Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bcc67fbb-86f9-3ca6-bc0a-6ca8accca8b6.roa
File:                     bcc67fbb-86f9-3ca6-bc0a-6ca8accca8b6.roa (raw, json)
Hash identifier:          p2/2m6u5KSbmbFLiKlxhTx2hPTaNuYLxfeoOUK0awZY=
Subject key identifier:   8C:CE:D6:30:C9:78:1E:1C:40:22:89:F2:FA:D3:A3:62:E9:D2:E6:D1
Certificate issuer:       /CN=bf1c119f-5c08-4663-b550-1d531c2fe54f
Certificate serial:       010D0C9F4328584777C638E9957A44BA17163FC0
Authority key identifier: AE:82:0B:B2:D4:3A:12:16:AF:C5:62:5C:E8:6A:91:B5:C6:AF:DB:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bcc67fbb-86f9-3ca6-bc0a-6ca8accca8b6.roa
Signing time:             Tue 08 Oct 2024 01:00:31 +0000
ROA not before:           Tue 08 Oct 2024 01:00:31 +0000
ROA not after:            Mon 06 Jan 2025 02:00:31 +0000
asID:                     16509
IP address blocks:        155.226.16.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:77:c6:38:e9:95:7a:44:ba:17:16:3f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf1c119f-5c08-4663-b550-1d531c2fe54f
        Validity
            Not Before: Oct  8 01:00:31 2024 GMT
            Not After : Jan  6 02:00:31 2025 GMT
        Subject: CN=b41d8db6-9056-40fa-93b7-8ad92872e339
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:7e:72:ae:67:a6:3f:17:3c:8c:dd:c0:da:13:
                    69:32:e5:ad:dd:5b:f1:5e:6b:f4:92:b1:2f:2e:2f:
                    80:dc:68:12:59:4e:d0:dc:70:ae:bf:66:bd:e0:cf:
                    9b:d6:a5:7f:ca:84:7f:0b:ea:ee:0b:8f:62:c1:5c:
                    75:19:6e:d5:ba:2a:09:45:7a:f1:9f:08:e2:d4:d9:
                    20:cc:a4:8e:ad:ef:39:fa:23:98:a3:19:8e:67:9f:
                    dd:81:b9:75:f4:b5:fa:0f:e5:08:92:1d:8e:49:a1:
                    0b:82:17:c2:92:21:12:69:57:0c:ce:00:b0:a1:5a:
                    11:77:99:ab:02:63:bc:68:67:ab:d6:61:b9:8b:a0:
                    16:b7:6e:d8:9f:7b:16:4f:a0:6e:77:fb:d6:7c:51:
                    09:66:d3:5a:0b:82:7d:f1:3e:43:9e:8c:32:04:05:
                    24:f6:de:77:21:06:e4:f2:c4:8d:8a:ad:17:d4:0f:
                    03:de:58:64:97:45:0b:b1:ec:3d:74:ee:aa:85:c8:
                    72:b8:b3:e1:32:b1:b2:10:64:51:4d:a9:5e:55:4f:
                    f4:59:bf:e7:a2:39:98:9d:6f:d5:e1:91:5a:bb:88:
                    62:5a:ad:8d:2b:53:84:dd:31:e1:8d:54:f8:85:0d:
                    44:bf:1c:18:94:0f:87:cc:d2:0d:10:91:94:0b:b2:
                    ca:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:CE:D6:30:C9:78:1E:1C:40:22:89:F2:FA:D3:A3:62:E9:D2:E6:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bcc67fbb-86f9-3ca6-bc0a-6ca8accca8b6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.crl

            X509v3 Authority Key Identifier:
                keyid:AE:82:0B:B2:D4:3A:12:16:AF:C5:62:5C:E8:6A:91:B5:C6:AF:DB:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  155.226.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:a7:01:0f:27:d1:9e:f8:6a:80:a1:2b:70:c1:ae:ff:45:d8:
         91:c1:d8:06:33:95:d0:81:77:99:f6:28:41:08:8f:6f:55:b5:
         49:96:16:35:b8:fa:e7:31:36:15:8f:30:9c:ad:cd:83:1c:03:
         af:17:61:ef:87:ed:1c:e9:54:4e:ac:f6:55:ce:bd:ba:94:8d:
         50:24:b8:94:16:c6:46:24:96:9c:84:f5:a1:6a:6c:9b:32:96:
         26:d1:5b:e2:fd:67:2d:92:50:8f:2f:85:32:07:13:a0:ec:1d:
         93:dc:0b:dc:d4:28:f8:c1:c7:1e:e0:9c:03:1b:af:66:03:2f:
         88:51:68:81:75:3d:52:cf:04:51:e4:0e:dd:ab:fd:41:c4:07:
         96:92:4a:6f:fb:75:90:c9:ef:a4:87:d1:a0:54:ad:9d:47:34:
         d2:e1:13:7e:a0:90:c7:10:92:ec:ad:53:8e:d5:9c:d6:12:af:
         79:4d:61:0c:66:ff:c5:85:f5:d3:4b:3c:5f:5c:4e:4a:a4:b0:
         dd:ba:69:27:3c:f5:f6:8d:ac:9b:35:ea:94:57:a7:94:0c:e2:
         d7:bc:b7:0f:8e:0e:ec:20:bf:55:75:02:26:d7:7d:e1:b8:a4:
         2d:d6:e6:b6:ec:4c:5f:00:14:f9:95:4b:b2:70:d3:bb:87:18:
         2e:5d:78:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 15:57:10 2024 by rpki-client on console-ams.rpki-client.org