Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/a580cd7f-0b7e-393d-af26-fdef30aeba18.roa
File:                     a580cd7f-0b7e-393d-af26-fdef30aeba18.roa (raw, json)
Hash identifier:          VFB9HA19y9WfbrL3OfU2444DRrlGVkBp48MOnIfsSyc=
Subject key identifier:   18:AE:56:53:B2:4C:91:79:C0:29:C2:36:FA:02:A4:1F:D7:C6:1C:DA
Certificate issuer:       /CN=bca82dd9-eea7-4756-b420-960dfbe436c3
Certificate serial:       010D0C9F432858473C05AD62E6415B504E5435C0
Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/a580cd7f-0b7e-393d-af26-fdef30aeba18.roa
Signing time:             Mon 16 Sep 2024 15:19:53 +0000
ROA not before:           Mon 16 Sep 2024 15:19:53 +0000
ROA not after:            Sun 15 Dec 2024 16:19:53 +0000
asID:                     53508
IP address blocks:        142.79.126.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3c:05:ad:62:e6:41:5b:50:4e:54:35:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3
        Validity
            Not Before: Sep 16 15:19:53 2024 GMT
            Not After : Dec 15 16:19:53 2024 GMT
        Subject: CN=f0e36eab-aa3e-4cef-82d3-d2de339deb9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:c0:82:3e:53:1c:7a:5e:06:69:49:a2:b5:ef:
                    17:84:ea:af:0d:ad:90:e7:8d:b2:1c:eb:5a:e1:b9:
                    a0:94:40:5f:5b:e0:21:0c:26:43:76:89:2d:2e:59:
                    d8:76:a6:c5:66:b6:3e:b4:c6:4d:04:c7:d9:4e:1f:
                    ec:e0:95:af:72:ee:14:2e:61:11:5e:e7:e6:8e:9a:
                    b8:6f:17:04:a8:fd:ba:ec:a3:67:d1:ab:8a:b7:d5:
                    e1:09:e6:08:f5:91:76:c1:7c:fb:3f:c4:75:1e:67:
                    80:0e:b1:8c:aa:49:01:0f:36:ad:d2:97:85:11:d5:
                    76:73:f3:1b:21:64:43:f9:d2:36:37:89:7d:38:8e:
                    62:be:6e:30:31:98:3f:09:a7:30:41:fd:ba:30:15:
                    90:e5:19:95:49:72:28:29:3a:1b:23:ae:1c:b5:f7:
                    21:70:28:19:e6:01:fc:4f:f1:03:88:22:21:3e:7a:
                    ab:2e:53:05:95:44:3c:f5:f1:3b:44:75:6d:e0:01:
                    56:a2:06:93:78:93:54:45:be:44:9f:87:a3:43:f1:
                    00:68:91:dd:82:f9:b1:84:13:95:e8:d2:1a:64:47:
                    d7:0f:83:57:a2:a6:ad:e3:54:e2:83:d4:9a:37:c0:
                    3d:40:4d:19:e0:fd:b1:d1:33:0e:01:92:63:e3:6a:
                    1e:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:AE:56:53:B2:4C:91:79:C0:29:C2:36:FA:02:A4:1F:D7:C6:1C:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/a580cd7f-0b7e-393d-af26-fdef30aeba18.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl

            X509v3 Authority Key Identifier:
                keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.79.126.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:8d:88:30:2e:f7:30:20:bd:93:ac:75:48:5e:32:02:dc:32:
         b3:4a:15:ad:b0:ea:e1:81:8e:a2:fd:1b:80:ce:49:2e:5b:d3:
         ee:11:6d:dc:fb:51:d8:c9:1b:fc:fa:c1:fe:8e:18:18:e3:1a:
         26:60:77:00:17:e3:48:51:5a:f3:30:72:76:33:75:a9:de:79:
         41:e4:f4:15:b9:73:47:26:98:20:a3:69:00:1a:ce:b3:76:1d:
         f9:32:4e:77:27:43:36:13:3a:2b:be:77:b1:25:e5:de:97:e9:
         9a:20:5f:53:8a:79:36:93:80:7b:77:58:31:ce:e1:0f:06:8a:
         95:29:f7:d9:5f:28:80:42:ef:b4:d6:25:7e:79:63:bd:2a:6c:
         e1:9f:32:36:f8:7f:9c:91:f4:85:08:bc:53:2b:18:87:af:18:
         7e:a9:db:38:ac:94:ab:ac:db:95:12:d1:3e:ef:18:40:60:11:
         9e:bf:b6:ce:f3:df:1b:e4:84:46:04:7a:0f:f2:c5:c3:7f:60:
         8d:7d:0d:93:21:b4:f1:9e:35:f6:e4:e6:4c:63:b7:22:61:d1:
         1d:66:c3:2d:70:23:12:6f:76:e7:39:b0:81:92:8f:51:e6:17:
         0c:63:d6:c4:e9:7a:1c:df:db:a1:4d:8d:7f:75:2b:f2:03:46:
         aa:04:04:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:37:24 2024 by rpki-client on console-ams.rpki-client.org