Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/b4e7f5cf-daa4-3c6d-925c-2c89820f6668.roa
File:                     b4e7f5cf-daa4-3c6d-925c-2c89820f6668.roa (raw, json)
Hash identifier:          cXP5mxNqpdYQ7f+07sbE9rcafzlylyts2i+jdFlN4pM=
Subject key identifier:   3C:E3:99:21:EA:38:4F:AB:10:E1:E4:D6:62:27:E1:74:E1:27:87:F0
Certificate issuer:       /CN=bca82dd9-eea7-4756-b420-960dfbe436c3
Certificate serial:       010D0C9F432858473C018BD838B65B14A5A22000
Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/b4e7f5cf-daa4-3c6d-925c-2c89820f6668.roa
Signing time:             Mon 16 Sep 2024 15:11:34 +0000
ROA not before:           Mon 16 Sep 2024 15:11:34 +0000
ROA not after:            Sun 15 Dec 2024 16:11:34 +0000
asID:                     53508
IP address blocks:        24.89.40.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 22 Sep 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3c:01:8b:d8:38:b6:5b:14:a5:a2:20:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3
        Validity
            Not Before: Sep 16 15:11:34 2024 GMT
            Not After : Dec 15 16:11:34 2024 GMT
        Subject: CN=5d5141c1-f292-4e9b-a83e-4b5fa2873010
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:8a:88:40:69:7d:23:9d:91:8b:c8:ec:9e:86:
                    55:f4:c8:8d:eb:28:cd:5e:2e:9c:3e:cf:e9:04:d2:
                    7d:4c:fa:1c:1e:de:6d:20:d5:fc:50:64:f8:0f:38:
                    d7:46:40:be:fa:97:f1:0c:2c:b3:43:19:62:d2:25:
                    79:a7:b0:ed:94:5e:fe:0b:a2:d9:56:72:6f:c6:de:
                    2f:77:7c:c4:70:4f:7d:69:76:36:23:dd:fd:c4:10:
                    0f:32:5b:c4:b2:bd:dd:8e:f4:6d:44:e5:b2:e5:e1:
                    f9:76:a0:af:a0:3b:08:90:c2:21:05:2f:55:63:5b:
                    80:32:36:ab:31:da:cb:6e:c9:e7:69:c5:09:0c:b8:
                    9d:a0:9a:2b:a1:0d:55:88:41:f6:66:d8:04:db:71:
                    c8:3f:16:dd:d2:52:9c:25:db:65:30:30:9e:76:44:
                    e8:1b:ba:ba:1c:9c:ec:47:79:1a:49:d5:31:89:f2:
                    63:7f:8c:eb:d2:fb:12:de:ad:ea:66:5d:f5:93:5e:
                    00:79:de:41:03:2d:f6:a1:93:9b:fe:0b:66:1f:b2:
                    58:1c:93:c3:3c:ee:44:a8:9d:01:fe:ee:ce:3b:68:
                    2b:1a:14:ec:d5:aa:27:85:f5:4e:a4:42:a2:b0:04:
                    cc:43:7f:2e:db:a6:db:ac:18:b5:9b:69:5f:b3:d8:
                    ea:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:E3:99:21:EA:38:4F:AB:10:E1:E4:D6:62:27:E1:74:E1:27:87:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/b4e7f5cf-daa4-3c6d-925c-2c89820f6668.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl

            X509v3 Authority Key Identifier:
                keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.89.40.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:53:55:66:d7:a6:e5:fd:f1:9f:8f:6f:e0:3d:10:2b:f9:71:
         60:9e:f0:0d:b2:61:c5:41:49:49:68:01:7a:45:8d:85:f2:19:
         1c:46:60:57:62:58:da:43:3f:5b:5c:ec:d2:b0:f2:40:75:36:
         31:ca:a3:b9:2e:59:bb:24:f7:3e:0b:34:de:a3:53:32:50:30:
         28:07:b5:d5:16:be:eb:f2:67:0e:df:23:9b:46:d4:14:75:be:
         2b:48:83:b9:ff:e1:39:0d:10:89:45:db:4f:61:d0:f7:95:23:
         4c:76:d2:e2:1d:8c:cf:b7:72:a1:cc:ef:6c:33:b9:8b:90:97:
         49:ba:25:75:34:35:f6:28:ed:0c:bd:3a:23:e7:b0:d6:55:43:
         b1:02:f0:d8:ee:11:43:c2:0b:d5:df:88:47:13:fc:bf:04:c6:
         b1:29:b7:04:58:33:bc:01:0b:cc:cd:90:bb:dd:e2:2e:a7:57:
         dd:e0:3d:33:53:63:c8:d3:d3:be:01:14:8d:36:8d:32:43:4b:
         76:0e:51:19:02:cc:09:e9:11:e0:72:6f:6f:9d:b6:7d:0f:5d:
         5f:e2:31:1f:30:33:ee:63:8d:40:2c:07:c1:8f:c6:47:ac:bc:
         2a:5d:e9:e8:3b:d9:df:6c:4a:31:21:51:06:50:25:f1:07:7b:
         c6:11:d1:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 20 05:59:12 2024 by rpki-client on console-fra.rpki-client.org