Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/0736b5b7-129c-3fc6-81da-33e324ce70e1.roa
File:                     0736b5b7-129c-3fc6-81da-33e324ce70e1.roa (raw, json)
Hash identifier:          mDD0xOGhd7wLBvKKbHhz7bqRgvoiZIkQ5QwNKw89ojA=
Subject key identifier:   1F:82:C7:4E:93:19:28:19:29:37:B1:CC:80:1B:97:2D:44:E7:4F:63
Certificate issuer:       /CN=bca82dd9-eea7-4756-b420-960dfbe436c3
Certificate serial:       010D0C9F432858473C7BE12D3EEAF45BC93B8580
Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/0736b5b7-129c-3fc6-81da-33e324ce70e1.roa
Signing time:             Mon 16 Sep 2024 19:18:03 +0000
ROA not before:           Mon 16 Sep 2024 19:18:03 +0000
ROA not after:            Sun 15 Dec 2024 20:18:03 +0000
asID:                     1651
IP address blocks:        206.255.156.0/22 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 22 Sep 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3c:7b:e1:2d:3e:ea:f4:5b:c9:3b:85:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3
        Validity
            Not Before: Sep 16 19:18:03 2024 GMT
            Not After : Dec 15 20:18:03 2024 GMT
        Subject: CN=5b82d94e-bca4-4f6c-888e-c1587bf261da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:12:f1:e7:99:ef:10:b2:55:98:12:dc:f8:7c:
                    aa:65:6d:1a:9a:4b:53:a5:aa:26:85:ea:ef:29:4e:
                    8e:a2:f9:68:00:da:6c:1d:68:6d:14:cc:91:d4:6d:
                    80:80:a2:4c:b1:48:7c:3e:89:be:95:48:6b:11:e9:
                    43:26:e4:69:f9:ce:90:ee:07:43:2f:39:04:63:60:
                    52:42:c7:88:af:ba:d1:d2:94:d4:65:1d:ab:7a:12:
                    80:fe:40:73:03:7e:30:73:87:1a:89:e9:d4:f0:8a:
                    9d:81:30:b9:67:f8:71:92:49:49:cd:cb:1b:37:8a:
                    f9:f5:4b:3c:97:e1:c4:67:27:6f:69:b1:2c:79:ad:
                    8a:9f:ee:97:c9:f4:79:74:2e:25:e7:49:e8:c9:67:
                    5b:71:71:44:d1:18:bd:23:6b:65:8d:5f:73:68:a5:
                    05:aa:0f:32:e6:94:9b:f5:f4:ee:52:58:6b:d7:e9:
                    46:b6:7f:20:62:01:79:5b:1c:ac:f1:48:ac:9d:26:
                    50:41:d6:3b:5e:03:29:e0:49:38:c4:81:3c:47:79:
                    bb:bc:47:f8:65:96:29:3a:51:99:b4:eb:bd:16:92:
                    57:85:1a:62:11:6d:f5:4d:37:7c:62:d2:a2:a5:2e:
                    42:f6:6f:a1:e8:fe:56:d1:3e:d9:4c:c5:49:72:b9:
                    b9:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:82:C7:4E:93:19:28:19:29:37:B1:CC:80:1B:97:2D:44:E7:4F:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/0736b5b7-129c-3fc6-81da-33e324ce70e1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl

            X509v3 Authority Key Identifier:
                keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.255.156.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:23:f2:64:00:a0:d3:53:fb:9b:4c:cb:05:78:44:c2:ee:59:
         d1:e7:2b:f5:ec:5a:fe:bf:a6:9c:48:3e:aa:9f:13:7a:54:dd:
         f1:96:a3:eb:bd:91:7b:fa:2d:33:84:11:1b:44:f9:f7:c0:f9:
         90:d7:5a:ad:79:50:af:e8:99:7a:80:cd:c0:d5:69:38:3f:0f:
         a6:42:c1:4b:2a:ba:45:e4:26:f4:9a:09:e1:a1:06:0b:5c:ce:
         a0:9c:c6:23:0c:8b:f3:ea:d2:ee:9e:67:1a:98:7f:5d:fc:35:
         12:6b:c2:42:71:5f:1e:97:e2:f2:e2:96:f9:7a:01:4f:e0:eb:
         e7:d0:fa:6e:78:05:ba:6e:98:8d:fa:f2:bf:85:5b:f5:c6:35:
         8b:bf:a0:ec:45:8f:bc:1e:f5:13:80:48:97:21:ef:2b:7c:a8:
         d9:7c:31:79:65:41:bf:83:93:0f:3b:44:f9:4e:15:b5:7f:de:
         79:eb:40:84:15:cf:ce:f1:53:e7:ec:58:60:37:47:ad:bd:28:
         a6:a1:77:0f:c0:94:52:9d:1e:e3:d9:97:94:94:55:f3:8f:3a:
         6d:a4:b8:fa:ff:ab:15:16:80:01:bc:cc:56:ac:1c:9d:a8:6b:
         ea:f2:a4:e2:d4:cc:96:14:68:6c:f6:c5:72:02:7d:1a:78:04:
         a5:d4:53:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 20 05:59:12 2024 by rpki-client on console-fra.rpki-client.org