Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/fb23ad91-e243-392a-b642-2c6479395a1e.roa
File:                     fb23ad91-e243-392a-b642-2c6479395a1e.roa (raw, json)
Hash identifier:          Y9pRqdsh08l/m7aoLiYV0xngzyDNQelfmgGltoMwzds=
Subject key identifier:   53:F6:A9:78:3B:AD:2B:49:85:B9:F7:17:EA:54:74:D5:E0:14:70:A4
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F432858471E7058A052F43F767FCC8F80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/fb23ad91-e243-392a-b642-2c6479395a1e.roa
Signing time:             Fri 06 Sep 2024 01:00:31 +0000
ROA not before:           Fri 06 Sep 2024 01:00:31 +0000
ROA not after:            Thu 05 Dec 2024 02:00:31 +0000
asID:                     26548
IP address blocks:        50.114.252.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:1e:70:58:a0:52:f4:3f:76:7f:cc:8f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Sep  6 01:00:31 2024 GMT
            Not After : Dec  5 02:00:31 2024 GMT
        Subject: CN=f3d8367f-131c-47a6-b956-cc997618ce30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:16:9e:01:d8:fb:c5:8b:86:65:c6:3f:8c:42:
                    18:cf:ed:4a:35:f7:ab:07:60:94:61:7f:00:da:04:
                    d3:e0:04:8b:fb:c2:f3:8d:8b:e0:d6:b4:e1:7c:a0:
                    b3:3b:12:4d:5b:95:16:cc:2d:fd:84:c5:90:49:7f:
                    85:ca:97:b2:71:9d:d6:ff:f8:5b:e6:6a:a5:74:6e:
                    1f:2b:e5:9a:3b:18:c6:d0:1f:e1:98:a0:5b:49:42:
                    35:0a:0d:04:66:9b:da:12:8c:f2:78:c1:f8:4c:a1:
                    36:57:36:a8:3b:c1:41:52:3b:b0:a3:c5:0a:67:d0:
                    d3:ef:8c:82:22:5c:2d:a1:94:64:a4:7e:62:fc:de:
                    59:93:bf:a7:98:63:26:2a:51:e0:ba:b1:22:26:51:
                    35:bf:a3:2a:87:a7:e4:d8:11:8e:bf:8a:65:5b:7f:
                    8a:73:9c:d6:77:25:34:67:6c:0a:47:d0:20:df:b3:
                    45:b4:b4:a1:ac:1b:37:4b:39:33:27:76:5f:0d:76:
                    8c:b9:60:b5:b0:10:55:5d:a2:41:2e:23:1e:9f:32:
                    a2:ca:e9:b3:84:b1:00:8f:c9:4c:73:65:90:36:84:
                    9d:d1:20:10:a2:a0:1a:ef:99:c6:28:73:31:15:3f:
                    0e:0d:83:c6:af:43:e8:70:e6:8d:ff:53:33:af:a5:
                    09:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:F6:A9:78:3B:AD:2B:49:85:B9:F7:17:EA:54:74:D5:E0:14:70:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/fb23ad91-e243-392a-b642-2c6479395a1e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.114.252.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:c5:9f:80:cb:fa:d2:91:bd:97:96:d9:30:e2:02:ef:20:3e:
         cf:46:03:ec:d6:88:9d:8e:55:04:73:56:f8:d7:d7:28:bd:c8:
         15:fd:1a:a1:6c:13:a3:56:04:96:71:b9:08:b7:e8:05:42:77:
         0f:80:db:2f:1b:2a:4d:aa:89:e8:59:17:f5:ed:d7:66:ad:d1:
         1c:26:e1:7b:a5:bb:46:af:1b:c1:34:ad:20:1a:5e:d6:1a:c0:
         1f:41:5e:8a:95:a8:19:9f:ba:18:8b:95:ff:54:28:5f:ca:2e:
         00:37:20:77:37:fa:a5:70:e3:a5:4d:13:87:ac:b9:06:e5:77:
         02:c5:4e:8c:06:86:3b:cd:88:30:b7:d8:54:f7:df:de:0f:c6:
         6b:8b:cf:62:25:39:63:a5:64:fd:17:05:64:95:1f:a2:c5:70:
         c5:45:65:fc:9c:41:ac:5a:1e:fc:17:ea:91:d0:81:73:d4:7e:
         89:7a:59:d2:8e:c8:1e:34:d6:85:c6:0d:c9:74:0d:07:c9:02:
         a8:c8:ce:b2:2b:15:5d:ea:1b:25:34:e9:9a:3b:c8:2c:c1:20:
         ca:87:83:8e:81:f2:4d:43:f1:9e:6d:fb:c2:78:07:73:35:57:
         6e:73:17:f9:e4:46:3a:04:6a:38:e1:3a:34:c2:4e:bc:fc:02:
         16:02:df:07
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcecFigUvQ/dn/Mj4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI0MDkwNjAxMDAzMVoXDTI0MTIwNTAyMDAzMVowLzEtMCsGA1UEAxMk
ZjNkODM2N2YtMTMxYy00N2E2LWI5NTYtY2M5OTc2MThjZTMwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArxaeAdj7xYuGZcY/jEIYz+1KNferB2CUYX8A
2gTT4ASL+8LzjYvg1rThfKCzOxJNW5UWzC39hMWQSX+FypeycZ3W//hb5mqldG4f
K+WaOxjG0B/hmKBbSUI1Cg0EZpvaEozyeMH4TKE2VzaoO8FBUjuwo8UKZ9DT74yC
IlwtoZRkpH5i/N5Zk7+nmGMmKlHgurEiJlE1v6Mqh6fk2BGOv4plW3+Kc5zWdyU0
Z2wKR9Ag37NFtLShrBs3SzkzJ3ZfDXaMuWC1sBBVXaJBLiMenzKiyumzhLEAj8lM
c2WQNoSd0SAQoqAa75nGKHMxFT8ODYPGr0PocOaN/1Mzr6UJKwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFP2qXg7rStJhbn3F+pUdNXgFHCkMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvZmIyM2FkOTEtZTI0My0z
OTJhLWI2NDItMmM2NDc5Mzk1YTFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCMnL8MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG/Fn4DL+tKRvZeW2TDiAu8gPs9GA+zWiJ2OVQRzVvjX1yi9yBX9GqFs
E6NWBJZxuQi36AVCdw+A2y8bKk2qiehZF/Xt12at0Rwm4Xulu0avG8E0rSAaXtYa
wB9BXoqVqBmfuhiLlf9UKF/KLgA3IHc3+qVw46VNE4esuQbldwLFTowGhjvNiDC3
2FT3394PxmuLz2IlOWOlZP0XBWSVH6LFcMVFZfycQaxaHvwX6pHQgXPUfol6WdKO
yB401oXGDcl0DQfJAqjIzrIrFV3qGyU06Zo7yCzBIMqHg46B8k1D8Z5t+8J4B3M1
V25zF/nkRjoEajjhOjTCTrz8AhYC3wc=
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:18:26 2024 by rpki-client on console-fra.rpki-client.org