Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/3af14c3f-e3e7-3332-b9bb-9d97fa5e8db8.roa
File:                     3af14c3f-e3e7-3332-b9bb-9d97fa5e8db8.roa (raw, json)
Hash identifier:          IbFQiMG38bk6vGZcYCLRakfg1L7mm4pJkJwfPQ3X8YA=
Subject key identifier:   2B:50:84:09:3C:11:F5:8F:93:9D:5D:DC:A2:BB:CB:CA:E5:92:E7:A8
Certificate issuer:       /CN=bca82dd9-eea7-4756-b420-960dfbe436c3
Certificate serial:       010D0C9F432858473C02BE4D9C62F974ADD944C0
Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/3af14c3f-e3e7-3332-b9bb-9d97fa5e8db8.roa
Signing time:             Mon 16 Sep 2024 15:13:59 +0000
ROA not before:           Mon 16 Sep 2024 15:13:59 +0000
ROA not after:            Sun 15 Dec 2024 16:13:59 +0000
asID:                     53508
IP address blocks:        24.244.106.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 22 Sep 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3c:02:be:4d:9c:62:f9:74:ad:d9:44:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3
        Validity
            Not Before: Sep 16 15:13:59 2024 GMT
            Not After : Dec 15 16:13:59 2024 GMT
        Subject: CN=69ad2162-7cfe-47de-8d57-e91e3a77489a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:5f:91:b2:0c:d1:94:ef:9f:a9:46:16:0a:f9:
                    b4:2d:f4:48:a0:80:81:f5:e4:f5:e1:24:a4:ca:e4:
                    81:51:c2:4b:be:f0:5f:78:fb:33:ef:c5:42:71:fa:
                    6c:12:06:71:2d:84:01:63:58:08:cd:26:e0:5d:49:
                    25:e6:3e:5e:44:08:73:6a:1f:b1:46:e6:14:e8:77:
                    c1:87:d9:bb:ad:06:01:82:ce:ad:7c:b7:e9:fb:fb:
                    a4:32:6e:48:f1:c4:b9:29:97:1f:9a:07:b4:a8:d4:
                    9f:54:46:73:a1:29:06:b1:ff:1c:98:6c:f4:c5:b5:
                    f0:31:bd:7f:af:1c:40:4e:ac:af:7c:29:c5:3e:02:
                    c9:e9:cb:1f:82:77:8c:cf:31:c2:8a:6c:50:9c:b9:
                    de:57:d9:5d:91:aa:5a:b4:13:e9:c2:bb:52:39:be:
                    62:70:d4:c5:bf:92:cd:0e:63:6b:e8:21:4a:7e:37:
                    37:60:e8:93:bb:bd:37:ae:c8:fc:e7:36:e3:e9:e0:
                    91:c1:85:9d:ce:e8:98:48:96:43:77:98:4e:9c:4e:
                    65:7f:b7:f8:2d:67:ce:7c:24:0d:6a:0d:a1:bc:17:
                    38:54:8d:bb:37:c7:0e:f1:ea:9d:1c:b5:8e:8d:a7:
                    e4:7b:3b:99:c5:d9:bd:e6:a8:75:1a:20:3c:7c:ca:
                    0b:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:50:84:09:3C:11:F5:8F:93:9D:5D:DC:A2:BB:CB:CA:E5:92:E7:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/3af14c3f-e3e7-3332-b9bb-9d97fa5e8db8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl

            X509v3 Authority Key Identifier:
                keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.244.106.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:fa:97:cd:43:be:a2:58:7e:a0:db:2d:fb:99:2d:05:78:26:
         b4:68:1c:3b:94:8c:b9:78:fe:f6:dd:ca:ab:c5:a7:53:60:0d:
         e5:81:51:2b:6d:c2:8d:07:9b:f8:53:1b:2f:9c:e3:eb:00:b6:
         50:d4:0b:dd:cb:65:77:9a:47:67:ea:8a:06:88:7b:c5:d3:1d:
         db:5f:3a:f2:0d:b9:0f:d3:e0:f6:e8:2f:59:b9:ea:a0:a6:ff:
         8c:0c:51:7d:da:e9:bd:8a:bb:19:1c:02:a6:cf:0f:2e:18:21:
         cc:20:79:95:69:8b:1f:90:2a:07:75:c3:ab:e2:85:1d:c2:f6:
         ec:2a:72:91:56:65:3f:ba:28:81:4d:55:7d:46:41:22:a5:02:
         f0:38:aa:84:77:9a:6d:4e:ed:f6:64:5d:d7:91:9c:da:c3:b1:
         80:01:fe:25:ba:d7:f4:4a:a7:d1:75:25:92:6e:1a:98:0e:00:
         86:2f:49:17:7a:a8:7c:3b:4c:de:c0:d0:de:2c:8e:97:c7:c6:
         c8:ea:3b:4d:7f:4b:4c:17:6b:ec:d2:5b:be:0f:4a:9f:b1:7b:
         ee:61:2b:e3:00:79:78:c9:58:bc:33:f9:3d:7b:0d:0f:f3:49:
         53:67:12:00:d5:ec:27:7e:86:02:dd:70:78:66:42:8b:c1:43:
         ac:f5:ee:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 20 05:59:12 2024 by rpki-client on console-fra.rpki-client.org