Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/fe7201cf-e2a7-3018-aed3-4ee7a68ac23e.roa
File:                     fe7201cf-e2a7-3018-aed3-4ee7a68ac23e.roa (raw, json)
Hash identifier:          S9vvmlTNAqzvRvkWjstjRGSb8ih2UTuK+IZhdRGEepE=
Subject key identifier:   66:86:8E:77:16:BD:84:C0:8E:8F:1A:A7:A1:0C:EA:10:8B:56:CE:12
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285845B3836F3367989A4F36363900
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/fe7201cf-e2a7-3018-aed3-4ee7a68ac23e.roa
Signing time:             Mon 29 Apr 2024 01:00:25 +0000
ROA not before:           Mon 29 Apr 2024 01:00:25 +0000
ROA not after:            Sun 28 Jul 2024 01:00:25 +0000
asID:                     44477
IP address blocks:        50.114.167.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:b3:83:6f:33:67:98:9a:4f:36:36:39:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Apr 29 01:00:25 2024 GMT
            Not After : Jul 28 01:00:25 2024 GMT
        Subject: CN=16c8e288-37e2-4d17-a716-0e54b214f854
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:21:a2:bb:69:49:7e:25:64:4d:e1:77:ed:f2:
                    2a:3a:f5:47:4e:05:2d:8f:a3:48:56:15:ba:33:4d:
                    78:dd:b3:f7:1f:2c:93:e0:b0:26:67:e4:2b:85:e7:
                    eb:a1:5a:52:55:99:75:78:e5:4e:01:df:10:5c:40:
                    b1:3f:98:e1:0c:68:39:22:af:07:3f:09:ae:3f:ab:
                    1f:7f:04:5b:22:ee:57:1f:29:af:3c:8a:81:52:72:
                    05:9f:32:2c:4f:56:6e:d9:51:cf:63:99:a7:ad:81:
                    ec:73:12:b5:fc:6b:ea:eb:4d:c6:4d:df:c3:fb:2a:
                    63:bb:5a:b2:fe:29:61:66:fc:5b:1e:f1:50:82:2b:
                    d8:d6:1f:83:9b:af:40:e1:d7:f7:d1:db:6c:d0:ff:
                    ba:d4:e7:d8:91:3d:7f:e3:6c:3e:ec:67:ec:44:c5:
                    0e:fb:18:73:66:53:5e:9c:d7:04:8d:68:56:24:60:
                    52:e5:61:34:ef:1f:6f:61:90:4f:41:1f:2b:b4:85:
                    68:5d:23:40:cd:4c:b6:af:56:1a:a4:5a:6d:dc:57:
                    34:c4:6e:9a:fc:3b:73:d4:2b:11:19:3a:80:d8:99:
                    95:df:4a:a7:fa:de:d1:e0:11:d5:f0:93:d6:f0:ae:
                    ea:75:c6:a7:37:e6:47:fc:1a:ee:5c:c7:ae:04:87:
                    4a:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:86:8E:77:16:BD:84:C0:8E:8F:1A:A7:A1:0C:EA:10:8B:56:CE:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/fe7201cf-e2a7-3018-aed3-4ee7a68ac23e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.114.167.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:9b:af:57:fd:14:ef:c6:67:00:1f:4e:d8:08:59:16:e4:29:
         9d:04:fd:cd:6a:b5:2e:29:81:2e:ab:92:c8:94:3a:e5:74:62:
         b9:81:f5:15:02:a3:30:fb:30:04:b0:51:d1:dc:47:b8:c9:fb:
         fc:21:29:0d:26:e0:84:22:a9:76:95:9c:9b:dc:05:43:10:7b:
         5f:4f:72:d7:ea:3f:d5:0c:92:ba:d0:be:84:31:47:b5:94:b3:
         2d:cf:ca:00:61:08:84:06:eb:70:eb:eb:b9:dc:23:95:6a:a3:
         af:9e:ef:e8:54:c0:64:c0:66:a5:ff:5d:be:3d:74:6c:9f:3f:
         6f:af:f3:3d:e1:99:bb:14:69:06:b5:f5:ab:cf:40:bc:d0:59:
         2d:02:39:4b:d4:0d:53:81:cf:85:78:e0:e1:fa:46:ba:82:d5:
         a2:58:34:e5:ea:a9:32:4f:c7:8f:8a:cc:38:83:15:d7:6e:15:
         43:67:92:2e:6a:7d:7b:4a:ae:10:e3:5c:9f:5b:8f:e8:1f:e0:
         ed:be:8b:04:cd:51:3d:1a:7d:61:95:4c:59:d2:92:69:58:62:
         85:c2:9f:c6:0a:e2:5f:3f:3e:0c:9d:6a:54:49:4f:13:04:59:
         f3:cd:c8:0a:24:d9:d0:66:95:3d:f4:d4:27:45:10:64:06:16:
         9e:f6:30:25
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWzg28zZ5iaTzY2OQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI0MDQyOTAxMDAyNVoXDTI0MDcyODAxMDAyNVowLzEtMCsGA1UEAxMk
MTZjOGUyODgtMzdlMi00ZDE3LWE3MTYtMGU1NGIyMTRmODU0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3yGiu2lJfiVkTeF37fIqOvVHTgUtj6NIVhW6
M0143bP3HyyT4LAmZ+QrhefroVpSVZl1eOVOAd8QXECxP5jhDGg5Iq8HPwmuP6sf
fwRbIu5XHymvPIqBUnIFnzIsT1Zu2VHPY5mnrYHscxK1/Gvq603GTd/D+ypju1qy
/ilhZvxbHvFQgivY1h+Dm69A4df30dts0P+61OfYkT1/42w+7GfsRMUO+xhzZlNe
nNcEjWhWJGBS5WE07x9vYZBPQR8rtIVoXSNAzUy2r1YapFpt3Fc0xG6a/Dtz1CsR
GTqA2JmV30qn+t7R4BHV8JPW8K7qdcanN+ZH/BruXMeuBIdKXwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGaGjncWvYTAjo8ap6EM6hCLVs4SMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvZmU3MjAxY2YtZTJhNy0z
MDE4LWFlZDMtNGVlN2E2OGFjMjNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAMnKnMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAqbr1f9FO/GZwAfTtgIWRbkKZ0E/c1qtS4pgS6rksiUOuV0YrmB9RUC
ozD7MASwUdHcR7jJ+/whKQ0m4IQiqXaVnJvcBUMQe19PctfqP9UMkrrQvoQxR7WU
sy3PygBhCIQG63Dr67ncI5Vqo6+e7+hUwGTAZqX/Xb49dGyfP2+v8z3hmbsUaQa1
9avPQLzQWS0COUvUDVOBz4V44OH6RrqC1aJYNOXqqTJPx4+KzDiDFdduFUNnki5q
fXtKrhDjXJ9bj+gf4O2+iwTNUT0afWGVTFnSkmlYYoXCn8YK4l8/PgydalRJTxME
WfPNyAok2dBmlT301CdFEGQGFp72MCU=
-----END CERTIFICATE-----
Generated at Sat May 4 02:56:00 2024 by rpki-client on console-fra.rpki-client.org