Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/2aaa1b6d-0624-3ccf-bdf5-326004cf80b1.roa
File:                     2aaa1b6d-0624-3ccf-bdf5-326004cf80b1.roa (raw, json)
Hash identifier:          Y3KsJS3JDoy0x0GXiCwApTxZQl1QXBYSMv5wcqISiqA=
Subject key identifier:   16:35:B4:96:FA:3B:4D:44:B1:49:5B:92:99:DA:62:0C:6E:07:F9:35
Certificate issuer:       /CN=bca82dd9-eea7-4756-b420-960dfbe436c3
Certificate serial:       010D0C9F432858473C0A42558F0A60EE63561410
Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/2aaa1b6d-0624-3ccf-bdf5-326004cf80b1.roa
Signing time:             Mon 16 Sep 2024 15:29:07 +0000
ROA not before:           Mon 16 Sep 2024 15:29:07 +0000
ROA not after:            Sun 15 Dec 2024 16:29:07 +0000
asID:                     53508
IP address blocks:        206.255.247.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3c:0a:42:55:8f:0a:60:ee:63:56:14:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3
        Validity
            Not Before: Sep 16 15:29:07 2024 GMT
            Not After : Dec 15 16:29:07 2024 GMT
        Subject: CN=19617eee-4dfe-4f4a-afcf-12a0499a7024
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:11:26:2c:61:9e:42:42:fc:59:d4:ff:87:6c:
                    cf:1b:16:01:1d:69:4a:12:c2:65:6a:bf:7b:3d:c9:
                    a0:de:4d:16:f7:bd:23:9c:c4:f4:9d:81:21:5d:30:
                    81:73:11:b3:7d:ec:04:f5:49:b5:b1:99:7c:ef:84:
                    a2:92:30:7a:7e:71:6d:5e:96:74:bd:ed:c2:f4:34:
                    ab:e4:d2:0d:a8:1c:36:fb:fd:1f:68:a1:05:e0:b1:
                    d2:25:a0:89:8f:8f:51:42:2e:46:f1:0d:81:66:fe:
                    ac:bc:48:6a:7f:a8:0c:77:eb:16:79:38:ef:6c:30:
                    1e:64:4d:5a:cb:74:65:9a:cb:f0:d6:8c:7d:b9:6d:
                    81:47:2a:5a:aa:4f:ec:42:b6:c9:b6:c1:87:8c:03:
                    e6:76:6a:a9:ee:8c:28:bc:cc:2c:2f:d9:2b:52:38:
                    66:3d:42:b9:48:75:67:00:2a:be:9b:f6:a4:0c:65:
                    c8:12:16:4b:5a:50:a8:12:c6:53:48:16:96:81:41:
                    1b:9a:1f:03:d4:22:c8:92:9d:28:4f:a3:28:2c:07:
                    ef:d9:c3:64:53:8e:a9:de:bf:ad:68:e3:73:ca:2b:
                    fb:78:b2:aa:35:77:b6:5f:fc:5f:93:10:1b:8b:2e:
                    54:92:7a:a8:f5:18:b3:b2:59:5e:6d:16:2e:a4:45:
                    95:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:35:B4:96:FA:3B:4D:44:B1:49:5B:92:99:DA:62:0C:6E:07:F9:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/2aaa1b6d-0624-3ccf-bdf5-326004cf80b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl

            X509v3 Authority Key Identifier:
                keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.255.247.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:f6:ab:9c:5a:2a:94:50:a3:4e:3b:3b:12:4e:d8:d3:9f:59:
         36:05:a2:90:fe:eb:2c:40:cf:32:c8:26:82:ad:5a:6b:71:fb:
         58:d9:13:c4:2c:4f:1d:db:9d:56:46:96:31:b6:4d:af:f8:15:
         c3:8c:b0:ec:8a:38:45:76:73:e9:53:d1:16:cf:c4:9c:e7:05:
         5a:a6:40:ea:99:1e:20:f8:9a:34:b9:f1:27:22:2f:13:37:f1:
         8c:15:05:12:71:6a:0e:d5:28:95:bc:bf:ca:00:25:15:58:e5:
         1a:04:c8:ea:99:28:68:75:84:b2:fb:58:59:32:e0:3d:66:47:
         9b:79:7f:ca:67:c5:7a:99:d4:ae:37:80:c9:d7:5a:f8:4c:7f:
         0c:5e:51:fe:ec:d7:be:d7:c3:e0:5f:cd:5b:77:45:45:71:59:
         75:68:d3:d0:2a:54:bb:c8:a4:56:a6:5f:18:ac:d2:7a:d2:24:
         44:30:80:64:c3:31:9f:56:42:d8:06:da:18:54:03:d2:b9:9b:
         d6:8c:a1:8f:14:e4:3f:8f:f8:5c:fb:97:e0:a4:15:33:f8:26:
         e6:31:87:df:5f:e7:1f:49:64:22:db:b9:2a:27:f2:da:0d:6c:
         0f:25:d4:36:5c:aa:dc:0b:7e:e4:95:4e:24:49:5c:b5:2f:10:
         96:e9:61:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:37:24 2024 by rpki-client on console-ams.rpki-client.org