Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/79af0ffd-19dc-3f61-a048-83af6276d1fe.roa
File:                     79af0ffd-19dc-3f61-a048-83af6276d1fe.roa (raw, json)
Hash identifier:          qy4vI1JhWv8iCFwKefX+0uMFZt9qyG7dWOhj4OeClN4=
Subject key identifier:   3D:23:F1:52:E9:68:40:F1:79:2B:9A:A1:A2:D9:27:62:5C:8C:90:1C
Certificate issuer:       /CN=bca82dd9-eea7-4756-b420-960dfbe436c3
Certificate serial:       010D0C9F432858473C4B96D4909017339B9CFB2E
Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/79af0ffd-19dc-3f61-a048-83af6276d1fe.roa
Signing time:             Mon 16 Sep 2024 17:40:45 +0000
ROA not before:           Mon 16 Sep 2024 17:40:45 +0000
ROA not after:            Sun 15 Dec 2024 18:40:45 +0000
asID:                     53508
IP address blocks:        24.89.52.0/22 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3c:4b:96:d4:90:90:17:33:9b:9c:fb:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3
        Validity
            Not Before: Sep 16 17:40:45 2024 GMT
            Not After : Dec 15 18:40:45 2024 GMT
        Subject: CN=d17641bd-f921-450f-84b4-fa064ae1fca8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:f9:f7:33:b9:3e:94:a8:1e:d6:d8:24:69:9f:
                    25:04:02:8d:ce:80:fa:44:35:a9:ce:b9:e7:35:3f:
                    a0:e6:87:ed:96:2a:62:ca:06:00:07:b3:98:87:64:
                    10:bf:88:50:79:10:99:b8:ab:51:0a:64:dc:dc:66:
                    8a:50:d7:b0:e1:7c:53:66:68:7c:45:51:3f:e2:4c:
                    20:76:e8:2e:c4:82:f7:e0:48:bc:bd:af:4e:29:2b:
                    99:5d:2a:ba:4b:ea:91:33:fa:19:34:14:91:14:37:
                    76:cb:78:71:ac:12:26:cd:0f:d7:77:a9:67:0d:34:
                    e7:cc:2a:e4:3e:d0:49:c7:7f:2c:ff:a0:bb:99:5a:
                    4f:6f:07:19:9d:a2:c7:9b:4b:45:99:c3:3e:27:68:
                    ab:62:3a:ea:a8:b4:cb:f5:6e:f1:40:61:c1:47:de:
                    c6:30:c9:f7:aa:01:9f:27:73:80:c2:9d:7a:10:4a:
                    c8:a2:77:f0:d1:00:e2:8b:01:25:17:fc:a3:ba:e9:
                    89:7c:b3:d9:99:c9:50:6d:f4:43:68:e6:60:2c:dc:
                    2b:3a:40:98:71:8a:c5:a2:7a:7d:38:82:cb:54:cb:
                    5e:a0:93:82:ba:84:06:91:6d:74:e5:48:fc:f2:dd:
                    47:7b:6a:c9:c8:76:3a:f2:3c:2f:3b:bf:d2:d5:14:
                    81:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:23:F1:52:E9:68:40:F1:79:2B:9A:A1:A2:D9:27:62:5C:8C:90:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/79af0ffd-19dc-3f61-a048-83af6276d1fe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl

            X509v3 Authority Key Identifier:
                keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.89.52.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:4c:66:92:84:f2:82:5a:db:42:d9:f9:6a:aa:6d:eb:92:a8:
         cf:76:d9:4c:03:82:3d:6d:b5:c0:cf:3f:72:3f:f3:62:b2:ac:
         6d:a1:09:0d:63:b0:d4:73:2f:01:53:2f:78:a0:62:ba:d6:ac:
         62:32:c9:9f:8f:ef:ab:52:e6:03:62:34:fd:3f:8c:fe:8c:f9:
         96:ab:af:45:d9:c9:c7:25:8a:47:24:7c:18:af:bd:e6:1f:3a:
         d4:ac:e1:4f:e6:fa:ef:77:c6:1d:fc:a1:c7:e9:18:69:3d:4c:
         b5:fa:8c:d3:52:fe:af:c6:8f:d5:59:72:73:93:23:fa:10:db:
         29:16:0b:13:1d:56:75:ed:32:b8:02:fb:79:b2:74:f6:3d:1e:
         86:a2:e3:c5:78:af:6a:b2:47:13:f9:af:9c:84:f5:7e:9d:81:
         5a:2f:45:03:fb:a8:b8:e9:fd:e2:c6:1e:24:14:f1:32:81:8b:
         dd:de:38:7b:31:bc:55:78:8f:dd:10:39:99:c7:01:d8:42:fe:
         ea:57:fe:a6:10:9a:c2:52:3f:db:df:f0:f3:c4:b9:96:bd:61:
         03:ae:e0:af:32:d5:14:25:34:7c:f0:73:bc:02:7a:ff:1b:54:
         8a:85:e2:21:8b:3b:2a:fb:c2:b9:1b:99:35:63:5b:83:d4:92:
         f1:39:65:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 21:00:24 2024 by rpki-client on console-fra.rpki-client.org