Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/7e2175eb-4a04-310c-b9fd-72861a506b88.roa
File:                     7e2175eb-4a04-310c-b9fd-72861a506b88.roa (raw, json)
Hash identifier:          wRpnxaBytmHqNiMdMhSNpYyxIJQv8g9e81rnULIMeJ8=
Subject key identifier:   DF:CF:13:39:96:1E:B5:5A:8E:D8:AF:15:0A:A7:B7:3B:2A:94:1E:5B
Certificate issuer:       /CN=bca82dd9-eea7-4756-b420-960dfbe436c3
Certificate serial:       010D0C9F432858473C4F00C607D4152E17B97600
Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/7e2175eb-4a04-310c-b9fd-72861a506b88.roa
Signing time:             Mon 16 Sep 2024 17:47:38 +0000
ROA not before:           Mon 16 Sep 2024 17:47:38 +0000
ROA not after:            Sun 15 Dec 2024 18:47:38 +0000
asID:                     53508
IP address blocks:        206.255.32.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 22 Sep 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3c:4f:00:c6:07:d4:15:2e:17:b9:76:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3
        Validity
            Not Before: Sep 16 17:47:38 2024 GMT
            Not After : Dec 15 18:47:38 2024 GMT
        Subject: CN=fe22cac1-a611-401a-814a-198b8ebef6ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:9b:19:eb:4a:cc:f9:e2:0e:7c:c5:cb:72:e5:
                    9b:e0:57:00:0b:16:fe:54:16:04:64:5c:de:32:4f:
                    df:50:9e:a5:93:95:33:0b:4f:17:b4:d9:d7:6c:5e:
                    41:80:20:a7:35:35:06:90:c6:ee:70:08:48:fe:4a:
                    ef:cd:6d:ec:8b:75:75:80:1a:79:0b:a9:65:71:ec:
                    63:4f:2e:2e:5b:28:76:f1:c8:7a:49:dd:a6:2f:0e:
                    99:e2:a4:a1:ef:4c:64:a7:8c:fc:52:ff:65:f6:d1:
                    5c:00:53:03:ae:6b:4d:37:3b:96:4d:9f:0c:73:9a:
                    f9:bd:2a:0c:08:f4:6e:ec:92:1b:2a:77:58:7e:4f:
                    41:ca:6f:c6:ff:1a:7b:57:4e:0c:9a:2d:e2:89:ad:
                    11:c5:f8:d5:58:21:cf:2c:e4:87:90:49:38:8c:f5:
                    66:c4:51:77:ef:b0:43:2e:05:8f:4d:0f:9d:b8:30:
                    7a:9d:36:22:7c:17:5d:c8:7e:6c:a9:61:31:b1:c8:
                    4f:80:5a:b4:ad:6c:73:5c:61:97:4d:04:52:2c:c7:
                    f3:d8:8d:34:3e:9b:a5:97:5b:9d:09:63:93:94:0f:
                    3f:c1:fd:a6:78:01:65:43:27:3c:9e:81:7b:3a:42:
                    63:b3:05:a7:a0:34:54:23:33:c3:7a:a9:e8:1d:ea:
                    9b:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:CF:13:39:96:1E:B5:5A:8E:D8:AF:15:0A:A7:B7:3B:2A:94:1E:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/7e2175eb-4a04-310c-b9fd-72861a506b88.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl

            X509v3 Authority Key Identifier:
                keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.255.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:06:ca:64:01:11:3b:98:69:04:54:8d:7b:c2:5a:b8:b5:18:
         fa:6a:e3:05:46:cd:e4:65:dd:74:a0:75:f0:46:eb:d5:05:b9:
         7e:84:ac:6a:07:37:f2:87:93:9f:3f:0b:e6:d5:ef:29:d0:56:
         a0:75:43:9e:0d:7c:f3:20:46:d1:b2:96:37:80:bc:df:3f:1a:
         3a:9e:8a:c4:c2:62:9c:a9:a0:f8:2e:35:40:a6:63:ea:cb:32:
         ce:9f:b1:98:47:a0:2f:22:5a:17:da:38:f0:8a:2f:17:55:4b:
         45:0f:44:b7:75:02:ea:02:96:00:2e:ed:8e:38:51:82:a1:d2:
         20:9b:a8:9d:b3:c1:cd:73:a8:51:09:2b:b3:80:a0:bf:2c:80:
         11:41:83:a7:e6:08:c0:51:81:27:fa:37:cd:e2:63:28:0b:05:
         ce:1f:80:8c:40:93:66:8e:14:41:5d:69:81:c5:69:04:45:ff:
         6e:3d:6a:93:8c:39:93:cb:88:f8:52:6c:c0:8f:a4:2a:2f:e5:
         4e:55:25:ab:f4:32:bf:62:a2:a7:e6:10:d8:98:ea:84:06:04:
         88:15:95:5c:c1:37:22:7b:05:8c:41:87:f8:e2:a4:33:c4:17:
         28:f9:4c:4f:30:00:eb:5a:9e:63:83:f3:94:a7:8f:f8:43:e4:
         02:8e:8c:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 20 06:14:29 2024 by rpki-client on console-ams.rpki-client.org