Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/b6c5154d-44b0-356c-bd4c-ed4cbf555273.roa
File:                     b6c5154d-44b0-356c-bd4c-ed4cbf555273.roa (raw, json)
Hash identifier:          T/cOy8fbOHajOEebDJIjkswXUEn4LhFIzNVoShnEcws=
Subject key identifier:   09:6A:C2:CD:BE:53:49:A5:5B:1E:A2:CD:3A:7B:B8:CE:DB:18:E7:97
Certificate issuer:       /CN=bca82dd9-eea7-4756-b420-960dfbe436c3
Certificate serial:       010D0C9F432858473C61A4BA7DDBA205E09EAAE0
Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/b6c5154d-44b0-356c-bd4c-ed4cbf555273.roa
Signing time:             Mon 16 Sep 2024 18:25:11 +0000
ROA not before:           Mon 16 Sep 2024 18:25:11 +0000
ROA not after:            Sun 15 Dec 2024 19:25:11 +0000
asID:                     53508
IP address blocks:        206.255.232.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3c:61:a4:ba:7d:db:a2:05:e0:9e:aa:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3
        Validity
            Not Before: Sep 16 18:25:11 2024 GMT
            Not After : Dec 15 19:25:11 2024 GMT
        Subject: CN=571f5232-7b51-466e-a024-8dcd9fe25563
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:0b:ed:db:d5:ac:48:42:a9:56:ed:74:7b:1b:
                    01:de:7f:8b:0e:68:97:d9:a9:01:4f:e2:16:75:ca:
                    4c:85:d4:7d:b1:c0:74:5f:76:93:36:26:e0:6b:c2:
                    86:83:53:0a:f0:70:83:4b:77:04:95:f3:6d:99:cb:
                    ab:69:65:27:22:1a:47:0a:42:2a:1a:c7:7d:bd:ac:
                    d0:83:c2:fb:b8:14:54:e5:36:de:44:c7:4d:c5:e2:
                    98:c2:80:9e:09:59:e7:1e:dc:07:c2:32:3b:76:0f:
                    54:45:ff:fc:21:74:6f:e8:c3:28:95:4c:6b:74:d4:
                    dc:87:dc:ca:95:6d:97:0a:a2:17:b7:3b:84:57:03:
                    de:2f:27:7d:8c:7d:b0:61:b0:0e:19:82:57:32:82:
                    6b:f9:88:9e:5d:73:4e:50:12:5f:55:61:f6:2e:d1:
                    a1:27:a4:bb:6c:6f:fa:40:31:d2:85:41:6c:df:f7:
                    e1:d0:90:dd:de:cf:09:4b:93:5a:97:27:b0:44:1f:
                    57:61:67:2f:f3:85:12:d6:0a:4e:70:6e:70:6e:06:
                    f7:46:bc:88:94:88:5a:e5:e4:d9:5b:20:e0:8c:ed:
                    49:61:74:69:1e:d1:c3:e8:af:f2:8c:58:e9:3a:b7:
                    41:3a:4b:50:55:30:48:9a:79:12:7e:ec:1a:c8:3b:
                    2c:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:6A:C2:CD:BE:53:49:A5:5B:1E:A2:CD:3A:7B:B8:CE:DB:18:E7:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/b6c5154d-44b0-356c-bd4c-ed4cbf555273.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl

            X509v3 Authority Key Identifier:
                keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.255.232.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:45:a4:1b:d5:a3:a1:8a:0f:c3:66:5d:31:65:6d:d6:cf:72:
         cc:58:18:24:31:af:36:4f:47:1f:fa:d0:7f:77:71:8f:e8:7b:
         ef:da:55:6e:bb:70:99:28:17:60:d3:93:6e:c7:3f:3d:c1:72:
         90:66:53:2a:58:d6:dc:5a:16:92:a4:19:38:0b:58:c6:c1:c7:
         35:3b:3f:de:f3:4c:75:2e:e6:c4:81:78:9c:38:48:ac:79:95:
         8c:84:3c:47:99:04:a6:56:15:29:9b:02:8f:21:99:3a:83:6c:
         21:4a:4e:c2:c2:dc:65:fe:c3:45:6a:cf:ef:52:bf:72:01:4c:
         46:3b:c6:26:ee:c9:2e:97:b5:77:0a:6f:87:a1:c6:b9:b5:8f:
         a9:41:c5:17:4f:f3:da:00:1d:7f:19:9a:c7:eb:2d:23:64:b0:
         44:92:77:7b:63:97:8a:d0:36:a8:61:58:e3:b0:1c:33:26:0c:
         6d:4a:4d:d9:e3:b9:4c:ee:46:94:47:d3:7a:0b:73:19:ed:2e:
         22:68:f7:e6:46:66:38:cc:c5:b8:a1:af:23:c4:11:34:74:c5:
         18:3c:88:27:68:ee:5d:7c:b7:fe:09:d9:7f:ba:f2:53:a9:7c:
         60:9e:a2:a1:e4:b3:8e:b8:51:0a:79:53:ee:53:91:39:d9:52:
         34:ee:73:0e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEc8YaS6fduiBeCequAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYmNhODJkZDktZWVhNy00NzU2LWI0MjAtOTYwZGZiZTQz
NmMzMB4XDTI0MDkxNjE4MjUxMVoXDTI0MTIxNTE5MjUxMVowLzEtMCsGA1UEAxMk
NTcxZjUyMzItN2I1MS00NjZlLWEwMjQtOGRjZDlmZTI1NTYzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAswvt29WsSEKpVu10exsB3n+LDmiX2akBT+IW
dcpMhdR9scB0X3aTNibga8KGg1MK8HCDS3cElfNtmcuraWUnIhpHCkIqGsd9vazQ
g8L7uBRU5TbeRMdNxeKYwoCeCVnnHtwHwjI7dg9URf/8IXRv6MMolUxrdNTch9zK
lW2XCqIXtzuEVwPeLyd9jH2wYbAOGYJXMoJr+YieXXNOUBJfVWH2LtGhJ6S7bG/6
QDHShUFs3/fh0JDd3s8JS5NalyewRB9XYWcv84US1gpOcG5wbgb3RryIlIha5eTZ
WyDgjO1JYXRpHtHD6K/yjFjpOrdBOktQVTBImnkSfuwayDsslwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAlqws2+U0mlWx6izTp7uM7bGOeXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4
MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBkZmJlNDM2YzMvYjZjNTE1NGQtNDRiMC0z
NTZjLWJkNGMtZWQ0Y2JmNTU1MjczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYmNhODJkZDktZWVhNy00NzU2LWI0
MjAtOTYwZGZiZTQzNmMzL2JjYTgyZGQ5LWVlYTctNDc1Ni1iNDIwLTk2MGRmYmU0
MzZjMy5jcmwwHwYDVR0jBBgwFoAUyrimHnY0wTCAiarYWGHqOLodQPQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBk
ZmJlNDM2YzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzv/oMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJxFpBvVo6GKD8NmXTFlbdbPcsxYGCQxrzZPRx/60H93cY/oe+/aVW67
cJkoF2DTk27HPz3BcpBmUypY1txaFpKkGTgLWMbBxzU7P97zTHUu5sSBeJw4SKx5
lYyEPEeZBKZWFSmbAo8hmTqDbCFKTsLC3GX+w0Vqz+9Sv3IBTEY7xibuyS6XtXcK
b4ehxrm1j6lBxRdP89oAHX8ZmsfrLSNksESSd3tjl4rQNqhhWOOwHDMmDG1KTdnj
uUzuRpRH03oLcxntLiJo9+ZGZjjMxbihryPEETR0xRg8iCdo7l18t/4J2X+68lOp
fGCeoqHks464UQp5U+5TkTnZUjTucw4=
-----END CERTIFICATE-----
Generated at Sun Nov 24 21:00:25 2024 by rpki-client on console-fra.rpki-client.org