Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/a22ff12a-0371-3319-88d2-f5e344b13f6c.roa
File:                     a22ff12a-0371-3319-88d2-f5e344b13f6c.roa (raw, json)
Hash identifier:          tM/gxy8HduexrHqN6GAW8c7tq5yrrwmDQfS3bo85A8s=
Subject key identifier:   16:47:46:AD:91:AE:76:5E:09:C0:A4:00:50:C9:5D:A9:38:CB:0C:D5
Certificate issuer:       /CN=bca82dd9-eea7-4756-b420-960dfbe436c3
Certificate serial:       010D0C9F432858473C622C2E01715ABF08DD22C0
Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/a22ff12a-0371-3319-88d2-f5e344b13f6c.roa
Signing time:             Mon 16 Sep 2024 18:26:15 +0000
ROA not before:           Mon 16 Sep 2024 18:26:15 +0000
ROA not after:            Sun 15 Dec 2024 19:26:15 +0000
asID:                     53508
IP address blocks:        206.255.251.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3c:62:2c:2e:01:71:5a:bf:08:dd:22:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3
        Validity
            Not Before: Sep 16 18:26:15 2024 GMT
            Not After : Dec 15 19:26:15 2024 GMT
        Subject: CN=150bb5ee-1af0-4370-8531-397af45b1e5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:65:b6:21:32:87:9d:53:c8:71:f4:89:b0:14:
                    da:b8:d9:90:37:3c:9b:d1:66:43:ce:7a:b4:ef:cb:
                    84:60:65:8a:9f:8c:be:f6:5f:8d:6c:c7:0d:12:2d:
                    85:db:0f:d3:18:68:04:f9:da:94:3a:5c:65:3f:a9:
                    3f:12:63:51:08:d7:af:58:ad:ef:be:ed:60:aa:bd:
                    a5:25:34:c1:01:d3:d3:3d:a4:19:6f:86:78:c3:9d:
                    80:a3:ea:d8:30:ca:65:ef:af:cf:dd:e8:c0:41:48:
                    8c:f2:cd:dc:f1:b2:a6:66:aa:3e:81:e6:1d:01:0d:
                    81:c1:7b:01:54:54:10:eb:e2:d7:d3:75:56:8f:fa:
                    50:10:b7:ec:af:7e:4e:57:3c:1a:13:99:0a:9c:81:
                    18:d0:8e:06:35:6b:34:49:cb:c8:f5:e3:69:ad:79:
                    6a:ab:07:d8:52:6a:b7:44:47:fa:55:4d:9d:93:21:
                    4b:d6:bb:04:59:d1:32:ce:f9:ce:3a:42:5a:ed:1c:
                    5a:cc:14:18:f1:d1:c5:2e:69:33:da:42:6b:84:81:
                    e5:92:51:c0:8d:c7:18:c7:e4:7e:65:08:e0:2c:ca:
                    3e:be:96:3e:8a:04:c3:bc:a9:36:02:84:43:4b:2a:
                    96:ba:cf:3e:6b:52:f0:f7:6b:61:32:0d:87:ba:bb:
                    d4:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:47:46:AD:91:AE:76:5E:09:C0:A4:00:50:C9:5D:A9:38:CB:0C:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/a22ff12a-0371-3319-88d2-f5e344b13f6c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl

            X509v3 Authority Key Identifier:
                keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.255.251.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:2a:7e:15:c1:ce:07:84:96:5b:4f:a0:88:6f:20:a5:92:6b:
         29:e7:39:9a:38:ba:bd:19:0e:e8:15:8a:05:5d:d1:12:c6:98:
         27:05:73:0f:0a:3e:0c:a4:07:e1:62:6b:f7:6e:29:45:45:f8:
         7f:27:65:e8:0a:15:b4:9f:d8:48:51:6e:f1:0f:91:c0:90:08:
         b2:57:ff:60:5f:ad:57:27:b3:fb:af:3a:76:1e:89:f2:49:63:
         df:3b:c6:84:30:4a:4d:4c:b3:08:d7:3b:d4:fc:6c:71:e6:e3:
         58:6b:5a:00:37:87:8c:ac:b6:e5:be:8e:fe:73:59:22:ff:30:
         7c:29:70:95:54:b7:dc:9a:89:fc:55:0b:ea:54:89:9b:98:39:
         ef:b0:fc:72:f8:69:6c:4f:ea:92:60:84:ff:30:f3:06:6c:83:
         5e:c0:30:ae:23:50:bc:00:a9:64:79:43:bc:9b:af:42:72:82:
         c7:2a:fe:f6:9a:4a:4a:9b:e1:a1:6a:71:18:7c:13:cb:75:63:
         0a:f1:9d:12:6b:bf:d3:24:1d:28:78:74:46:6e:c8:58:3b:f1:
         ff:9f:95:be:20:89:7d:b0:ea:17:8b:0d:57:4a:3d:23:45:8b:
         c9:79:57:b2:cd:52:57:5c:82:5c:cc:ad:da:7b:e7:71:e4:dc:
         ba:39:cd:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:37:27 2024 by rpki-client on console-fra.rpki-client.org