Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/e3017d68-56f8-3650-bbac-2453ed2c4df7.roa
File:                     e3017d68-56f8-3650-bbac-2453ed2c4df7.roa (raw, json)
Hash identifier:          aFlwlNRCR/FPe6PQ+8iSyJn9g8/D7z5r43gEaEefmJQ=
Subject key identifier:   E0:20:74:0E:12:E5:5A:63:DD:22:46:EE:41:A8:7C:40:E1:D6:8A:84
Certificate issuer:       /CN=bca82dd9-eea7-4756-b420-960dfbe436c3
Certificate serial:       010D0C9F432858473C6C1EFAA119649116A1BB40
Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/e3017d68-56f8-3650-bbac-2453ed2c4df7.roa
Signing time:             Mon 16 Sep 2024 18:46:18 +0000
ROA not before:           Mon 16 Sep 2024 18:46:18 +0000
ROA not after:            Sun 15 Dec 2024 19:46:18 +0000
asID:                     53508
IP address blocks:        206.255.255.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 22 Sep 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3c:6c:1e:fa:a1:19:64:91:16:a1:bb:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3
        Validity
            Not Before: Sep 16 18:46:18 2024 GMT
            Not After : Dec 15 19:46:18 2024 GMT
        Subject: CN=2b0e0237-776a-447e-8cf8-daac69e0f3ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:d4:74:91:45:ff:24:8c:a5:8e:54:8b:54:85:
                    f7:cd:c6:e2:f8:2a:73:c4:4c:46:ee:73:c1:17:57:
                    42:a6:d9:e0:7d:42:4b:43:b7:56:e9:e8:c3:cb:28:
                    e8:8f:76:92:41:77:ad:5f:0d:83:97:a6:2c:10:02:
                    4b:2d:bd:be:1a:26:34:a9:be:42:61:cd:85:d6:1a:
                    be:2b:ba:d6:a2:53:f5:1b:1a:d0:c7:8d:c2:3c:2e:
                    f3:26:fb:19:97:bb:fc:ee:55:69:3e:de:c1:41:17:
                    12:27:dc:8b:fc:b1:25:cf:ce:54:6f:24:27:be:76:
                    05:53:80:13:2c:a8:2a:ff:66:91:e7:a0:c6:7a:fe:
                    89:4e:0e:16:7e:0c:35:3c:4f:16:07:35:5f:21:4f:
                    27:b5:c8:91:92:f9:0e:1f:6d:f9:58:ae:6f:37:74:
                    e1:40:ad:75:6d:43:52:cf:8c:12:e6:57:10:74:d3:
                    33:4d:03:7f:86:52:fb:81:e3:04:c7:37:db:1c:3a:
                    58:73:18:3f:33:2c:17:9a:76:3d:11:ad:db:0d:0e:
                    06:26:f0:d4:dc:2c:5e:68:ab:1b:97:25:d2:d9:cd:
                    44:e9:54:7b:90:5f:6f:4d:d8:6a:ae:8a:42:18:bb:
                    51:2f:c9:6b:79:b3:1e:76:31:78:c2:65:3f:31:38:
                    75:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:20:74:0E:12:E5:5A:63:DD:22:46:EE:41:A8:7C:40:E1:D6:8A:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/e3017d68-56f8-3650-bbac-2453ed2c4df7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl

            X509v3 Authority Key Identifier:
                keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.255.255.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:03:30:d9:44:8b:a1:80:1f:c9:d3:09:9c:b0:76:19:60:ab:
         44:65:a7:62:d9:b2:43:3e:7a:b8:05:42:55:9e:d1:04:a5:8e:
         9c:1e:4f:0b:6b:48:43:c9:68:e6:45:b3:ad:42:1b:bf:bb:aa:
         1b:34:3b:d6:44:13:b6:0f:64:69:42:3c:08:05:f5:64:24:1e:
         7c:48:73:65:91:9e:43:d7:18:c6:a6:b4:35:6a:72:aa:3b:3e:
         32:63:86:2d:8a:98:0e:18:b8:6b:a5:8c:8d:35:2b:94:09:c2:
         66:92:6a:72:46:0a:96:56:b9:34:60:a0:0d:4f:2e:89:d8:a6:
         5a:2e:86:07:6a:ba:b9:23:d4:d6:35:a1:d5:2a:de:02:77:f8:
         79:36:53:3e:b5:dc:57:7e:49:b7:56:ad:76:6c:bb:f9:50:03:
         4a:fb:d0:93:22:08:2e:78:cd:72:e3:01:fa:39:8c:95:ac:23:
         fd:fb:43:e6:b8:3a:2f:53:03:14:36:06:82:37:4b:5e:d5:a8:
         01:9a:4b:59:40:9e:7b:d9:a8:73:3e:82:a2:4a:f6:17:08:e7:
         73:38:c9:56:61:ac:27:4b:e4:1a:80:6d:d4:3c:8b:3e:54:27:
         8a:1f:bf:ee:a2:9c:67:89:19:4f:d8:7a:d5:1b:3d:f3:59:62:
         08:8f:8a:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 20 05:59:12 2024 by rpki-client on console-fra.rpki-client.org