Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/2640955c-a9ff-381e-b24e-d92545188dca.roa
File:                     2640955c-a9ff-381e-b24e-d92545188dca.roa (raw, json)
Hash identifier:          T4bgCv6ROYjMG45obY6QixzEGiQs+J2UHvP0eGoquC8=
Subject key identifier:   56:61:C0:20:66:D2:33:DF:D6:D5:60:9E:92:0E:69:1D:FF:77:C0:9A
Certificate issuer:       /CN=bca82dd9-eea7-4756-b420-960dfbe436c3
Certificate serial:       010D0C9F432858481C9A72430A8E8C10E77350E0
Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/2640955c-a9ff-381e-b24e-d92545188dca.roa
Signing time:             Fri 06 Dec 2024 02:00:39 +0000
ROA not before:           Fri 06 Dec 2024 02:00:39 +0000
ROA not after:            Thu 06 Mar 2025 02:00:39 +0000
asID:                     53508
IP address blocks:        206.255.108.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:1c:9a:72:43:0a:8e:8c:10:e7:73:50:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3
        Validity
            Not Before: Dec  6 02:00:39 2024 GMT
            Not After : Mar  6 02:00:39 2025 GMT
        Subject: CN=8a79ab4e-3612-4b1f-99f1-5a83ea72ea8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:03:56:a4:af:e3:70:0a:df:70:e5:63:58:2e:
                    f5:61:13:8a:ed:8e:9f:f5:f4:bd:06:57:3b:1f:84:
                    e9:fe:0c:e8:4d:5a:3e:78:e2:47:35:b9:ec:d7:7b:
                    09:04:cb:8d:f5:b2:1e:ad:46:2e:79:d0:2a:24:bf:
                    f1:f1:c2:92:a4:c3:31:70:48:e9:1c:a3:e8:ad:1d:
                    d7:b4:0e:6c:05:11:ce:ba:fb:6c:48:39:a1:7c:b2:
                    94:36:5f:f9:c3:78:42:3c:07:59:2e:c3:c5:91:aa:
                    27:9d:ff:fd:c0:4d:5c:89:1e:0a:2d:4b:25:e3:1f:
                    c1:13:55:83:0b:84:d3:d7:c1:7d:64:ee:07:f0:ec:
                    16:b7:b2:3f:5e:ba:7a:cf:e8:60:54:12:01:c7:80:
                    ea:98:8e:47:00:7c:40:1e:ed:f8:fd:36:6a:a5:0b:
                    52:7d:6b:e5:de:b1:19:b7:8d:d5:fd:87:de:ad:a6:
                    46:8f:b3:77:b4:df:2d:bd:d4:3e:50:22:7c:4c:e7:
                    c6:19:45:3d:42:cc:76:c4:ea:f7:92:82:0a:18:91:
                    14:55:88:d2:37:27:e1:e4:2c:1b:32:b0:d1:0a:77:
                    1a:97:22:08:25:b9:58:17:54:45:16:43:fc:3e:86:
                    a1:82:ae:a6:cc:9a:2e:c3:eb:47:12:76:53:ac:5a:
                    74:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:61:C0:20:66:D2:33:DF:D6:D5:60:9E:92:0E:69:1D:FF:77:C0:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/2640955c-a9ff-381e-b24e-d92545188dca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl

            X509v3 Authority Key Identifier:
                keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.255.108.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:b6:7f:92:41:5a:87:59:7d:d9:c2:8e:95:a0:37:ec:60:65:
         e3:d5:b1:ad:a0:0d:63:cc:3d:6e:10:50:e1:3b:05:20:ac:42:
         84:7c:b7:d1:fa:b9:1b:eb:5c:f5:98:46:bc:ab:d3:f1:2d:dc:
         eb:8b:b6:9f:6b:e2:3f:d0:45:f6:55:38:f6:6b:64:eb:9d:74:
         a4:bb:10:f2:f9:52:d3:00:e1:f3:3c:c5:a2:ed:c5:13:4f:bc:
         56:4e:b7:b4:41:ce:79:f2:9d:9f:b6:9a:95:36:99:0f:68:c1:
         67:55:65:54:28:1f:47:29:e5:0d:c7:20:6c:e5:ca:4a:14:e2:
         02:f1:87:e5:ca:1f:cd:6a:49:69:86:69:71:3b:d3:99:91:89:
         1b:7f:f4:a2:f4:e8:29:29:d4:b4:df:a4:93:e5:5c:5f:56:55:
         be:a1:db:7c:2e:23:65:de:5e:8d:e4:32:7f:2b:00:e7:65:be:
         06:f4:1d:7c:58:07:48:52:ec:45:36:51:e1:48:f7:42:40:aa:
         c3:d6:bf:02:9f:3a:41:9f:07:76:b7:58:12:b5:a4:03:3e:b6:
         7c:dc:09:2d:17:10:39:4d:c6:56:8d:40:ea:79:07:ae:60:6f:
         3d:0b:f0:1d:11:05:a7:94:fb:ed:d1:ae:9f:a0:3c:ea:44:64:
         20:51:e1:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:20:44 2025 by rpki-client