Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/2640955c-a9ff-381e-b24e-d92545188dca.roa
File:                     2640955c-a9ff-381e-b24e-d92545188dca.roa (raw, json)
Hash identifier:          DBdgJ83HpOOOKLrasVYox73bhWl98AKFwC53Ubq9NdE=
Subject key identifier:   C2:A5:08:7D:CB:8B:48:D1:72:28:E6:FB:A9:77:08:3F:7B:4D:11:B8
Certificate issuer:       /CN=bca82dd9-eea7-4756-b420-960dfbe436c3
Certificate serial:       010D0C9F432858473C4F90B5BF7BC7A8B4480F80
Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/2640955c-a9ff-381e-b24e-d92545188dca.roa
Signing time:             Mon 16 Sep 2024 17:48:46 +0000
ROA not before:           Mon 16 Sep 2024 17:48:46 +0000
ROA not after:            Sun 15 Dec 2024 18:48:46 +0000
asID:                     53508
IP address blocks:        206.255.108.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 22 Sep 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3c:4f:90:b5:bf:7b:c7:a8:b4:48:0f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3
        Validity
            Not Before: Sep 16 17:48:46 2024 GMT
            Not After : Dec 15 18:48:46 2024 GMT
        Subject: CN=6ea5cf19-6798-4ae8-8e27-5496321f3757
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:f4:8d:e3:8e:23:9a:31:2b:34:d2:27:6a:ec:
                    c5:d1:81:01:1a:2d:c5:c7:18:ca:d5:c9:cc:ea:9a:
                    69:0a:70:7f:a7:8e:a4:ae:a2:1f:d1:7c:7a:33:45:
                    92:51:01:37:25:30:86:3f:d4:73:b6:e7:34:ae:ae:
                    d3:00:48:ee:86:84:61:83:b6:a0:5c:7f:be:86:44:
                    67:9c:31:6e:aa:dc:5a:4a:03:0e:4a:f8:da:93:f1:
                    1f:04:bf:65:3e:60:fe:e6:1f:7b:ef:a4:76:ec:1d:
                    80:6e:b1:8a:e5:ad:9a:80:d4:3f:de:e0:2e:59:4c:
                    af:5c:f0:46:3f:7a:cf:9d:5f:68:14:2a:94:0a:33:
                    87:df:38:7b:2b:d7:a6:eb:91:5c:f7:ef:b1:01:70:
                    63:c5:f4:af:cf:54:9f:c7:d1:59:1f:12:3b:13:9b:
                    46:34:02:d0:54:55:50:d7:de:e4:02:4c:12:fd:4b:
                    33:b4:22:a0:0f:1b:40:7a:22:bc:9c:e9:e4:01:b1:
                    6a:bc:8b:38:f2:ae:db:c1:ef:85:3e:19:8f:52:d8:
                    d8:77:f5:c7:cd:e0:02:35:0c:3f:f0:92:ac:a8:f5:
                    7a:ab:9b:8d:36:20:5c:14:54:c2:86:ea:ed:71:e0:
                    90:e6:43:25:3e:78:74:ac:1f:ed:14:da:6e:22:f2:
                    77:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:A5:08:7D:CB:8B:48:D1:72:28:E6:FB:A9:77:08:3F:7B:4D:11:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/2640955c-a9ff-381e-b24e-d92545188dca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl

            X509v3 Authority Key Identifier:
                keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.255.108.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:2b:27:9e:c0:7d:81:44:53:78:57:24:e6:39:95:75:fd:b4:
         0a:39:d5:f8:d2:f6:d2:00:2e:84:19:e4:57:be:28:30:71:48:
         cf:1a:ec:ed:9a:93:34:15:11:e4:cc:de:da:c3:c8:f3:f5:b9:
         01:19:8b:de:24:7d:ef:b3:10:40:27:93:eb:4f:86:ef:09:d4:
         ec:70:48:d7:83:e9:af:6c:3f:dd:1b:e7:59:a9:c1:a1:6c:06:
         ed:d0:21:9f:e0:cb:a7:c5:93:a9:bb:97:80:09:45:a6:91:dd:
         7e:06:a8:a0:c4:0b:eb:f9:0a:0a:7c:11:9d:55:34:e4:90:af:
         9c:42:ba:85:c8:72:45:07:60:89:d3:b6:b9:81:48:fa:37:88:
         67:7e:50:70:f6:0c:fc:77:96:e7:b9:e8:73:af:88:15:1c:16:
         4c:31:79:80:cb:0c:8d:49:cb:e1:cd:1b:5f:c7:22:55:36:a2:
         69:fd:c0:a6:1c:8b:96:3a:05:62:2d:72:e3:26:5a:c3:16:70:
         fc:03:1c:ad:3c:64:f0:72:2c:a2:16:16:34:3a:fd:cc:58:3e:
         16:a9:93:49:4c:94:52:7b:59:19:2c:22:e0:b4:e6:8c:64:b3:
         e1:04:16:a2:fe:86:5e:2b:4a:dc:01:3a:ad:2f:28:0f:43:d5:
         45:ca:ea:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 20 06:14:29 2024 by rpki-client on console-ams.rpki-client.org