Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/9e0f79f2-ff7f-329f-9bf0-406f336fe912.roa
File:                     9e0f79f2-ff7f-329f-9bf0-406f336fe912.roa (raw, json)
Hash identifier:          5epYW0t4FXE9wM/iyo6ali6AVf/CpVQ3HX1EQECqxVo=
Subject key identifier:   85:E3:44:2C:59:EF:B8:78:A9:44:56:9E:7D:C3:DE:03:DE:2D:1B:3D
Certificate issuer:       /CN=bca82dd9-eea7-4756-b420-960dfbe436c3
Certificate serial:       010D0C9F432858473C7A6B8BD9F1CE1CCA57AD00
Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/9e0f79f2-ff7f-329f-9bf0-406f336fe912.roa
Signing time:             Mon 16 Sep 2024 19:15:07 +0000
ROA not before:           Mon 16 Sep 2024 19:15:07 +0000
ROA not after:            Sun 15 Dec 2024 20:15:07 +0000
asID:                     1651
IP address blocks:        24.89.48.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 22 Sep 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3c:7a:6b:8b:d9:f1:ce:1c:ca:57:ad:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3
        Validity
            Not Before: Sep 16 19:15:07 2024 GMT
            Not After : Dec 15 20:15:07 2024 GMT
        Subject: CN=40129978-fc45-45dc-a7ad-5acf1f269f84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:52:2f:f1:9c:6e:dd:4a:e9:70:46:3a:e6:75:
                    7b:2f:06:14:4a:00:92:3f:30:88:0b:38:53:e1:cc:
                    f9:1b:eb:80:6f:63:7a:96:d8:4a:b1:bb:5c:32:48:
                    46:67:72:88:bb:dd:f2:a9:0b:03:85:92:03:37:89:
                    96:f3:ab:32:99:b6:3f:39:ec:cf:37:74:d4:63:b2:
                    97:80:f5:ce:64:71:ce:b8:9c:fd:2a:4f:f1:65:dc:
                    aa:7f:46:41:78:21:04:fd:84:9c:ec:7b:cb:a5:f5:
                    ea:64:1d:8a:83:4b:76:5c:89:06:b4:2c:87:94:e1:
                    5b:e7:c3:4b:0e:3e:38:f2:f4:1e:94:29:67:86:60:
                    c4:ac:56:31:1a:fe:4e:55:24:4f:a5:f2:de:75:bf:
                    a9:00:b5:c5:83:ba:08:c3:12:fe:70:67:8d:b4:49:
                    ce:60:e9:de:a5:88:c8:f9:94:2a:5c:77:5b:4b:1e:
                    db:d0:17:4d:7a:5f:46:bd:0e:78:c6:99:63:68:de:
                    df:7b:d4:d4:ae:6b:c7:c6:eb:00:99:22:eb:f8:7a:
                    38:28:2e:5d:21:0d:a7:81:24:0a:a4:2c:46:a0:ab:
                    7c:c1:b6:a5:8a:52:2d:f7:f1:af:ad:70:fa:42:70:
                    8b:04:fb:ac:35:62:a3:b7:23:cf:f0:37:d3:9e:6a:
                    f7:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:E3:44:2C:59:EF:B8:78:A9:44:56:9E:7D:C3:DE:03:DE:2D:1B:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/9e0f79f2-ff7f-329f-9bf0-406f336fe912.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl

            X509v3 Authority Key Identifier:
                keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.89.48.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:20:32:e2:95:bb:41:bb:82:9b:12:d7:d6:da:7a:cd:be:90:
         df:fb:cd:37:6f:28:27:fa:96:50:52:db:6c:a0:33:a0:11:27:
         24:2e:c7:e9:d0:91:4d:41:c0:df:43:06:ad:92:5b:b6:f3:7e:
         df:16:b5:31:90:2a:f2:bd:a8:06:1c:2d:1a:4a:0e:5b:4f:c2:
         9b:4b:d2:5c:64:41:3c:72:77:05:47:ef:4f:ec:54:07:36:b9:
         8f:cf:55:72:d9:48:36:50:8c:12:a0:5f:ba:96:cf:9f:d6:3d:
         20:e2:85:e8:96:6c:73:05:c8:8d:7b:5e:fa:19:86:17:7b:11:
         39:1d:3e:c8:bf:fb:59:d7:d6:50:0b:7e:cd:5b:4e:2f:c8:80:
         c2:16:3f:52:ce:0a:1c:07:28:6a:19:ac:2b:33:89:be:b2:65:
         06:9f:12:79:80:e1:ee:9c:35:f9:bc:bc:e8:13:aa:e3:fa:b1:
         69:05:86:61:d0:fe:79:1a:cb:06:11:fa:ae:83:c6:84:68:57:
         32:34:70:82:f9:96:0f:17:b8:4f:ca:83:4f:2c:0f:a3:90:f0:
         0b:f6:06:e4:7a:0f:15:b5:70:b7:63:d2:09:23:ac:31:7a:2c:
         4a:8a:37:aa:fa:0a:05:2c:32:f8:c8:74:3a:00:9f:27:0c:94:
         73:85:e0:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 20 06:14:29 2024 by rpki-client on console-ams.rpki-client.org