Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/81af0be6-f23c-30fe-8f01-107b7f0d4738.roa
File:                     81af0be6-f23c-30fe-8f01-107b7f0d4738.roa (raw, json)
Hash identifier:          S2ZWaDpSU/mSair7VUgW7YPAQDNNAwsomJZ+SLonZ7Q=
Subject key identifier:   5D:F7:C0:05:A8:FD:65:A4:F8:7A:55:D4:5F:59:B6:1B:64:5D:DA:2A
Certificate issuer:       /CN=bca82dd9-eea7-4756-b420-960dfbe436c3
Certificate serial:       010D0C9F432858473C07A0CE38D1B98F219D2980
Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/81af0be6-f23c-30fe-8f01-107b7f0d4738.roa
Signing time:             Mon 16 Sep 2024 15:23:49 +0000
ROA not before:           Mon 16 Sep 2024 15:23:49 +0000
ROA not after:            Sun 15 Dec 2024 16:23:49 +0000
asID:                     53508
IP address blocks:        206.255.80.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 22 Sep 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3c:07:a0:ce:38:d1:b9:8f:21:9d:29:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3
        Validity
            Not Before: Sep 16 15:23:49 2024 GMT
            Not After : Dec 15 16:23:49 2024 GMT
        Subject: CN=7bf7bab2-5a13-4b58-98b5-5420a7ed0a12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:83:ae:4f:7d:d4:92:c8:a5:95:72:bb:07:3d:
                    24:46:b6:80:58:88:5e:d5:95:76:a4:8e:82:03:d1:
                    f4:3b:36:fa:1c:d8:8e:a4:62:bf:5f:ab:01:19:73:
                    3b:41:3b:88:7c:54:6d:23:e1:f3:1f:6b:fd:5b:ff:
                    f8:e8:3d:75:63:68:17:53:17:e4:ba:09:aa:17:3b:
                    92:27:cc:66:1e:a7:2a:42:fa:9d:c6:19:0f:ae:3f:
                    7a:ea:45:da:20:a1:70:92:ae:d7:26:a0:1d:2f:d9:
                    8b:34:fe:0f:5b:d2:93:09:0c:1a:c0:3f:4a:46:9c:
                    cf:2f:7e:61:78:e4:28:13:8a:12:9d:86:44:47:9a:
                    dc:f5:8d:6b:11:eb:97:5d:36:83:85:37:c6:80:e3:
                    7f:f6:a0:c0:c6:07:b2:dc:79:0b:70:57:e0:c1:f3:
                    92:a5:6f:11:b8:85:35:88:80:b6:1c:43:a0:fd:c5:
                    96:6e:c1:19:98:2d:5c:ec:39:69:22:5d:0b:a8:d2:
                    70:31:01:a6:5a:22:e3:9c:eb:92:bd:f0:6e:4b:32:
                    ae:52:59:ad:89:df:4b:0f:16:85:c6:3b:48:5a:1b:
                    66:e2:85:ac:c4:40:dc:39:97:03:ac:dc:ff:e6:63:
                    40:e2:2c:30:aa:11:b2:b8:61:a4:30:d2:39:9c:a0:
                    2d:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:F7:C0:05:A8:FD:65:A4:F8:7A:55:D4:5F:59:B6:1B:64:5D:DA:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/81af0be6-f23c-30fe-8f01-107b7f0d4738.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl

            X509v3 Authority Key Identifier:
                keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.255.80.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:e7:95:8b:2d:3a:d2:bb:20:14:9c:20:25:6a:21:f7:d8:18:
         4b:69:95:bf:68:50:eb:e5:78:bd:f5:37:b1:7f:61:07:ae:db:
         05:04:a8:1b:20:5b:8a:6c:54:49:81:ef:07:32:b2:27:b2:fc:
         d8:4a:ed:e7:b2:fd:ae:d4:69:8b:59:0e:52:c8:d9:46:2a:c7:
         a1:57:14:0a:40:c3:58:24:0c:07:71:00:57:d6:46:07:b4:7e:
         95:6c:81:9b:f8:9c:50:64:f9:c6:81:f3:2c:5a:22:91:a5:f4:
         cf:a1:dc:24:28:b0:53:8b:3d:03:1b:00:f8:f0:3a:8f:cb:ea:
         91:0f:ad:a4:f6:d8:f3:15:68:51:10:e9:58:95:90:88:22:2b:
         6d:e0:d2:81:b8:ab:38:39:30:0d:b8:14:62:23:d9:ad:e2:b6:
         18:d2:c6:cc:3d:e4:0f:f7:17:8e:5d:8d:11:7b:7d:b8:8d:20:
         08:1b:35:c6:3b:d4:08:dc:dd:3e:92:71:b5:21:9a:22:6b:aa:
         f7:ca:b5:82:ee:69:4b:06:76:45:ea:4b:2a:2e:45:9c:d7:68:
         00:c3:6a:c8:eb:f9:e9:86:ea:49:f0:c5:44:4f:d8:ed:ce:f7:
         c8:c1:51:24:99:1d:cc:e2:2e:04:ce:36:2b:09:d9:57:5d:f6:
         43:54:67:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 20 05:59:12 2024 by rpki-client on console-fra.rpki-client.org