Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/6c8a4694-00dd-3e1c-9de2-c7ec4752df33.roa
File:                     6c8a4694-00dd-3e1c-9de2-c7ec4752df33.roa (raw, json)
Hash identifier:          Cy9rsVXhZbD+sJeY9ZMqBSOx7wFLZ7DiiTp37TQrGho=
Subject key identifier:   91:33:50:BE:F8:AE:3E:A0:D5:62:2D:90:5E:80:08:27:2D:0D:B1:B6
Certificate issuer:       /CN=bca82dd9-eea7-4756-b420-960dfbe436c3
Certificate serial:       010D0C9F432858473C01F6BE08E4D8C721281280
Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/6c8a4694-00dd-3e1c-9de2-c7ec4752df33.roa
Signing time:             Mon 16 Sep 2024 15:12:24 +0000
ROA not before:           Mon 16 Sep 2024 15:12:24 +0000
ROA not after:            Sun 15 Dec 2024 16:12:24 +0000
asID:                     53508
IP address blocks:        24.89.60.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 22 Sep 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3c:01:f6:be:08:e4:d8:c7:21:28:12:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3
        Validity
            Not Before: Sep 16 15:12:24 2024 GMT
            Not After : Dec 15 16:12:24 2024 GMT
        Subject: CN=0eaf3cc8-7fad-404f-b564-674fb634e737
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:6c:1d:28:4c:a4:c2:4a:ed:9f:a6:40:fb:45:
                    df:9c:e8:7d:8b:bd:18:83:dd:75:41:eb:d0:af:9e:
                    5e:a9:38:36:11:86:96:27:15:d0:12:09:a5:b3:47:
                    c0:d4:7e:3c:c2:cb:aa:f3:e5:db:01:bd:db:6f:21:
                    23:a8:c2:db:95:19:e1:ab:10:b8:ce:37:2c:7f:4e:
                    d4:4b:49:c8:8c:87:9d:08:e9:61:39:5e:98:32:f1:
                    ee:a6:20:30:76:e6:3d:c6:85:2b:60:f3:5f:31:d7:
                    3d:7b:bd:7c:10:b3:12:d3:b6:56:83:5c:ac:cf:29:
                    53:cb:48:bf:3e:98:83:35:c0:34:9f:be:f3:3f:65:
                    10:5c:5f:a3:2f:d1:c8:09:51:2c:f6:4f:94:a7:f5:
                    3c:84:09:6a:2b:c3:6d:6c:3f:e6:32:5e:3e:72:70:
                    5a:c9:be:72:df:4e:69:f8:93:61:0c:56:fb:5e:05:
                    81:68:52:d4:d7:17:86:0e:03:fc:25:6d:cc:d8:8e:
                    9f:93:d0:be:f0:7d:b1:6a:59:9a:f3:00:59:55:25:
                    69:4e:61:32:c6:27:e3:da:e0:fd:e7:3b:f8:12:6b:
                    47:53:43:e2:99:b6:50:d6:b2:65:83:81:c4:88:64:
                    1c:ed:3b:3a:5c:49:86:13:56:a5:3e:63:b2:c2:bf:
                    9c:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:33:50:BE:F8:AE:3E:A0:D5:62:2D:90:5E:80:08:27:2D:0D:B1:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/6c8a4694-00dd-3e1c-9de2-c7ec4752df33.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl

            X509v3 Authority Key Identifier:
                keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.89.60.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:a5:e8:77:07:72:08:7b:f4:65:6a:a8:16:c0:7c:78:51:68:
         28:d7:12:82:f9:68:ff:c9:03:32:c4:c1:4b:d0:65:36:b7:b4:
         01:db:33:12:e1:e0:8d:45:df:6c:3d:d2:97:2c:e2:3a:00:21:
         bd:9d:53:3f:7a:f8:fa:45:a4:ac:f4:6b:6f:45:e6:86:00:35:
         60:bc:f5:14:d2:18:fc:ae:47:f5:b7:a5:ca:66:23:75:5d:11:
         3e:ca:d6:34:fb:c2:d8:d9:d9:0c:d5:79:2a:0e:04:cc:77:44:
         74:3a:2f:e2:fa:7b:e2:64:17:b5:84:2f:dc:59:77:c2:f7:3a:
         cf:a7:b9:6c:5b:14:97:6e:5e:15:7f:dd:04:91:af:c9:04:87:
         2f:e3:5e:bd:33:46:7f:df:1a:ae:34:85:6d:6c:47:fa:96:82:
         bb:a1:6b:15:10:2c:c9:9c:b9:23:b3:2d:3b:ca:8e:89:33:8e:
         05:4d:6e:76:13:0a:b1:51:25:d8:22:44:5d:34:34:99:05:ba:
         73:8b:ac:3b:48:72:c3:0a:a0:7e:4c:a3:4c:76:94:c0:20:67:
         09:7d:6a:9a:56:ea:66:23:dd:e6:ed:3f:66:c8:b5:ee:59:f2:
         65:04:14:ea:43:26:e0:d9:77:20:5f:49:53:09:0e:8b:aa:a2:
         c8:42:61:a7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEc8Afa+COTYxyEoEoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYmNhODJkZDktZWVhNy00NzU2LWI0MjAtOTYwZGZiZTQz
NmMzMB4XDTI0MDkxNjE1MTIyNFoXDTI0MTIxNTE2MTIyNFowLzEtMCsGA1UEAxMk
MGVhZjNjYzgtN2ZhZC00MDRmLWI1NjQtNjc0ZmI2MzRlNzM3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgmwdKEykwkrtn6ZA+0XfnOh9i70Yg911QevQ
r55eqTg2EYaWJxXQEgmls0fA1H48wsuq8+XbAb3bbyEjqMLblRnhqxC4zjcsf07U
S0nIjIedCOlhOV6YMvHupiAwduY9xoUrYPNfMdc9e718ELMS07ZWg1yszylTy0i/
PpiDNcA0n77zP2UQXF+jL9HICVEs9k+Up/U8hAlqK8NtbD/mMl4+cnBayb5y305p
+JNhDFb7XgWBaFLU1xeGDgP8JW3M2I6fk9C+8H2xalma8wBZVSVpTmEyxifj2uD9
5zv4EmtHU0PimbZQ1rJlg4HEiGQc7Ts6XEmGE1alPmOywr+c0QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJEzUL74rj6g1WItkF6ACCctDbG2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4
MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBkZmJlNDM2YzMvNmM4YTQ2OTQtMDBkZC0z
ZTFjLTlkZTItYzdlYzQ3NTJkZjMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYmNhODJkZDktZWVhNy00NzU2LWI0
MjAtOTYwZGZiZTQzNmMzL2JjYTgyZGQ5LWVlYTctNDc1Ni1iNDIwLTk2MGRmYmU0
MzZjMy5jcmwwHwYDVR0jBBgwFoAUyrimHnY0wTCAiarYWGHqOLodQPQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBk
ZmJlNDM2YzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBGFk8MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAE+l6HcHcgh79GVqqBbAfHhRaCjXEoL5aP/JAzLEwUvQZTa3tAHbMxLh
4I1F32w90pcs4joAIb2dUz96+PpFpKz0a29F5oYANWC89RTSGPyuR/W3pcpmI3Vd
ET7K1jT7wtjZ2QzVeSoOBMx3RHQ6L+L6e+JkF7WEL9xZd8L3Os+nuWxbFJduXhV/
3QSRr8kEhy/jXr0zRn/fGq40hW1sR/qWgruhaxUQLMmcuSOzLTvKjokzjgVNbnYT
CrFRJdgiRF00NJkFunOLrDtIcsMKoH5Mo0x2lMAgZwl9appW6mYj3ebtP2bIte5Z
8mUEFOpDJuDZdyBfSVMJDouqoshCYac=
-----END CERTIFICATE-----
Generated at Fri Sep 20 05:59:12 2024 by rpki-client on console-fra.rpki-client.org