Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/c0025222-3a7a-3299-b9e6-86ddb22829a5.roa
File:                     c0025222-3a7a-3299-b9e6-86ddb22829a5.roa (raw, json)
Hash identifier:          14SfVOJgbde0t1cyzwoXWlFHg6Rgfitu/SmfwMHc6Fg=
Subject key identifier:   F1:E2:94:35:3B:E0:D4:A3:AC:BC:63:89:0B:EB:87:64:81:0E:FD:D6
Certificate issuer:       /CN=bca82dd9-eea7-4756-b420-960dfbe436c3
Certificate serial:       010D0C9F432858473437BA74A3BA282604EBE500
Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/c0025222-3a7a-3299-b9e6-86ddb22829a5.roa
Signing time:             Fri 13 Sep 2024 20:14:16 +0000
ROA not before:           Fri 13 Sep 2024 20:14:16 +0000
ROA not after:            Thu 12 Dec 2024 21:14:16 +0000
asID:                     53508
IP address blocks:        206.255.112.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:34:37:ba:74:a3:ba:28:26:04:eb:e5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3
        Validity
            Not Before: Sep 13 20:14:16 2024 GMT
            Not After : Dec 12 21:14:16 2024 GMT
        Subject: CN=aa44c915-93ac-4677-8b23-c38baf64b684
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:f4:a3:19:cf:0b:0a:67:a6:a3:09:ba:20:80:
                    ac:f4:c4:ab:00:40:b9:40:76:0e:c3:6b:0a:eb:18:
                    60:e0:d8:5a:b4:97:58:7d:9f:d3:6f:7d:ce:62:27:
                    5c:24:a5:d2:6e:94:de:55:64:55:c4:a3:3c:86:a4:
                    34:54:cd:5a:88:40:99:8b:06:c5:ae:34:94:d3:78:
                    cc:96:00:cc:33:69:32:7a:51:e0:27:80:20:96:cf:
                    f7:7e:eb:79:b9:a4:0a:c2:12:2a:9e:7d:3a:01:83:
                    3c:15:6b:3d:0e:fb:75:c7:64:2e:73:f3:5f:90:9b:
                    a8:bc:a5:c9:e3:c1:5b:82:b8:fd:4b:01:9b:ad:59:
                    ea:56:83:e5:c1:21:62:4f:d7:fb:73:e2:f3:7e:11:
                    75:0d:84:84:b1:bb:74:90:8f:39:68:da:fa:6d:b2:
                    5f:31:7f:e7:f6:01:0b:3a:bd:ee:c2:80:fe:9b:f3:
                    c0:bf:cb:25:e8:57:6e:09:e7:50:07:12:16:ce:51:
                    ce:e5:f7:23:b2:a3:44:d4:07:9d:b2:3c:c3:60:34:
                    3a:6a:d4:f9:80:3e:fb:4d:6c:f1:f6:40:fc:7e:d8:
                    8e:6a:c7:40:f1:45:ed:c1:c5:fc:a8:e6:3f:58:13:
                    fe:dc:5b:28:11:1d:a0:4e:d5:7f:a4:d1:26:fc:e5:
                    73:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:E2:94:35:3B:E0:D4:A3:AC:BC:63:89:0B:EB:87:64:81:0E:FD:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/c0025222-3a7a-3299-b9e6-86ddb22829a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl

            X509v3 Authority Key Identifier:
                keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.255.112.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:8e:07:be:93:ac:cd:98:09:7e:1a:8b:4e:4f:3a:8a:05:de:
         f8:0f:e2:f8:a1:f2:38:50:9b:47:61:75:b9:be:ad:b4:88:ca:
         ad:17:12:a3:12:7d:09:da:1a:b1:11:2c:63:ee:53:cf:85:94:
         8b:85:0f:d4:96:dd:88:5c:56:e2:48:88:1f:ac:bf:46:f7:2e:
         af:5d:9a:f0:42:ce:5b:d6:03:25:93:f7:62:23:79:ee:88:21:
         71:a2:b4:de:4e:27:2b:db:77:1b:c6:eb:af:e7:b9:c1:b3:60:
         f6:ee:55:d0:5d:9f:7a:5b:dd:46:60:8e:bd:08:78:04:15:d0:
         f0:79:68:6b:d3:36:ff:17:ed:69:d1:ed:36:b7:d2:46:c8:3c:
         15:48:86:73:9f:ad:54:57:bb:63:94:40:c3:46:b3:12:39:8b:
         5f:45:5e:84:e7:bc:2e:33:07:ca:00:12:c9:66:0b:c7:5e:a9:
         0b:f5:2b:61:1c:f9:51:c6:4c:f6:b6:ac:7e:0e:23:a3:45:66:
         18:8b:1c:4b:74:d4:db:a4:55:8d:dd:66:f2:1c:f1:e7:05:6f:
         17:ea:cc:1d:5d:f8:38:c2:e9:4c:01:7f:c6:86:18:32:51:35:
         d5:2e:d4:15:98:9e:83:f9:80:1a:8c:fb:bf:91:ce:68:fa:25:
         ea:fb:01:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 03:15:58 2024 by rpki-client on console-ams.rpki-client.org