Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/1a3c3af4-895b-3354-94ed-3fa69d0fb95c.roa
File:                     1a3c3af4-895b-3354-94ed-3fa69d0fb95c.roa (raw, json)
Hash identifier:          DTDnB6FM6Ug2GG2VzDVOvQF0+GMUm8h88hVb2BdKceY=
Subject key identifier:   08:E8:AF:39:C3:0C:53:06:EE:7C:AB:A5:AC:D2:AC:56:02:51:DD:B2
Certificate issuer:       /CN=bca82dd9-eea7-4756-b420-960dfbe436c3
Certificate serial:       010D0C9F4328584827C52AB24931FC3BE4133820
Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/1a3c3af4-895b-3354-94ed-3fa69d0fb95c.roa
Signing time:             Tue 10 Dec 2024 02:00:40 +0000
ROA not before:           Tue 10 Dec 2024 02:00:40 +0000
ROA not after:            Mon 10 Mar 2025 01:00:40 +0000
asID:                     53508
IP address blocks:        142.79.80.0/20 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:27:c5:2a:b2:49:31:fc:3b:e4:13:38:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3
        Validity
            Not Before: Dec 10 02:00:40 2024 GMT
            Not After : Mar 10 01:00:40 2025 GMT
        Subject: CN=559226a1-4073-4935-9a00-37318a61d50b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:cc:67:9e:18:60:c7:ab:54:4f:dd:8c:e4:fb:
                    fd:d3:0a:81:d7:db:02:9c:63:8a:96:8e:b6:24:d6:
                    9e:f3:01:f4:ab:74:f9:8c:4b:a6:3f:b4:12:5e:1b:
                    f6:db:45:3a:0a:33:44:de:2c:79:48:9e:94:c3:28:
                    18:97:f3:02:48:09:dd:d1:f7:96:10:fd:a0:48:ba:
                    81:cb:72:77:f5:df:d6:c5:45:b3:d2:58:a5:a0:f0:
                    01:b6:45:de:a8:20:94:94:ec:38:fd:70:c3:4b:ae:
                    db:ba:c0:81:1e:db:a6:a5:83:d8:25:0d:53:45:ba:
                    81:08:f3:fb:aa:33:18:b1:68:65:dd:23:80:27:34:
                    19:2d:06:9c:4e:f0:03:d5:41:e0:a4:44:8e:f0:85:
                    5c:aa:73:68:a2:26:d6:0e:6f:d3:69:45:dd:90:a2:
                    06:30:7b:52:e3:4b:92:61:e3:d9:68:24:dd:5f:24:
                    2b:3e:73:2f:33:be:56:26:c5:32:05:8e:2a:64:9e:
                    ea:5a:e3:76:6f:1f:29:37:78:71:ec:98:dd:10:67:
                    b3:ab:19:54:fa:e5:ab:70:d6:2f:fc:fa:06:2c:df:
                    ed:40:54:32:5d:93:8f:d7:17:85:1a:29:b1:33:6a:
                    d4:e8:95:ad:a7:d4:c3:f9:56:91:ef:3c:be:3c:c2:
                    43:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:E8:AF:39:C3:0C:53:06:EE:7C:AB:A5:AC:D2:AC:56:02:51:DD:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/1a3c3af4-895b-3354-94ed-3fa69d0fb95c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl

            X509v3 Authority Key Identifier:
                keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.79.80.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:23:57:af:f1:b9:3d:c8:2d:ff:7a:52:5c:26:ed:d0:0e:31:
         c3:ef:b6:d7:2b:aa:2f:30:ac:64:bd:fd:3d:17:91:c4:08:37:
         f1:4c:c1:75:1c:af:0f:b9:0a:29:12:df:a4:1b:e9:81:64:ab:
         f0:5b:32:d7:87:7a:fc:00:cd:34:a9:29:2d:64:c4:45:62:38:
         67:fb:86:4f:4b:2c:b8:4f:cb:bf:16:53:23:65:41:50:00:45:
         06:18:9b:00:03:07:5f:8d:72:c9:ac:b0:c3:d0:cd:f0:91:81:
         33:13:0a:ae:7c:43:96:f0:b4:da:10:34:06:3c:97:a6:3f:41:
         d2:ea:49:2d:18:99:a3:9a:d7:d3:28:ef:60:e7:b6:96:7a:9c:
         cf:d2:c5:34:aa:92:05:98:46:0d:6f:9b:8c:0e:83:e5:3d:c8:
         6d:10:4d:2a:c4:60:03:71:9e:f6:73:d8:ca:6a:10:18:aa:53:
         d5:32:ca:df:f9:e9:c5:08:f8:4c:98:f2:40:6b:ce:a4:72:15:
         89:62:f3:65:f5:1a:29:f9:1b:9d:5f:0c:bc:41:cc:03:0d:fc:
         20:7a:a7:74:3d:57:cc:f2:8d:6d:a4:86:33:31:ff:e3:64:22:
         c4:f1:81:38:a2:d7:b3:ec:98:90:4e:33:8e:94:8f:d5:08:0b:
         93:16:7f:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:47:52 2025 by rpki-client