Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/9434e6dc-d860-3378-b9ed-0912c88bab1b.roa
File:                     9434e6dc-d860-3378-b9ed-0912c88bab1b.roa (raw, json)
Hash identifier:          2jXgsQ674z1OS4xQwbQ/HTiub2ySAYw4qJkqHJXaG9E=
Subject key identifier:   22:06:AB:98:B9:A5:80:D9:D5:E2:E5:00:8E:13:66:5C:F3:BC:50:2B
Certificate issuer:       /CN=bca82dd9-eea7-4756-b420-960dfbe436c3
Certificate serial:       010D0C9F432858473C0A86E53145AABAE7711B00
Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/9434e6dc-d860-3378-b9ed-0912c88bab1b.roa
Signing time:             Mon 16 Sep 2024 15:29:40 +0000
ROA not before:           Mon 16 Sep 2024 15:29:40 +0000
ROA not after:            Sun 15 Dec 2024 16:29:40 +0000
asID:                     53508
IP address blocks:        206.255.248.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3c:0a:86:e5:31:45:aa:ba:e7:71:1b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3
        Validity
            Not Before: Sep 16 15:29:40 2024 GMT
            Not After : Dec 15 16:29:40 2024 GMT
        Subject: CN=ba228406-1c4b-4de4-9e48-6adf49c6b49e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:ef:2b:3b:ec:02:9c:b7:80:7e:2e:bd:3f:60:
                    25:b5:81:1e:ed:ef:8d:21:53:5d:a3:d0:7f:e4:d4:
                    3e:49:c0:5f:0d:53:7c:4c:56:bf:f5:a0:28:fe:64:
                    54:40:32:91:37:fb:14:d5:5d:43:59:ce:34:a9:ff:
                    df:84:85:a1:97:a3:b7:bf:72:f3:33:9c:ba:26:0e:
                    9e:e5:f4:da:07:aa:5e:f9:61:1e:36:42:6f:3f:e0:
                    5b:b4:11:11:9d:dc:47:b7:f9:20:00:02:2c:b6:39:
                    ca:1e:73:11:67:68:4e:ab:da:8f:15:a2:b5:94:74:
                    53:97:24:13:ba:28:d9:a7:56:8a:ba:a6:38:91:97:
                    f5:fa:42:12:d9:f8:48:9b:8c:4b:17:92:35:d6:eb:
                    dd:1e:d9:f3:eb:8a:c2:f6:3e:b8:22:59:d8:45:c6:
                    ab:44:5d:08:03:45:34:ce:77:79:08:c4:11:ae:a2:
                    1d:87:77:3b:db:29:ed:fa:10:d4:fb:d4:a2:bc:78:
                    2e:db:d8:4f:32:57:d5:a0:47:6d:ef:44:b5:28:c5:
                    00:27:b5:bf:d0:06:a4:f8:9c:17:c1:0e:b6:cf:18:
                    5c:5f:c6:aa:5e:76:03:38:58:d0:27:5f:21:a2:94:
                    cc:60:43:0f:b3:c8:f4:4f:09:99:6e:5b:b7:6f:1a:
                    7a:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:06:AB:98:B9:A5:80:D9:D5:E2:E5:00:8E:13:66:5C:F3:BC:50:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/9434e6dc-d860-3378-b9ed-0912c88bab1b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl

            X509v3 Authority Key Identifier:
                keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.255.248.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:bb:77:59:1a:52:65:16:40:f4:69:36:df:c8:04:ec:74:a1:
         0c:9f:84:2c:57:29:c8:d9:d0:03:3d:01:b1:c8:ac:0e:b0:de:
         7e:ec:e9:f6:29:2c:22:12:a8:74:97:f9:8d:28:53:bc:16:40:
         17:45:55:43:c1:77:8a:bb:b2:d2:7b:77:7d:16:fa:6c:12:37:
         e2:72:a9:d8:59:9a:5b:bb:a4:b3:c5:3f:81:45:8d:a1:70:59:
         1d:70:bf:6c:e5:f1:d5:70:ef:36:ec:50:17:57:06:fc:5f:d2:
         23:b5:80:f1:3c:28:42:40:31:c5:79:69:a5:ff:12:cf:8c:47:
         8b:76:77:a6:a1:a9:0e:ee:67:fa:2c:7f:fe:95:08:70:27:a5:
         5c:d4:ec:5d:1c:13:b6:83:5b:2b:56:c0:c8:93:81:9a:69:ff:
         7a:2b:1d:de:01:5b:1b:b1:bd:9c:44:9e:f0:89:15:de:8a:0c:
         45:64:af:c4:0a:64:6c:cc:96:a5:d5:82:f3:9e:f7:9f:f8:16:
         d6:4a:9c:b5:18:03:62:4d:2a:4e:aa:9a:8d:41:b3:5b:1e:19:
         07:fa:04:4d:78:1d:a9:b5:fa:37:b9:47:b8:bb:45:d6:de:a0:
         4a:53:45:be:68:ca:83:46:db:22:61:cc:82:89:20:a3:ee:7a:
         05:0d:f0:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 21:00:24 2024 by rpki-client on console-fra.rpki-client.org