Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/456c2cd9-454a-3d06-9031-8440b4842af7.roa
File:                     456c2cd9-454a-3d06-9031-8440b4842af7.roa (raw, json)
Hash identifier:          gj2rpZyOGuNPuLBECIwaKCuvxeLLQ202uVelOpow9lc=
Subject key identifier:   B6:76:17:6C:75:34:A8:A9:E8:05:DD:45:00:7B:F3:FF:A3:CB:D6:2C
Certificate issuer:       /CN=bca82dd9-eea7-4756-b420-960dfbe436c3
Certificate serial:       010D0C9F432858473C08838165FE10712DA74A00
Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/456c2cd9-454a-3d06-9031-8440b4842af7.roa
Signing time:             Mon 16 Sep 2024 15:25:36 +0000
ROA not before:           Mon 16 Sep 2024 15:25:36 +0000
ROA not after:            Sun 15 Dec 2024 16:25:36 +0000
asID:                     53508
IP address blocks:        206.255.188.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 22 Sep 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3c:08:83:81:65:fe:10:71:2d:a7:4a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3
        Validity
            Not Before: Sep 16 15:25:36 2024 GMT
            Not After : Dec 15 16:25:36 2024 GMT
        Subject: CN=37d5ab9a-2ce3-4280-80f1-8cef6c83064e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:04:cf:f0:72:ca:a8:3a:84:d0:0f:e3:0b:56:
                    94:5c:a2:28:4f:36:82:f3:87:de:77:fd:2d:88:51:
                    4b:73:59:c0:18:ff:0a:eb:4c:73:78:b3:9b:2a:a3:
                    1e:b5:f5:c9:ea:9e:84:17:31:31:1c:6f:77:81:e0:
                    e5:6f:85:62:18:a0:59:6d:bd:60:03:66:56:02:f0:
                    37:14:c6:4b:96:b5:55:3f:46:53:84:e6:b8:d7:a4:
                    04:fa:8e:26:92:ca:2b:6e:d7:92:7e:c0:d8:93:33:
                    45:02:e1:2e:4f:cd:2d:29:82:38:81:a8:ba:cf:32:
                    9d:4b:ff:42:13:cd:8f:2f:0e:54:60:95:f2:2c:24:
                    19:90:6f:d9:ff:79:54:4a:75:88:d3:ee:53:fe:82:
                    af:c7:d1:f5:7d:30:99:37:68:95:58:2c:08:eb:e5:
                    4f:b9:e8:4f:72:1f:47:67:72:cf:f2:d1:d8:1a:63:
                    7c:ff:00:8a:4c:c2:af:83:6f:9a:ce:d4:e3:86:df:
                    f7:18:d0:07:79:d6:5c:13:ad:ef:9b:b3:19:09:ef:
                    2e:74:5a:61:89:8c:23:80:5e:7f:b7:29:87:16:92:
                    0b:29:2c:69:4b:67:81:f8:f9:a4:ed:37:d9:3c:fe:
                    e7:e3:ba:f4:8b:34:66:04:28:18:a6:d7:b5:56:bb:
                    9c:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:76:17:6C:75:34:A8:A9:E8:05:DD:45:00:7B:F3:FF:A3:CB:D6:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/456c2cd9-454a-3d06-9031-8440b4842af7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl

            X509v3 Authority Key Identifier:
                keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.255.188.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:33:29:b0:9d:df:6a:56:59:07:39:61:7c:ba:b6:61:97:ad:
         c8:42:a3:b8:34:dd:e5:56:75:31:50:58:a8:f8:92:5f:4a:28:
         5f:25:30:c8:cf:3b:a1:f3:82:d9:3f:fc:7f:91:11:dc:61:16:
         77:aa:03:15:b0:c7:b8:67:13:ef:50:21:97:d4:aa:83:3e:0e:
         a5:43:23:11:24:9f:c1:72:05:21:40:61:74:2e:b0:09:ff:e3:
         8d:06:35:fe:bd:7b:38:d8:a0:0c:d3:5c:95:a8:6f:00:70:98:
         59:1f:69:32:07:2e:a5:45:cf:9a:99:34:29:75:e8:de:d3:ec:
         03:13:d6:5b:ab:99:cc:80:00:0f:ab:ea:e9:e2:67:88:52:ec:
         e9:e9:89:21:3a:77:ee:6e:0e:36:2c:14:71:58:af:52:32:59:
         17:5b:d4:da:7c:8d:3f:ca:8b:e7:cc:b0:88:7c:77:33:5b:94:
         f0:57:de:1a:e7:c4:d0:e7:b8:86:db:3a:d5:2a:b1:e1:00:eb:
         3b:8d:cd:ec:22:48:bb:38:1a:2d:b4:ce:82:47:d2:ee:c0:37:
         49:51:72:5f:16:3c:ca:23:66:22:48:d5:5f:3c:c4:37:f0:41:
         3a:24:9b:d8:de:31:51:61:e4:90:e6:25:84:a2:1c:b0:8d:76:
         1f:87:c9:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 20 05:59:12 2024 by rpki-client on console-fra.rpki-client.org