Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/39ef5f85-6ed4-3873-9731-ce99dc1a6c5c.roa
File:                     39ef5f85-6ed4-3873-9731-ce99dc1a6c5c.roa (raw, json)
Hash identifier:          v9oiCHCQ5anXS7O4HyTMA/Ok8pU8s4NCkhmDlZBK8lI=
Subject key identifier:   22:16:9B:EB:D2:9A:F1:4B:ED:22:6B:33:23:72:5B:83:88:49:3C:FB
Certificate issuer:       /CN=bca82dd9-eea7-4756-b420-960dfbe436c3
Certificate serial:       010D0C9F432858473C5FE6CF6A13BC9BCB911000
Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/39ef5f85-6ed4-3873-9731-ce99dc1a6c5c.roa
Signing time:             Mon 16 Sep 2024 18:21:41 +0000
ROA not before:           Mon 16 Sep 2024 18:21:41 +0000
ROA not after:            Sun 15 Dec 2024 19:21:41 +0000
asID:                     53508
IP address blocks:        206.255.132.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3c:5f:e6:cf:6a:13:bc:9b:cb:91:10:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3
        Validity
            Not Before: Sep 16 18:21:41 2024 GMT
            Not After : Dec 15 19:21:41 2024 GMT
        Subject: CN=cf9d505b-153c-431f-811b-b3c5b8820a16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:4d:34:09:89:08:13:d9:52:6d:0d:20:a4:32:
                    9e:90:60:ef:cc:46:24:08:c1:bf:f0:8a:e9:ad:54:
                    6e:25:0d:35:5e:8a:05:dd:02:cd:d4:26:7e:8b:fb:
                    8b:84:6c:5a:2f:68:b6:a7:ca:c2:9c:d2:83:39:5f:
                    d3:8d:06:34:30:1b:a8:0d:13:d8:49:3b:0c:d7:99:
                    19:82:dd:16:22:15:01:8a:5d:1e:37:25:87:27:4a:
                    b7:03:41:c7:e3:3a:48:60:41:7f:e4:76:00:d1:fe:
                    7c:36:cf:25:6a:85:53:6b:ef:f4:19:58:5b:23:c7:
                    05:fe:7c:ac:50:41:e7:e3:ce:96:bf:a7:68:a1:e2:
                    42:b3:10:9d:0e:13:b7:3f:ed:19:91:b6:e5:0a:3b:
                    9a:69:df:42:56:af:1b:fd:ab:8f:98:3f:c7:61:e4:
                    50:4c:ac:c2:a4:4c:e1:af:13:ef:d3:4f:3b:3c:c3:
                    bb:fe:0d:2b:1f:fc:e4:6a:97:6d:ef:c1:fd:b0:6e:
                    3b:1e:5f:3c:e6:a9:c9:1c:f4:b2:0f:2a:97:66:bd:
                    dd:14:58:43:6c:6d:f2:d0:ec:02:6f:67:3f:0f:99:
                    9e:7d:2c:25:d4:94:69:06:91:5d:0b:a2:8b:88:c1:
                    21:72:34:72:2a:ee:36:01:17:0d:29:31:1e:8e:47:
                    5a:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:16:9B:EB:D2:9A:F1:4B:ED:22:6B:33:23:72:5B:83:88:49:3C:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/39ef5f85-6ed4-3873-9731-ce99dc1a6c5c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl

            X509v3 Authority Key Identifier:
                keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.255.132.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:b8:65:a4:bd:70:23:40:ea:c4:59:fd:5c:2e:4f:3b:84:80:
         09:86:55:4d:2e:44:7f:e9:60:2c:7c:98:27:37:2b:f5:74:44:
         a1:cc:51:2b:a9:97:c7:d5:7c:80:53:7a:30:3e:a1:ab:8e:b6:
         e0:d3:a5:a4:54:f6:c4:b7:35:a9:65:40:18:3f:ea:8f:ee:f4:
         0d:88:dd:2b:9c:3a:bd:26:7e:0d:39:49:0d:24:bf:a8:eb:07:
         4c:29:f0:7e:93:6c:cb:24:c8:96:4d:81:54:3b:b1:4b:5a:c8:
         9a:0e:9e:17:3c:ae:5e:5a:c9:d8:bb:8e:af:b3:7b:18:3d:ae:
         a4:ed:62:8e:fd:57:67:29:21:55:05:25:4e:49:9a:32:a3:65:
         cb:04:0f:b9:1d:ee:2b:5b:29:1d:7a:0b:ce:25:5c:1a:54:63:
         28:03:0e:6d:8f:30:65:6a:a0:22:bf:8c:19:6d:91:60:36:da:
         de:a8:bd:34:d3:a1:8d:dd:c2:65:c1:3b:3c:d9:de:62:f3:de:
         f0:38:b2:dd:87:81:d3:ff:54:79:71:1f:42:30:4c:ba:13:b5:
         54:3e:54:e8:9b:d4:82:1a:73:6b:8d:ba:ff:2a:64:bd:3f:ac:
         db:ed:50:cb:9c:48:8f:7d:39:3f:38:ab:7a:03:70:1f:8a:0b:
         ac:e7:be:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 21:48:15 2024 by rpki-client on console-ams.rpki-client.org