Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/1a12ec50-acc1-3afc-a7a2-335b59218489.roa
File:                     1a12ec50-acc1-3afc-a7a2-335b59218489.roa (raw, json)
Hash identifier:          udfxFOUPTNJgkx25073+RBllGHavC3OtBlnkj6L4mnE=
Subject key identifier:   87:17:6A:5D:4B:E1:6F:AB:58:56:07:06:71:49:4B:69:4D:A2:1A:0D
Certificate issuer:       /CN=bca82dd9-eea7-4756-b420-960dfbe436c3
Certificate serial:       010D0C9F432858481C9A730DCBC65D308262F040
Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/1a12ec50-acc1-3afc-a7a2-335b59218489.roa
Signing time:             Fri 06 Dec 2024 02:00:39 +0000
ROA not before:           Fri 06 Dec 2024 02:00:39 +0000
ROA not after:            Thu 06 Mar 2025 02:00:39 +0000
asID:                     53508
IP address blocks:        206.255.246.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:1c:9a:73:0d:cb:c6:5d:30:82:62:f0:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3
        Validity
            Not Before: Dec  6 02:00:39 2024 GMT
            Not After : Mar  6 02:00:39 2025 GMT
        Subject: CN=f510b84e-e08d-4b25-9515-7966c57e94c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:fd:33:f1:3a:16:72:74:17:e5:55:41:75:49:
                    cb:91:35:91:8b:a2:97:8a:d7:0a:01:51:02:b2:a7:
                    77:c8:ff:d3:15:00:00:6a:88:91:a2:22:f9:7c:92:
                    9d:bd:44:cb:8d:49:4f:34:78:2b:e9:54:86:fc:3a:
                    a7:93:b9:cc:0a:a0:d4:b7:ab:7c:56:ab:05:ad:99:
                    d4:1b:cd:69:71:5d:a2:43:c8:32:09:78:56:bb:60:
                    59:46:f9:74:91:2d:90:62:c6:5b:26:63:48:14:11:
                    dc:3b:7b:f3:e7:50:d5:14:71:ff:10:06:7a:6c:dc:
                    aa:cb:5c:62:54:d1:63:5d:97:8c:8a:8c:ca:0c:61:
                    d2:c5:fa:de:38:b5:95:0f:f1:8a:0a:3f:3a:7c:55:
                    66:29:02:4d:d0:d9:e8:4e:c6:a6:ee:32:6d:c1:4a:
                    5d:69:8e:ee:50:dd:c0:ad:0a:ab:8c:61:21:39:d9:
                    67:05:7e:f1:6b:c5:89:1d:22:7c:6b:6a:c6:22:ae:
                    9b:14:72:8f:5b:30:55:17:82:a6:96:de:07:d1:62:
                    14:63:f5:24:34:4f:8a:14:6a:68:d6:0a:ba:42:41:
                    9e:f2:40:33:ce:29:a8:bb:87:8d:b6:4f:60:68:c2:
                    91:82:6d:ca:ef:f8:09:50:90:ab:b3:99:67:9a:90:
                    9f:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:17:6A:5D:4B:E1:6F:AB:58:56:07:06:71:49:4B:69:4D:A2:1A:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/1a12ec50-acc1-3afc-a7a2-335b59218489.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl

            X509v3 Authority Key Identifier:
                keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.255.246.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:ba:7c:8c:1a:90:a7:fc:40:c3:fe:8f:2f:93:48:9e:48:d1:
         79:2b:e5:bd:6c:07:66:41:0a:69:89:22:0e:0d:7f:a5:3b:71:
         fe:72:16:dc:2e:f9:ec:6f:90:e4:11:cc:11:5c:82:69:b4:de:
         d1:db:61:23:3c:68:3e:3a:b7:22:20:c1:0c:4c:e4:aa:8e:a6:
         20:70:11:f7:54:1f:37:88:5a:a4:44:cb:c8:21:f6:78:a4:ba:
         f4:00:b6:f6:8f:0e:48:9c:82:72:aa:fd:49:80:a5:f7:38:03:
         70:b2:e2:84:78:a3:d7:e5:70:d8:99:c4:57:3b:17:38:5e:f0:
         3b:88:60:c8:f6:8b:82:57:6a:2f:c4:3c:b8:66:45:57:2f:80:
         4f:ac:f1:f6:da:4a:a3:e8:11:b1:d3:fd:77:a3:b3:6b:5c:ef:
         d2:39:d4:6a:44:02:52:ae:64:63:ea:c5:ad:6d:24:0b:31:50:
         a8:31:b9:1a:65:30:d2:6e:ba:9d:db:63:34:71:e3:d8:e6:43:
         74:f7:a1:2c:d3:ff:19:73:15:59:17:29:8d:bc:dc:7d:d7:8d:
         ba:c5:c4:16:09:44:bd:f2:8e:98:41:18:85:9b:ea:ab:dd:9b:
         9f:06:db:a6:5c:5f:4f:4e:a7:28:80:99:40:3c:a4:de:68:22:
         99:2b:d2:86
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgcmnMNy8ZdMIJi8EAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYmNhODJkZDktZWVhNy00NzU2LWI0MjAtOTYwZGZiZTQz
NmMzMB4XDTI0MTIwNjAyMDAzOVoXDTI1MDMwNjAyMDAzOVowLzEtMCsGA1UEAxMk
ZjUxMGI4NGUtZTA4ZC00YjI1LTk1MTUtNzk2NmM1N2U5NGM0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkP0z8ToWcnQX5VVBdUnLkTWRi6KXitcKAVEC
sqd3yP/TFQAAaoiRoiL5fJKdvUTLjUlPNHgr6VSG/Dqnk7nMCqDUt6t8VqsFrZnU
G81pcV2iQ8gyCXhWu2BZRvl0kS2QYsZbJmNIFBHcO3vz51DVFHH/EAZ6bNyqy1xi
VNFjXZeMiozKDGHSxfreOLWVD/GKCj86fFVmKQJN0NnoTsam7jJtwUpdaY7uUN3A
rQqrjGEhOdlnBX7xa8WJHSJ8a2rGIq6bFHKPWzBVF4Kmlt4H0WIUY/UkNE+KFGpo
1gq6QkGe8kAzzimou4eNtk9gaMKRgm3K7/gJUJCrs5lnmpCf2QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIcXal1L4W+rWFYHBnFJS2lNohoNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4
MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBkZmJlNDM2YzMvMWExMmVjNTAtYWNjMS0z
YWZjLWE3YTItMzM1YjU5MjE4NDg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYmNhODJkZDktZWVhNy00NzU2LWI0
MjAtOTYwZGZiZTQzNmMzL2JjYTgyZGQ5LWVlYTctNDc1Ni1iNDIwLTk2MGRmYmU0
MzZjMy5jcmwwHwYDVR0jBBgwFoAUyrimHnY0wTCAiarYWGHqOLodQPQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBk
ZmJlNDM2YzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzv/2MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAI26fIwakKf8QMP+jy+TSJ5I0Xkr5b1sB2ZBCmmJIg4Nf6U7cf5yFtwu
+exvkOQRzBFcgmm03tHbYSM8aD46tyIgwQxM5KqOpiBwEfdUHzeIWqREy8gh9nik
uvQAtvaPDkicgnKq/UmApfc4A3Cy4oR4o9flcNiZxFc7Fzhe8DuIYMj2i4JXai/E
PLhmRVcvgE+s8fbaSqPoEbHT/Xejs2tc79I51GpEAlKuZGPqxa1tJAsxUKgxuRpl
MNJuup3bYzRx49jmQ3T3oSzT/xlzFVkXKY283H3XjbrFxBYJRL3yjphBGIWb6qvd
m58G26ZcX09OpyiAmUA8pN5oIpkr0oY=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:15:42 2025 by rpki-client