Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/fba933ef-a5c4-3771-8d64-177a3a86649e.roa
File:                     fba933ef-a5c4-3771-8d64-177a3a86649e.roa (raw, json)
Hash identifier:          m0wYX5+IPDzC03RmYGckBtMEg08UcILd9vrL4jy8jcw=
Subject key identifier:   48:DF:5E:61:EC:C6:DF:74:88:94:BD:68:4F:F6:54:7A:D5:A5:25:E5
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285847739662018B90BA6AF87F7C80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/fba933ef-a5c4-3771-8d64-177a3a86649e.roa
Signing time:             Sun 06 Oct 2024 13:00:41 +0000
ROA not before:           Sun 06 Oct 2024 13:00:41 +0000
ROA not after:            Sat 04 Jan 2025 14:00:41 +0000
asID:                     44477
IP address blocks:        50.114.187.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:73:96:62:01:8b:90:ba:6a:f8:7f:7c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Oct  6 13:00:41 2024 GMT
            Not After : Jan  4 14:00:41 2025 GMT
        Subject: CN=653c277c-1326-4763-9630-8e9a1ed724b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:e8:21:cb:4c:27:2f:26:9d:12:97:5b:25:00:
                    57:cd:ad:6d:4c:10:9b:eb:12:73:f7:9c:14:52:b7:
                    e6:df:b0:5c:d5:15:fd:c8:83:b8:18:7b:2b:e7:d6:
                    4e:c8:29:01:ba:70:fd:8e:54:e9:2c:61:38:2c:d6:
                    51:dd:79:bc:23:bf:b8:13:1f:33:55:c9:00:5c:aa:
                    dd:9c:7d:62:76:68:30:94:57:56:15:a4:a1:88:0f:
                    65:52:0a:30:d2:56:fa:93:b7:0c:78:b3:16:fd:4b:
                    6a:93:1f:84:54:72:82:6d:b4:61:f3:fc:c1:9a:f3:
                    85:76:6a:99:76:6d:a4:e3:a5:a1:f6:48:72:f0:7b:
                    5f:5a:9e:45:36:76:ed:f1:81:05:c6:8c:0c:02:cd:
                    91:69:23:2c:c3:63:74:28:e2:01:68:1f:ea:a5:a1:
                    e2:c9:e9:b4:fd:7c:c7:56:c0:3b:63:7a:33:c8:7b:
                    b6:ea:07:9d:3c:8a:86:ee:8e:78:65:0c:1d:7a:a9:
                    4a:5d:9d:c2:5a:99:95:e2:0e:fd:b7:90:87:e6:8b:
                    2b:5e:4d:05:c8:36:4f:24:68:2c:da:ef:22:5b:b6:
                    8c:06:7e:ed:35:f8:50:c2:fc:62:94:f0:e6:a3:59:
                    97:09:e6:93:3b:c2:c6:b7:6b:73:06:b5:cb:c6:b0:
                    8c:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:DF:5E:61:EC:C6:DF:74:88:94:BD:68:4F:F6:54:7A:D5:A5:25:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/fba933ef-a5c4-3771-8d64-177a3a86649e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.114.187.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:f3:ef:b9:1d:a0:d1:65:c7:af:81:83:cd:fa:47:da:77:ab:
         73:70:7f:bf:9e:64:c3:aa:1d:6d:ee:9a:e6:ec:8d:3f:45:c1:
         84:43:ff:f7:fb:80:c3:b8:c4:6c:87:27:22:3d:cb:d4:21:07:
         28:9d:eb:c6:9c:49:a2:1b:7e:a9:52:9e:fd:21:6f:ff:4c:75:
         3e:78:78:49:20:72:65:30:ed:ea:5b:bc:c3:a6:f6:e7:fb:7b:
         0d:de:eb:a8:d8:1b:d0:37:88:4a:7e:9a:32:fa:f8:fb:29:ec:
         00:54:2b:d9:47:4b:63:48:92:c3:ea:6c:0b:b7:78:7e:5d:a4:
         47:fc:ea:da:d0:3e:99:7a:13:ba:a1:c5:49:2a:cb:80:76:b7:
         78:97:78:a7:92:23:ef:c7:22:1c:51:8c:81:7f:08:51:ed:df:
         b9:8d:6f:80:7c:b0:59:d5:12:f3:c7:53:ac:56:5c:4e:23:35:
         4c:fc:77:90:ad:98:75:4b:18:e7:cb:a1:2d:9e:90:09:01:9b:
         99:e6:d9:80:03:ef:87:2b:f2:bc:2f:d0:40:41:63:d6:1c:77:
         35:42:c5:3b:ab:ac:13:5c:95:93:e7:9a:89:12:7d:6c:fc:1e:
         45:37:13:78:d7:41:70:69:9a:84:3a:1a:78:02:4e:f2:0b:3d:
         5a:28:fa:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 05:50:31 2024 by rpki-client on console-fra.rpki-client.org