Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/200010fd-7d91-36cc-a113-d4cd0bd24b7e.roa
File:                     200010fd-7d91-36cc-a113-d4cd0bd24b7e.roa (raw, json)
Hash identifier:          n4y7w0bh4rRkXr8U03Phd4JlBhtVZKFeshmi3hjTYk8=
Subject key identifier:   8A:FA:9C:F8:88:7A:E1:42:82:9C:22:44:75:8E:A5:21:FD:92:50:B9
Certificate issuer:       /CN=bca82dd9-eea7-4756-b420-960dfbe436c3
Certificate serial:       010D0C9F432858473C4D816B5257E8DDECC6C580
Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/200010fd-7d91-36cc-a113-d4cd0bd24b7e.roa
Signing time:             Mon 16 Sep 2024 17:44:37 +0000
ROA not before:           Mon 16 Sep 2024 17:44:37 +0000
ROA not after:            Sun 15 Dec 2024 18:44:37 +0000
asID:                     53508
IP address blocks:        142.79.64.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 22 Sep 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3c:4d:81:6b:52:57:e8:dd:ec:c6:c5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3
        Validity
            Not Before: Sep 16 17:44:37 2024 GMT
            Not After : Dec 15 18:44:37 2024 GMT
        Subject: CN=51b4e983-33b6-4a4f-a973-1e624c3739c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:1b:2c:17:ad:2a:fa:b8:1b:34:8d:52:5f:e4:
                    ba:91:62:51:d6:5a:78:69:cd:71:25:a1:94:bf:b8:
                    2d:8e:ce:a0:17:60:be:b7:d0:73:7c:9a:cc:e2:6e:
                    3e:d0:7e:d5:cb:30:e1:94:32:60:05:e3:0e:5a:ee:
                    d8:63:a9:98:99:3e:f6:c0:8d:23:72:e1:61:76:5a:
                    eb:82:dd:fa:a6:87:24:40:0e:c8:a9:38:a9:c1:61:
                    25:ad:73:dd:26:d1:f6:bc:1c:46:b8:60:cd:45:49:
                    d6:c6:6e:18:a1:51:d9:52:32:c8:33:32:c3:41:f9:
                    82:2f:62:d9:c3:6f:19:61:5c:97:b3:e6:59:40:2a:
                    c9:26:d0:4b:61:49:43:28:34:76:09:7c:4b:80:67:
                    c0:58:32:42:9f:a9:9f:69:6c:cb:08:48:be:54:3a:
                    3c:ea:9a:a2:3d:5d:bb:f7:cb:5a:c5:7e:6e:b3:24:
                    ab:92:81:b3:ec:17:21:15:42:6e:f7:f6:a2:62:28:
                    4c:38:93:c4:f2:28:97:3b:16:38:c9:2e:20:38:a5:
                    7f:b3:08:67:ff:6b:0c:cb:65:a4:7a:7f:64:28:6b:
                    07:8e:ec:d1:4b:09:61:85:ff:30:bc:fe:59:d4:e8:
                    ff:4d:05:10:bd:0c:75:54:67:1a:f5:da:ab:cf:a6:
                    06:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:FA:9C:F8:88:7A:E1:42:82:9C:22:44:75:8E:A5:21:FD:92:50:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/200010fd-7d91-36cc-a113-d4cd0bd24b7e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl

            X509v3 Authority Key Identifier:
                keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.79.64.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:73:13:3c:77:2a:a1:d3:79:f0:68:80:73:0f:cf:02:c2:cd:
         8f:5e:3d:14:da:83:49:28:1b:8f:52:69:6b:79:1b:b3:27:01:
         58:57:b3:19:77:13:50:02:9a:af:51:98:c4:bd:57:61:07:70:
         aa:0e:cf:d3:f4:33:51:5b:0d:72:3c:44:60:7e:98:9b:e6:55:
         b2:18:e8:72:aa:1c:1e:c8:87:4d:5c:15:a3:c2:9b:1a:7b:bf:
         cf:74:01:48:0e:89:2e:66:cb:74:8f:44:23:60:e0:b9:d8:d8:
         f0:04:6c:ad:11:0b:a1:01:ab:f4:a7:f9:97:fc:3c:0f:6c:20:
         84:d8:c7:ad:e5:ba:97:59:e5:b1:46:c7:69:9f:0b:bc:08:5f:
         2c:a1:42:4e:77:eb:b9:27:36:bd:88:1e:d2:e3:54:aa:13:3e:
         b6:8a:c3:d8:02:30:2b:d8:2c:c4:cd:4d:ed:17:67:b7:0b:cc:
         25:c7:32:20:b3:8f:d5:99:c5:40:d0:ba:cf:e9:94:68:05:52:
         ca:ad:6b:cf:68:36:18:b5:06:38:2b:80:2a:ae:44:8d:63:15:
         d4:e0:24:12:da:84:2f:a6:91:c9:f8:19:ed:47:65:cd:c4:b2:
         b1:49:df:de:58:e8:1d:57:27:55:9b:c8:f4:01:86:28:78:b2:
         6b:6c:10:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 20 05:59:12 2024 by rpki-client on console-fra.rpki-client.org