Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/e4d89b80-4449-3333-bda9-82eeda0c9d4a.roa
File:                     e4d89b80-4449-3333-bda9-82eeda0c9d4a.roa (raw, json)
Hash identifier:          iX4ILD8yKorj+24cUTmN4AR8jT6JbrFsSBJB8LZiTYY=
Subject key identifier:   A2:6F:6A:A0:8F:C9:F0:38:B1:5E:47:2A:11:28:A4:05:52:2C:7A:50
Certificate issuer:       /CN=bca82dd9-eea7-4756-b420-960dfbe436c3
Certificate serial:       010D0C9F432858473C5150AA5BDCE61D83750E80
Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/e4d89b80-4449-3333-bda9-82eeda0c9d4a.roa
Signing time:             Mon 16 Sep 2024 17:52:17 +0000
ROA not before:           Mon 16 Sep 2024 17:52:17 +0000
ROA not after:            Sun 15 Dec 2024 18:52:17 +0000
asID:                     53508
IP address blocks:        206.255.238.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 22 Sep 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3c:51:50:aa:5b:dc:e6:1d:83:75:0e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3
        Validity
            Not Before: Sep 16 17:52:17 2024 GMT
            Not After : Dec 15 18:52:17 2024 GMT
        Subject: CN=4277b782-b02c-414d-a7c4-f9e1abe19792
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:33:a6:e6:9d:eb:81:a5:29:bd:35:ba:2d:bc:
                    cd:ee:51:c8:98:2c:42:dc:99:99:12:06:7d:57:22:
                    8a:1d:a2:9b:2a:64:6e:0c:ca:63:df:be:e7:3c:98:
                    b9:ef:f9:f0:7e:eb:da:69:e4:e8:31:9a:12:6d:96:
                    8d:77:e3:14:aa:7d:bb:d2:fe:53:23:dd:92:5b:2f:
                    d0:52:e6:c3:75:0c:7f:72:da:dd:87:33:a8:ea:52:
                    57:5e:c1:63:60:f7:23:af:1a:d3:bb:c3:81:0e:71:
                    e5:5e:44:ad:9e:de:d3:e7:76:83:45:42:9a:84:96:
                    bc:a6:06:2f:d1:6a:94:5b:03:20:0b:c2:68:e4:2a:
                    43:9e:99:ff:d2:de:d2:de:bf:98:47:29:75:77:7d:
                    f1:8c:8a:d3:96:c4:56:99:5a:37:62:31:34:f7:2c:
                    af:c9:08:3c:80:04:2c:81:a2:3d:5c:00:8d:b1:a1:
                    40:54:2b:c5:d3:a7:35:1b:1f:c9:da:a1:0e:ca:9b:
                    15:7c:45:58:62:f1:ba:95:38:5f:46:8f:af:ca:e2:
                    73:85:01:cd:d9:23:52:cb:87:c5:dd:b5:d5:5f:75:
                    45:1b:63:fb:d1:4f:ed:47:1c:44:e6:f7:99:15:a6:
                    3b:0e:14:2c:c1:d6:98:2f:00:51:4f:a3:2c:c1:4f:
                    85:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:6F:6A:A0:8F:C9:F0:38:B1:5E:47:2A:11:28:A4:05:52:2C:7A:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/e4d89b80-4449-3333-bda9-82eeda0c9d4a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl

            X509v3 Authority Key Identifier:
                keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.255.238.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:2a:9e:7c:5a:44:7b:9a:63:68:3c:57:f8:6a:c8:c7:83:40:
         59:c5:ce:7d:9c:04:0d:6c:4d:3e:ce:07:68:b0:df:7f:a8:a0:
         2c:06:5e:29:b5:c5:25:3c:3b:82:85:4c:37:21:ac:0f:44:4a:
         96:5c:0a:07:9a:6d:b4:ca:1b:57:0a:56:03:26:c5:90:6f:a4:
         14:db:24:2d:90:bb:da:21:f2:87:0e:bd:2f:d8:4a:31:f1:18:
         76:42:15:b1:36:97:e6:fc:50:bf:1f:b6:dc:6d:73:43:d5:0b:
         01:fa:7e:d3:f3:da:c3:55:83:36:8e:bc:a6:e8:f4:06:01:cc:
         e7:48:db:19:c7:5d:18:4b:a9:c1:e5:0b:07:d7:0b:4b:53:6f:
         1d:f8:8e:e6:66:10:e5:e8:86:67:1e:a0:99:68:9d:e7:a1:68:
         50:80:f9:ea:a1:f3:13:ad:f3:60:d4:91:14:fb:67:47:28:af:
         35:38:c4:b0:61:be:ca:57:af:b6:b1:8e:73:68:14:4d:7c:f5:
         72:02:f1:a1:30:12:21:8d:fb:b0:56:d9:eb:5d:77:e1:b5:33:
         17:0c:39:35:5a:e6:84:d9:b3:80:0e:0e:ef:dc:63:b8:10:a3:
         67:bd:ea:40:a9:2c:60:11:5c:7f:4b:43:f6:ba:61:3a:7d:6d:
         ab:dc:34:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 20 06:14:29 2024 by rpki-client on console-ams.rpki-client.org