Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/7e2175eb-4a04-310c-b9fd-72861a506b88.roa
File:                     7e2175eb-4a04-310c-b9fd-72861a506b88.roa (raw, json)
Hash identifier:          5WkZfzk4b3Ivt5kQABsh+DW/2WjSE+Vb5m0An6//sdw=
Subject key identifier:   6E:83:6E:AC:48:8F:BB:BF:DF:11:73:B1:C1:75:A8:6D:F5:93:13:D3
Certificate issuer:       /CN=bca82dd9-eea7-4756-b420-960dfbe436c3
Certificate serial:       010D0C9F432858481C9A7213E193BB98E3577140
Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/7e2175eb-4a04-310c-b9fd-72861a506b88.roa
Signing time:             Fri 06 Dec 2024 02:00:39 +0000
ROA not before:           Fri 06 Dec 2024 02:00:39 +0000
ROA not after:            Thu 06 Mar 2025 02:00:39 +0000
asID:                     53508
IP address blocks:        206.255.32.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:1c:9a:72:13:e1:93:bb:98:e3:57:71:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3
        Validity
            Not Before: Dec  6 02:00:39 2024 GMT
            Not After : Mar  6 02:00:39 2025 GMT
        Subject: CN=3fe8ffa9-0068-416e-b44c-c5cae3b171fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:c3:cd:97:e7:cf:4c:45:b1:9f:07:b7:8d:36:
                    c0:3f:bc:87:01:d3:56:31:ca:67:fa:00:5f:81:b4:
                    38:25:9c:c4:3f:1b:4f:f3:e4:87:14:1e:eb:15:f1:
                    aa:44:f6:27:2c:3b:81:2e:67:66:03:ae:a0:7c:1e:
                    84:1b:d1:8f:02:a0:6f:8a:d1:23:41:a2:1b:ad:a7:
                    b4:43:05:75:5a:6d:8c:75:21:c8:bc:a5:c2:15:c3:
                    58:20:53:97:d4:c0:9f:37:63:70:39:a0:43:4f:5a:
                    e1:60:38:1c:0b:ec:b3:83:a8:ac:46:1d:d3:19:0b:
                    bf:67:6d:20:b1:5a:1d:94:36:aa:c8:f1:89:4e:0c:
                    f6:86:e1:18:73:a6:c6:33:18:0e:62:f1:30:ee:03:
                    ec:51:fe:9f:27:79:75:70:79:f3:a2:c9:7b:e7:62:
                    51:f0:68:10:ef:bd:b7:36:71:9b:57:08:e3:54:17:
                    23:01:e6:37:e7:d0:a4:00:ee:e9:cb:e9:da:ec:bb:
                    5b:ed:6f:2d:9b:f4:8a:14:95:88:a4:31:7c:ed:6e:
                    f2:71:92:8f:e4:17:6c:07:a6:cc:01:2a:f3:be:78:
                    86:ee:d6:bb:89:eb:8a:b0:a1:75:0b:96:cc:08:00:
                    c4:3f:72:02:a3:c4:d7:33:49:d4:78:51:94:32:12:
                    b2:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:83:6E:AC:48:8F:BB:BF:DF:11:73:B1:C1:75:A8:6D:F5:93:13:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/7e2175eb-4a04-310c-b9fd-72861a506b88.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl

            X509v3 Authority Key Identifier:
                keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.255.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:10:62:1f:81:f6:ed:0a:4d:ca:27:14:ae:6b:2d:49:1f:31:
         68:33:c6:92:7d:30:85:0e:34:9d:50:97:95:1f:97:c5:01:c1:
         1b:8d:7f:3f:04:cd:10:4b:dd:9e:47:7d:11:2a:d4:76:1c:2f:
         71:45:dc:48:cc:72:b0:0c:36:ce:a4:40:07:5c:bb:0f:1f:cf:
         63:26:f9:38:32:c0:ed:66:06:c6:a2:0c:26:06:37:da:a2:0a:
         d6:19:52:6c:7a:32:8c:b7:5a:1c:f3:7a:72:73:a6:29:05:ff:
         6f:9e:9b:81:59:e5:9d:4a:ea:7f:52:fb:3e:96:f3:1f:6e:f0:
         93:c8:52:1e:c9:3b:cc:0a:c0:26:0f:74:1b:49:d5:c2:f9:ab:
         98:67:9a:54:80:71:be:da:24:87:17:3c:41:b9:a0:81:55:d7:
         66:8a:2e:10:dd:34:f0:56:7c:9c:8a:e4:9b:f2:43:af:46:e1:
         29:bf:f9:be:7d:b3:99:9a:9a:92:7b:23:2b:b6:a9:53:d4:21:
         1a:d1:0a:0a:f7:89:4f:5d:4d:c7:7a:4f:8f:bc:18:ca:1c:a3:
         7b:fe:d0:6c:30:68:db:c8:6e:64:2e:4f:b9:a7:8f:c8:d3:65:
         48:4c:f3:7f:85:db:e9:56:07:ba:84:08:22:e4:9e:98:52:9c:
         87:3a:68:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:11:48 2025 by rpki-client