Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f95b5144-ff6f-3803-8923-2585983d2b70.roa
File:                     f95b5144-ff6f-3803-8923-2585983d2b70.roa (raw, json)
Hash identifier:          YCYQ+s8wVSk5RGufbx6jE5ZKixpLC2gdHUD1rTl81Fo=
Subject key identifier:   D4:17:F7:5D:70:96:1C:10:F7:84:7E:31:F8:5A:66:09:F5:FB:9A:F5
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584731FB9B9BBFD2303B6CCB9FDE
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f95b5144-ff6f-3803-8923-2585983d2b70.roa
Signing time:             Fri 13 Sep 2024 01:00:32 +0000
ROA not before:           Fri 13 Sep 2024 01:00:32 +0000
ROA not after:            Thu 12 Dec 2024 02:00:32 +0000
asID:                     58061
IP address blocks:        50.114.163.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:31:fb:9b:9b:bf:d2:30:3b:6c:cb:9f:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Sep 13 01:00:32 2024 GMT
            Not After : Dec 12 02:00:32 2024 GMT
        Subject: CN=3140b7e6-61bd-4db9-b63c-d602939fc7b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:b5:5e:63:40:c6:4a:a4:aa:0f:a5:50:3e:db:
                    a2:20:4c:06:63:37:cc:e0:6c:8c:69:4a:15:ef:b5:
                    77:f0:4a:0c:6b:0c:d6:77:eb:a4:d7:6c:c1:80:40:
                    69:66:cc:32:43:34:bb:67:81:48:86:37:64:f1:0d:
                    e8:ae:bf:f9:00:70:65:e2:38:11:2f:f1:2e:b6:45:
                    ad:32:8d:f9:e5:af:a2:00:4e:22:e8:ff:21:e7:dd:
                    3d:f4:23:a5:35:8b:a2:28:12:bf:2c:53:20:41:7f:
                    38:5d:20:2b:7c:3f:37:17:79:18:fa:f0:1e:ed:0b:
                    2b:17:e8:10:06:c2:fb:7d:ad:97:0e:19:9c:81:5c:
                    99:16:8c:f9:22:e7:12:a1:4f:6b:0a:2c:80:59:ce:
                    15:4b:9f:84:f7:17:48:04:5e:93:48:04:34:5a:37:
                    62:b3:3e:aa:25:a0:e6:2d:85:04:41:21:0a:a1:1a:
                    fd:1e:62:0d:59:1d:eb:1a:3d:80:02:d4:e1:54:88:
                    1c:de:64:ac:56:64:63:67:14:38:e6:ac:e1:1d:1f:
                    e1:cb:de:a6:d3:e6:32:97:62:9b:56:08:2c:ee:eb:
                    fb:1e:38:88:69:f1:4a:9d:cf:8c:85:91:5a:d7:53:
                    29:4e:f2:1f:54:08:0d:a6:dd:51:04:c8:05:37:5f:
                    8f:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:17:F7:5D:70:96:1C:10:F7:84:7E:31:F8:5A:66:09:F5:FB:9A:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f95b5144-ff6f-3803-8923-2585983d2b70.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.114.163.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:c6:3b:b3:8e:dd:0d:9d:fd:17:b9:f3:4b:77:0d:5c:93:af:
         ae:92:b9:76:f5:be:45:55:52:af:8a:6a:48:f2:82:67:1b:1e:
         e4:37:a9:45:7a:66:6a:ba:00:06:e3:49:7e:4b:af:84:ea:19:
         ce:d9:9d:89:a8:e1:ab:7f:88:14:16:de:85:a4:b7:60:d7:46:
         f3:de:b7:3d:56:e9:bf:0f:e3:75:0e:d0:2a:95:45:0c:5f:6a:
         40:36:e8:62:c6:29:d2:20:45:af:07:e0:1f:c0:a3:d1:7f:9c:
         de:aa:9c:ab:31:f6:d8:41:0a:b5:c6:9e:9c:29:55:56:ae:fd:
         cb:cb:dd:62:5f:3d:e6:bb:82:e9:17:6a:3d:45:07:80:ba:81:
         93:6b:70:21:c0:fd:68:9b:de:ce:5c:de:0f:fa:83:48:97:67:
         0e:eb:c3:e3:d9:82:1e:95:08:5d:7e:26:ae:a5:97:0d:c8:33:
         c5:65:a2:41:0f:1d:ad:4e:89:b4:93:35:b3:e8:b3:9c:14:0c:
         54:f4:0a:55:a4:2b:cd:d1:cf:44:4e:05:68:db:9b:27:ba:3b:
         c6:b4:99:03:22:d1:2c:3f:ad:ae:f9:d1:0e:ec:e1:f5:45:2f:
         0f:18:9d:12:91:f1:43:65:ad:e4:21:cb:7d:e6:27:aa:af:22:
         30:ab:8c:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:32:27 2024 by rpki-client on console-fra.rpki-client.org