Generated at Sun Nov 24 22:12:38 2024 by rpki-client on console-fra.rpki-client.org