Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/d90de460-0499-33b8-aecd-22d18def726e.roa
File:                     d90de460-0499-33b8-aecd-22d18def726e.roa (raw, json)
Hash identifier:          bv2fV5HPoLYOqvtqgVl0z5/HtgQHKXfqQJHGJSRqprE=
Subject key identifier:   F0:48:81:AE:3F:7D:7F:20:76:D7:2D:EF:E8:80:D7:C0:64:74:2C:FF
Certificate issuer:       /CN=bca82dd9-eea7-4756-b420-960dfbe436c3
Certificate serial:       010D0C9F432858473C7AFDEAF466DD7E9765AF00
Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/d90de460-0499-33b8-aecd-22d18def726e.roa
Signing time:             Mon 16 Sep 2024 19:16:16 +0000
ROA not before:           Mon 16 Sep 2024 19:16:16 +0000
ROA not after:            Sun 15 Dec 2024 20:16:16 +0000
asID:                     1651
IP address blocks:        24.244.109.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3c:7a:fd:ea:f4:66:dd:7e:97:65:af:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3
        Validity
            Not Before: Sep 16 19:16:16 2024 GMT
            Not After : Dec 15 20:16:16 2024 GMT
        Subject: CN=03c06d00-09e7-4a0d-9e51-68efd6423815
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:4f:7e:87:b9:2b:a4:ca:d1:07:13:c1:5b:41:
                    81:25:56:44:fa:61:ab:ba:3a:5f:17:ff:66:f0:62:
                    54:2d:e6:2e:4d:3d:45:3b:87:fb:b9:f6:77:db:75:
                    9e:3f:53:47:38:99:fd:48:8d:d6:32:8c:39:30:dd:
                    6b:8b:fd:41:6d:c1:02:dd:73:71:37:7c:7f:2f:b9:
                    ee:71:32:89:eb:d0:b3:19:86:8f:60:6b:dd:13:ce:
                    6e:a4:21:78:70:1e:87:6f:e5:02:2b:57:ad:8e:84:
                    52:5b:3d:dc:8c:6e:19:aa:c1:15:1d:d5:cd:09:b9:
                    55:59:7a:d6:25:12:2e:4c:7d:11:ed:44:d0:69:7a:
                    f8:80:d0:47:15:97:1a:33:e7:5b:0d:5b:a8:da:9b:
                    c2:35:30:57:cd:7e:1a:4c:09:57:c9:e6:fe:17:dc:
                    a0:a8:d7:a2:f8:de:01:f2:76:fa:56:cc:2b:f9:26:
                    5e:4b:ae:c7:c0:60:81:79:6b:f8:c8:c8:30:06:d1:
                    a0:c1:a2:8e:0a:51:74:a0:81:c1:cc:cd:1f:59:a1:
                    2f:01:24:b1:4e:53:7d:35:29:74:05:0a:52:03:d6:
                    bb:53:26:28:d0:5a:e9:68:a1:b4:34:fb:78:45:c2:
                    48:29:a2:10:c8:b7:90:cf:26:a7:88:bd:fe:e3:36:
                    09:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:48:81:AE:3F:7D:7F:20:76:D7:2D:EF:E8:80:D7:C0:64:74:2C:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/d90de460-0499-33b8-aecd-22d18def726e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl

            X509v3 Authority Key Identifier:
                keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.244.109.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:e2:94:fb:2a:63:57:ab:5e:e9:71:d6:a3:3a:c3:94:cd:b6:
         82:f0:a7:b8:68:7d:a4:73:82:aa:08:2b:e8:61:31:65:99:f3:
         54:8a:62:55:a6:16:45:e1:2f:81:a6:68:df:c2:59:69:8b:d0:
         76:94:a4:33:66:e1:b1:ec:e8:30:63:14:46:c0:47:28:a1:92:
         c6:5e:97:20:bd:62:68:b1:4c:23:1e:06:39:95:56:18:a7:2b:
         0e:eb:9a:a9:cb:34:64:8f:bf:cf:e2:1d:ed:39:55:87:1d:ca:
         1a:50:22:81:a7:cd:da:4c:17:6c:cd:8c:f9:aa:3a:af:e6:2e:
         27:84:b2:06:47:1a:d4:21:ff:7f:82:35:6f:28:da:e5:a4:81:
         fa:eb:56:f8:0e:6e:3c:aa:e8:ba:79:c9:91:e8:22:38:90:99:
         20:63:dd:c3:a0:70:e9:39:cc:7f:72:13:f7:54:c4:20:d1:c0:
         e5:a0:08:ca:6a:4a:e1:60:af:af:ac:57:0a:cc:6a:c6:14:83:
         10:25:b3:bf:0c:80:11:14:06:58:29:e5:47:60:68:5a:96:b1:
         51:df:77:22:1c:52:34:3f:c3:1d:87:9a:5f:45:52:db:3e:5d:
         b9:06:57:54:cf:cb:69:a6:2f:bf:e7:4c:de:21:38:da:b7:d4:
         1b:63:ee:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 21:48:16 2024 by rpki-client on console-ams.rpki-client.org