Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/5db1674b-8b6d-35c1-8848-158cea416904.roa
File:                     5db1674b-8b6d-35c1-8848-158cea416904.roa (raw, json)
Hash identifier:          q7vdeTBFA2IwHGtrVmvzL4HFvgimuvUglJrQmftzTuI=
Subject key identifier:   57:4F:E7:F5:33:70:F8:F2:4A:94:F3:C7:5F:DD:EF:37:F3:52:C9:91
Certificate issuer:       /CN=bca82dd9-eea7-4756-b420-960dfbe436c3
Certificate serial:       010D0C9F432858473C083BF3CA306011E723A200
Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/5db1674b-8b6d-35c1-8848-158cea416904.roa
Signing time:             Mon 16 Sep 2024 15:25:02 +0000
ROA not before:           Mon 16 Sep 2024 15:25:02 +0000
ROA not after:            Sun 15 Dec 2024 16:25:02 +0000
asID:                     53508
IP address blocks:        206.255.144.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3c:08:3b:f3:ca:30:60:11:e7:23:a2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3
        Validity
            Not Before: Sep 16 15:25:02 2024 GMT
            Not After : Dec 15 16:25:02 2024 GMT
        Subject: CN=83e2c523-81ac-4d14-b917-652efe7c3b1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:fa:29:2e:01:5b:09:c3:a8:5e:ae:d5:a7:be:
                    e3:3d:a6:e4:35:06:76:4e:cb:51:30:93:ea:5e:06:
                    d4:da:28:c0:01:b3:aa:c4:5e:f5:ad:44:92:e2:33:
                    19:9b:30:7d:de:b2:cc:da:ab:96:fd:17:4c:5b:a5:
                    03:51:c7:18:a1:86:e1:f9:1c:d7:14:76:19:17:f0:
                    31:cd:66:03:cf:c7:b3:fa:32:ec:7c:7d:6e:c2:14:
                    39:fb:19:c3:25:16:8b:80:c6:4c:6c:46:00:39:0e:
                    42:2f:d0:7b:04:2b:34:0a:dd:e6:ae:73:c6:d7:2a:
                    d6:8f:50:c0:45:ae:4e:f2:6e:5f:8f:d2:26:c2:e6:
                    73:7e:27:bf:6f:b3:31:ef:a1:ed:0c:b4:40:b1:8f:
                    42:bc:a2:51:89:30:71:f6:7f:5f:57:bb:23:a8:64:
                    74:98:bd:f7:9d:65:db:16:72:af:45:46:90:37:78:
                    51:a4:ec:1a:a9:16:2a:3e:b7:29:24:94:1c:39:cb:
                    2a:5a:13:ff:37:2b:d2:c3:66:dc:ab:4d:7c:1c:0e:
                    cd:5c:ca:de:3e:66:6c:23:88:76:d4:14:ae:06:07:
                    83:a6:e4:87:31:b1:4b:1f:a1:eb:1c:69:7e:13:5f:
                    cf:f6:22:32:b2:cd:1d:dd:89:c9:93:de:c4:0d:46:
                    17:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:4F:E7:F5:33:70:F8:F2:4A:94:F3:C7:5F:DD:EF:37:F3:52:C9:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/5db1674b-8b6d-35c1-8848-158cea416904.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl

            X509v3 Authority Key Identifier:
                keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.255.144.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:e6:6f:44:be:f7:82:a9:6d:e9:f8:62:66:f2:f0:82:24:bf:
         a6:60:e4:a5:a6:c1:6d:d8:f4:86:cc:db:89:39:4f:a6:43:6a:
         77:23:45:20:64:9e:18:5f:b4:f6:4c:c2:b0:e4:ee:f5:cf:da:
         c1:c6:f3:86:56:ec:66:4e:67:55:b2:b4:da:e2:42:11:6d:a5:
         2b:49:12:c6:60:fc:f5:cc:07:9a:c2:fc:08:1d:73:3a:a4:95:
         d3:dd:fc:61:08:d0:c7:90:3e:e6:7b:3e:15:e5:6d:1e:1f:ae:
         fe:d7:12:f3:de:f1:13:e5:25:17:c4:9d:39:eb:9a:c5:7c:01:
         7f:e5:54:1f:9a:f9:d5:e7:e1:1a:96:de:23:7b:bd:e0:ef:31:
         3c:83:d8:84:9d:81:f9:98:ce:a8:75:4e:71:da:b2:bf:0a:e7:
         1c:de:80:47:77:c9:5a:e7:c7:b5:1e:15:ea:83:d0:f0:9d:d3:
         0a:49:51:a0:c6:79:ee:b2:02:22:1b:b0:c6:da:4a:f8:0e:88:
         e5:40:e3:8d:ff:eb:14:a9:ea:8e:41:35:da:97:87:1a:b3:fd:
         0b:35:e1:dd:91:3a:4a:e1:8b:1a:cd:56:e3:da:8d:06:f6:3b:
         6b:99:9e:78:ed:46:6d:a1:8c:62:e0:00:8a:12:91:2f:4e:f8:
         41:10:77:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:37:27 2024 by rpki-client on console-fra.rpki-client.org