Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bed1dd50-d36b-3af3-ade0-a9f8d474bcb0.roa
File:                     bed1dd50-d36b-3af3-ade0-a9f8d474bcb0.roa (raw, json)
Hash identifier:          Tz2Snlcp6AdFYGgrf0isRQn3E5ecFu9baP6NWrpgvS0=
Subject key identifier:   F5:E8:DB:3F:76:BF:5A:2E:B0:E3:FA:D9:0A:DB:99:28:C0:BB:1F:E8
Certificate issuer:       /CN=bca82dd9-eea7-4756-b420-960dfbe436c3
Certificate serial:       010D0C9F432858473C5F770E05150BC1A9666380
Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bed1dd50-d36b-3af3-ade0-a9f8d474bcb0.roa
Signing time:             Mon 16 Sep 2024 18:20:48 +0000
ROA not before:           Mon 16 Sep 2024 18:20:48 +0000
ROA not after:            Sun 15 Dec 2024 19:20:48 +0000
asID:                     53508
IP address blocks:        142.79.120.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3c:5f:77:0e:05:15:0b:c1:a9:66:63:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3
        Validity
            Not Before: Sep 16 18:20:48 2024 GMT
            Not After : Dec 15 19:20:48 2024 GMT
        Subject: CN=faf8f24a-4d2f-4f1c-b6e8-9807ca76cab2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:3f:05:15:68:dd:6b:98:9f:4d:cb:86:c8:cb:
                    39:f6:60:be:dc:ac:ca:79:f4:98:8c:ed:6e:25:9f:
                    51:ba:5a:82:61:7b:6e:03:3b:ed:3b:88:b2:f7:0d:
                    a8:46:8e:3e:c0:17:7f:ef:33:d8:99:69:2a:47:21:
                    be:ea:8a:84:f7:88:4a:a7:8e:4e:e6:4c:79:19:59:
                    46:5e:ef:03:f6:85:22:0b:0f:d0:c6:50:9a:43:a8:
                    95:2a:20:d4:30:40:e3:7c:df:b3:b0:62:08:52:0a:
                    bf:e5:1b:6f:31:d1:d5:47:1d:e0:2c:45:e8:73:ca:
                    ef:e2:e5:00:9c:cd:b4:79:4a:0f:99:27:dc:ee:57:
                    f2:f3:76:26:59:da:8f:8e:01:ac:65:4d:2b:01:23:
                    9e:7c:84:7c:66:88:03:fe:0b:f6:3e:78:0f:26:e9:
                    b8:9a:39:e8:3f:83:0d:97:7c:67:68:6e:e4:2f:68:
                    96:ec:b8:a1:41:0e:5e:92:46:82:ed:13:44:7d:50:
                    14:34:65:2a:5b:39:c9:5e:24:1f:4a:6f:0e:0a:61:
                    83:10:1a:f6:6f:5d:44:72:40:21:65:67:55:91:05:
                    09:24:b5:28:46:ba:75:93:c6:00:6c:a1:6a:9c:ea:
                    b2:2a:70:57:e8:3f:95:f0:e2:b5:5f:63:6d:9d:e3:
                    1e:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:E8:DB:3F:76:BF:5A:2E:B0:E3:FA:D9:0A:DB:99:28:C0:BB:1F:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bed1dd50-d36b-3af3-ade0-a9f8d474bcb0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl

            X509v3 Authority Key Identifier:
                keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.79.120.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:ec:cd:18:fa:22:39:69:a8:43:08:e3:0b:f4:fc:c2:08:91:
         79:ca:8e:60:4b:98:90:d6:01:53:8f:ea:b9:77:a4:2f:bf:ee:
         06:bf:62:e8:cc:0b:cb:a3:e1:52:6e:c6:bc:35:cb:81:b0:c7:
         a9:90:5d:ae:be:78:ea:f5:ca:6d:92:a3:df:aa:50:c2:a6:8d:
         b5:5b:29:64:d0:3a:2f:be:33:08:64:14:c8:95:9a:78:d1:58:
         78:4e:f4:66:68:c8:c7:e7:88:64:2f:c0:7b:a2:dd:85:51:c6:
         b6:3d:ee:5f:e1:c2:b5:77:e2:4c:73:fe:b8:b6:25:5b:b9:de:
         45:f5:6d:52:6b:51:a3:29:ba:58:46:aa:2f:57:45:6f:e5:8e:
         51:8b:65:ca:20:6d:d8:bd:d4:8f:55:de:a0:4e:45:33:89:4a:
         68:ba:e1:e0:c4:13:95:03:7d:6c:4d:bf:8b:ac:3a:65:59:03:
         b3:5c:8c:c9:b5:a6:a1:64:2c:2a:8e:5f:fa:8c:fa:ed:00:a6:
         47:89:d3:15:9f:0e:63:ee:59:ad:6d:ed:0b:48:e0:b3:08:36:
         7c:6b:28:70:91:bc:56:f5:02:28:da:5a:0e:88:b4:08:c6:f6:
         6a:f7:e0:37:6a:74:20:f4:73:56:ff:f9:e9:ec:00:61:5b:57:
         0a:77:57:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 21:48:16 2024 by rpki-client on console-ams.rpki-client.org