Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/fab35af5-871d-3720-be9e-126e80752071.roa
File:                     fab35af5-871d-3720-be9e-126e80752071.roa (raw, json)
Hash identifier:          K1ByKSOZeZVtKLPo0sm5sRtkjNgop4Upaa6EqY5udA8=
Subject key identifier:   62:73:ED:FA:B0:42:EA:5D:05:29:4A:9F:14:89:4B:AC:81:D5:89:0C
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285847A6627A81329771BDDCA28B00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/fab35af5-871d-3720-be9e-126e80752071.roa
Signing time:             Thu 24 Oct 2024 17:42:33 +0000
ROA not before:           Thu 24 Oct 2024 17:42:33 +0000
ROA not after:            Wed 22 Jan 2025 18:42:33 +0000
asID:                     210644
IP address blocks:        50.114.28.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:a6:62:7a:81:32:97:71:bd:dc:a2:8b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Oct 24 17:42:33 2024 GMT
            Not After : Jan 22 18:42:33 2025 GMT
        Subject: CN=6c75d90c-1c16-431f-bbba-07f2157ccdb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:8a:65:6a:6d:f8:17:70:9e:a4:db:95:28:81:
                    66:1e:01:77:56:4c:61:d8:43:23:a0:aa:2a:4b:c4:
                    db:fc:ea:42:42:36:55:63:0d:66:0c:4a:7c:87:f0:
                    73:33:aa:5a:10:af:ed:db:3a:3f:fa:bc:b1:0f:a0:
                    de:7e:f6:b0:8c:90:59:66:35:6a:66:da:c5:f9:24:
                    63:40:31:cf:a6:f4:ec:31:c3:3d:5b:b4:be:83:59:
                    8a:7a:3c:f6:42:e2:4d:7c:e6:9c:5d:49:87:9b:8a:
                    de:01:aa:ec:2f:c2:86:35:09:b2:92:16:1f:86:34:
                    c4:11:24:b1:55:79:48:be:10:79:e4:43:f9:51:d0:
                    0e:94:3b:cb:f5:31:82:99:f7:e6:ca:3d:31:7a:ea:
                    91:c6:c9:ca:72:76:b5:2c:7b:49:87:bb:43:2c:c1:
                    e0:c3:4b:9f:15:6b:1a:9f:40:38:f0:44:47:8b:6b:
                    71:c5:29:0c:c1:d8:10:66:4f:6b:df:f8:24:67:7f:
                    6f:fb:31:ba:85:b0:2b:57:68:d1:4c:68:ff:6a:e2:
                    75:c2:aa:d5:82:5e:53:c8:48:ab:43:16:e1:27:c9:
                    5b:98:8a:46:94:5b:4d:3b:6e:12:d5:23:ff:9a:f6:
                    81:88:f3:85:ad:84:17:fb:3c:73:6b:05:2a:83:ee:
                    ec:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:73:ED:FA:B0:42:EA:5D:05:29:4A:9F:14:89:4B:AC:81:D5:89:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/fab35af5-871d-3720-be9e-126e80752071.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.114.28.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:2c:b0:03:20:5b:7a:c2:10:63:c2:9b:16:4c:7b:45:bb:4f:
         2b:30:3a:6b:eb:35:a1:f5:21:4d:50:7f:78:83:f7:a3:7a:19:
         90:37:4a:6c:6f:2e:ef:66:91:e3:c3:f6:07:cc:06:52:5f:04:
         9c:3e:f9:b0:15:70:cf:4e:b4:dd:d8:13:25:63:16:f4:b5:6c:
         31:6b:f0:54:8f:d5:6c:e2:7a:53:a5:9e:17:ee:88:62:0a:2c:
         54:48:c9:03:31:9c:d0:07:3d:69:19:38:5a:4a:02:96:26:95:
         79:61:0a:59:66:ee:f0:0b:2e:16:85:7e:06:72:3d:59:e6:aa:
         56:85:d0:65:7b:2d:d0:99:f7:55:e1:fa:e3:fd:62:9e:99:e2:
         fa:c2:3c:70:10:f0:69:5b:41:b7:ed:dd:66:4d:bd:c5:11:6e:
         ef:4f:74:32:88:80:c1:a9:e6:45:29:d9:29:1f:fe:90:2a:dd:
         cd:39:f1:9d:01:1d:61:76:1c:8a:5d:07:d0:6d:02:29:ad:45:
         ef:0e:bc:4a:eb:2a:5a:6d:18:17:79:af:11:a8:a5:06:d3:59:
         77:a6:b4:8d:7a:a2:98:cd:e4:8f:63:6b:cd:dd:8a:40:98:a3:
         b8:a6:c1:0d:ed:ea:fc:1a:1a:a0:03:2c:d2:ec:6e:3b:ff:e1:
         c1:b2:70:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 05:50:31 2024 by rpki-client on console-fra.rpki-client.org