Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/898c2fae-9cc9-3ba9-90a5-85af8b5b4f13.roa
File:                     898c2fae-9cc9-3ba9-90a5-85af8b5b4f13.roa (raw, json)
Hash identifier:          TPd04/gF8ZMvXFygbeGJxSqJJqFYLvNF96anrd8f3j4=
Subject key identifier:   FF:EF:28:E0:C0:BD:69:05:33:65:0A:6E:27:6F:C9:7C:28:E5:B6:66
Certificate issuer:       /CN=bca82dd9-eea7-4756-b420-960dfbe436c3
Certificate serial:       010D0C9F432858473C4DCEB4E6C5FF7D97FC81A0
Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/898c2fae-9cc9-3ba9-90a5-85af8b5b4f13.roa
Signing time:             Mon 16 Sep 2024 17:45:13 +0000
ROA not before:           Mon 16 Sep 2024 17:45:13 +0000
ROA not after:            Sun 15 Dec 2024 18:45:13 +0000
asID:                     53508
IP address blocks:        142.79.108.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3c:4d:ce:b4:e6:c5:ff:7d:97:fc:81:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3
        Validity
            Not Before: Sep 16 17:45:13 2024 GMT
            Not After : Dec 15 18:45:13 2024 GMT
        Subject: CN=ac59db31-1fa4-48af-8be0-ed363ce8235e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:81:29:35:4e:9b:1c:a6:38:6d:a1:10:34:18:
                    95:84:57:f5:6e:79:57:5b:e3:f8:f6:d8:4f:3d:1e:
                    17:5a:20:34:d7:bd:9f:f1:db:0b:f7:cd:f6:37:54:
                    8e:dd:c2:fe:19:f0:6b:53:84:3e:ee:e6:78:fe:fc:
                    2c:5d:02:2a:fb:9c:38:3a:25:0c:b9:b0:09:7d:2f:
                    63:d5:56:63:ab:21:94:38:b6:34:a3:b8:13:7a:77:
                    93:d3:75:c1:c6:48:c2:cd:a0:4a:80:af:d1:50:73:
                    b2:8b:cf:76:77:86:61:3f:c7:b4:32:34:d4:fa:90:
                    20:ff:c8:bd:0a:d3:87:34:fb:f4:03:0f:a0:1f:13:
                    6c:ef:54:7a:b0:77:60:39:13:d1:57:72:07:ce:c3:
                    b8:26:bf:10:5e:1f:9a:25:0b:a7:3f:7f:b1:fa:28:
                    09:86:8c:b8:cc:5a:cd:78:19:0e:c2:8d:8c:7c:17:
                    52:62:0b:82:6f:f4:c2:60:7a:98:24:7b:ed:0c:9c:
                    87:06:79:4c:ee:18:c7:32:56:2a:a4:26:bb:19:25:
                    9e:76:56:48:fc:76:9a:89:7c:ba:33:59:13:c5:24:
                    fb:a9:1d:25:cd:59:f2:1c:2e:17:19:b6:5b:39:63:
                    c9:aa:c5:2d:7c:02:50:32:ed:df:9e:00:94:46:dd:
                    f7:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:EF:28:E0:C0:BD:69:05:33:65:0A:6E:27:6F:C9:7C:28:E5:B6:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/898c2fae-9cc9-3ba9-90a5-85af8b5b4f13.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl

            X509v3 Authority Key Identifier:
                keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.79.108.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:66:27:b1:ea:43:b3:df:a9:8f:05:73:17:7f:6d:6f:fc:6b:
         ed:c5:51:2f:f4:17:63:d3:d9:94:30:a1:4c:43:48:54:d6:f0:
         47:b0:88:1c:4f:0e:d2:53:59:6e:87:66:d3:3e:29:dc:53:5a:
         c1:7a:b4:1f:54:b4:37:42:a7:c6:d8:93:16:b0:4c:6f:63:b4:
         03:b9:29:3f:11:41:b7:b8:84:81:23:5f:8d:39:5f:36:69:b5:
         c8:26:06:17:1b:df:eb:98:9e:b1:8c:f8:d4:27:d1:58:9e:28:
         13:98:3c:cf:24:e6:12:04:b6:2f:b3:f6:7a:15:ee:dc:7d:14:
         16:75:a7:72:7d:ba:95:c9:94:b6:3b:1c:27:8d:d2:7a:3a:9a:
         00:9b:9f:35:fc:75:73:c9:6b:98:27:d0:d8:94:ee:8f:81:a7:
         73:fb:3c:3e:b2:84:79:0c:21:05:00:98:08:0a:73:b3:00:77:
         6e:4e:a5:70:f3:b7:a0:6e:1b:a0:15:9e:1f:8b:78:66:5b:b0:
         80:19:05:df:33:b2:59:54:d7:f5:b9:07:25:10:0a:e3:63:e7:
         da:9c:89:74:80:83:24:6d:f4:56:c2:51:b7:8d:b9:73:02:30:
         44:c3:14:a8:66:27:9b:3c:38:e3:73:18:93:65:78:c4:42:eb:
         3b:ca:02:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:37:24 2024 by rpki-client on console-ams.rpki-client.org