Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/3160331e-7569-3786-8250-26b377505c71.roa
File:                     3160331e-7569-3786-8250-26b377505c71.roa (raw, json)
Hash identifier:          zyMxPDTDqckq2+vmavHn399/i8CAHgTjhIE+vrEgZUE=
Subject key identifier:   F2:0A:B1:47:24:E4:4D:8B:D1:6F:FE:E0:C6:E5:BD:4C:0B:64:0D:B6
Certificate issuer:       /CN=bca82dd9-eea7-4756-b420-960dfbe436c3
Certificate serial:       010D0C9F432858473C6042E53557A810A5FA8940
Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/3160331e-7569-3786-8250-26b377505c71.roa
Signing time:             Mon 16 Sep 2024 18:22:24 +0000
ROA not before:           Mon 16 Sep 2024 18:22:24 +0000
ROA not after:            Sun 15 Dec 2024 19:22:24 +0000
asID:                     53508
IP address blocks:        206.255.136.0/21 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 22 Sep 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3c:60:42:e5:35:57:a8:10:a5:fa:89:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3
        Validity
            Not Before: Sep 16 18:22:24 2024 GMT
            Not After : Dec 15 19:22:24 2024 GMT
        Subject: CN=afcf6e12-ba91-4445-882b-08d929c53465
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:fa:2f:ac:1c:fc:a5:3f:a7:bf:e5:07:6f:0b:
                    ff:1d:e1:8a:e2:0d:a3:b4:43:0f:a0:c9:fe:da:2f:
                    18:ee:d0:89:c9:05:90:5d:f2:2c:6f:b6:f4:d2:69:
                    19:aa:14:c1:2c:be:0f:d6:18:9d:77:1e:58:84:db:
                    7a:5d:b2:5e:e1:05:f1:73:84:89:bf:75:61:33:30:
                    71:11:dd:34:b2:c6:e7:09:af:28:23:b0:bd:1e:53:
                    22:ec:66:87:5c:32:eb:48:42:d6:8b:9a:0e:fc:67:
                    dc:f0:38:b9:f0:6d:bb:a4:04:64:b9:7b:e4:f6:ec:
                    a2:d3:2b:b9:1a:76:0a:08:36:76:33:5a:da:cc:01:
                    37:c7:1a:a7:c3:1c:f7:55:37:3c:04:97:0a:0c:44:
                    03:cd:4d:dc:de:a6:8a:31:d1:84:b3:da:57:92:6c:
                    4c:fe:a8:a2:1f:80:d0:fc:9f:28:eb:e7:26:bd:87:
                    a8:e9:a2:a5:05:63:c4:24:5f:ea:42:9d:ef:11:5e:
                    80:98:99:60:d9:23:6c:08:f4:85:3c:ad:8b:65:f5:
                    e9:4f:59:d7:02:6d:c0:bd:f8:dc:c9:60:0d:61:48:
                    fa:6a:53:37:0d:72:77:0b:0b:ea:0d:bd:c4:13:82:
                    b1:ee:74:31:8b:89:f0:34:ac:6f:fd:9b:60:39:a3:
                    4b:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:0A:B1:47:24:E4:4D:8B:D1:6F:FE:E0:C6:E5:BD:4C:0B:64:0D:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/3160331e-7569-3786-8250-26b377505c71.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl

            X509v3 Authority Key Identifier:
                keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.255.136.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:9a:8b:bd:5c:b9:b0:71:bb:96:6d:73:e4:ee:c8:a6:ed:ba:
         56:05:7d:10:6d:ca:14:95:32:76:7c:38:d6:68:74:74:9e:84:
         7e:c8:b3:1d:50:3f:77:cb:84:0f:00:12:27:e0:1e:01:34:86:
         e5:72:b2:15:2d:0d:36:90:b5:35:1d:2b:81:2d:8f:a7:ee:5a:
         cc:7b:3a:13:e3:80:14:f0:46:39:cd:aa:45:5b:11:ec:b6:7b:
         37:81:7a:c0:99:df:ab:15:76:29:ad:c2:76:9e:36:e3:36:b8:
         f2:56:9c:a1:79:2d:27:1f:f2:d9:02:8f:3c:7d:41:8b:b3:e8:
         3f:42:b1:10:b5:4f:55:5d:7a:d1:51:35:e2:db:fc:5c:ac:2b:
         f0:63:3c:21:0c:9d:8e:d1:6b:0f:19:9d:cc:0a:33:5f:b4:57:
         26:58:fa:30:9a:5a:4c:16:4a:ba:4c:2e:5f:a3:4a:a4:46:c3:
         59:16:e7:dc:26:3f:03:b1:32:a2:7c:18:16:67:65:d8:88:0e:
         4b:8a:d6:1b:57:9c:db:da:9f:5a:1a:ad:16:e5:e0:c7:c4:e6:
         c6:19:85:52:d5:74:9d:9d:f5:78:9d:41:63:22:af:93:2b:28:
         66:0b:72:99:03:55:16:0c:69:d4:c4:5f:d4:bb:8d:5f:3d:33:
         80:5e:b5:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 20 05:59:12 2024 by rpki-client on console-fra.rpki-client.org