Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/39a3c335-38d7-3c81-ab5c-b46ffe7b5ac3.roa
File:                     39a3c335-38d7-3c81-ab5c-b46ffe7b5ac3.roa (raw, json)
Hash identifier:          GTL2EaX1UHzbA53ij1aPYTFA8GFJ91++G9YJEoX3580=
Subject key identifier:   2A:87:CC:E8:3D:ED:FC:5A:DE:4F:41:AC:CE:55:06:51:B5:78:FE:74
Certificate issuer:       /CN=bca82dd9-eea7-4756-b420-960dfbe436c3
Certificate serial:       010D0C9F432858473C4BE15BD39F29C7B448F280
Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/39a3c335-38d7-3c81-ab5c-b46ffe7b5ac3.roa
Signing time:             Mon 16 Sep 2024 17:41:20 +0000
ROA not before:           Mon 16 Sep 2024 17:41:20 +0000
ROA not after:            Sun 15 Dec 2024 18:41:20 +0000
asID:                     53508
IP address blocks:        24.89.56.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 22 Sep 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3c:4b:e1:5b:d3:9f:29:c7:b4:48:f2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3
        Validity
            Not Before: Sep 16 17:41:20 2024 GMT
            Not After : Dec 15 18:41:20 2024 GMT
        Subject: CN=38940469-b4d1-4358-8573-5f6cb19bf51d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:eb:be:3c:e3:d1:25:b6:77:6f:21:2f:42:f7:
                    41:8e:ff:6f:c4:e3:56:df:49:2e:ec:17:f8:6c:fc:
                    4d:c2:e9:1e:ae:ef:77:e5:fb:9c:93:13:60:c1:b5:
                    fd:b6:09:db:2a:1b:e8:b8:08:0d:ff:33:2d:e6:58:
                    f2:9a:35:ce:50:4c:41:a0:51:14:08:74:4f:0b:11:
                    68:86:6f:4b:fa:b5:4b:0b:92:34:ab:ff:2f:b8:0e:
                    51:08:f1:de:43:f6:b7:b7:0b:6b:df:e7:de:d0:dd:
                    4b:5e:1a:71:3c:2c:15:1f:27:fc:04:3b:ee:b1:a7:
                    2f:c5:39:dc:5f:57:4f:38:d8:2d:b3:e1:d2:c7:e2:
                    9d:74:d8:3a:48:d6:c4:12:5a:b4:e8:bd:e1:a9:07:
                    98:93:e9:53:63:a9:35:af:d8:14:d6:19:58:84:d6:
                    a2:e6:fe:b0:42:bc:06:30:11:33:b5:69:87:05:f1:
                    a6:a8:c7:2b:a6:b7:12:d4:f8:c5:ee:b8:96:8a:3e:
                    f8:87:dd:9a:5c:20:a4:54:f6:1d:35:94:46:f1:54:
                    67:49:ea:ef:ac:67:89:07:f0:f2:7c:ce:f6:ef:a2:
                    cd:04:99:45:41:aa:b8:9b:e2:55:34:ab:55:67:da:
                    1e:33:9a:a3:a7:78:7e:4d:2c:df:e9:b4:d3:14:de:
                    3c:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:87:CC:E8:3D:ED:FC:5A:DE:4F:41:AC:CE:55:06:51:B5:78:FE:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/39a3c335-38d7-3c81-ab5c-b46ffe7b5ac3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl

            X509v3 Authority Key Identifier:
                keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.89.56.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:7a:a1:f9:73:de:85:1a:ee:07:59:70:ab:f4:bd:71:53:7f:
         0e:ef:81:62:fe:9e:72:67:fb:bb:1e:24:37:c2:fa:34:be:2b:
         0a:d2:f8:b6:0f:5c:6c:07:c6:fa:dd:0d:e2:3b:5c:3b:ec:a2:
         89:b4:fc:01:f3:81:f4:0e:73:1e:eb:aa:00:a9:93:b0:f7:59:
         7e:d7:07:8b:b2:e6:1e:b8:07:0d:3d:b6:4d:3c:48:73:29:fd:
         03:c6:f0:c6:7a:a8:d3:10:87:6d:5b:a8:ed:70:30:2e:38:cc:
         95:a0:39:23:66:5a:7f:0c:f1:ed:ca:ba:91:26:aa:7a:9c:ea:
         eb:b5:9d:09:2b:7c:6d:5f:4f:db:d7:7b:af:87:96:84:c6:2d:
         f0:60:fb:26:37:f6:f3:c4:5f:85:5d:29:ce:62:63:62:4d:b8:
         31:be:dc:6a:41:39:cf:3e:ba:a1:10:e0:7f:26:80:0d:d1:cc:
         00:e4:0e:48:82:33:e3:1f:fe:8c:8f:13:32:74:ff:d5:48:f4:
         0e:04:64:be:ec:e5:f0:1b:fa:7f:14:13:05:02:a7:65:1a:a7:
         40:1c:6c:92:32:1c:15:6a:fc:56:de:dc:36:a1:27:fc:0f:0e:
         02:12:3f:81:9b:83:15:34:bc:d1:9e:8b:59:0d:3a:9e:81:c1:
         6d:b4:86:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 20 06:14:29 2024 by rpki-client on console-ams.rpki-client.org