Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/efb511d0-3c37-335c-ba0b-442e98173e1e.roa
File:                     efb511d0-3c37-335c-ba0b-442e98173e1e.roa (raw, json)
Hash identifier:          +Vm8Z8NWfYK11QWYARFINwp5JsCy/n0L3rUyLjz8dX8=
Subject key identifier:   FA:5A:DB:85:F6:77:C0:65:52:96:72:79:0A:D6:46:ED:0F:39:4F:1C
Certificate issuer:       /CN=bca82dd9-eea7-4756-b420-960dfbe436c3
Certificate serial:       010D0C9F432858473C60D857FA446B202EEB05A0
Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/efb511d0-3c37-335c-ba0b-442e98173e1e.roa
Signing time:             Mon 16 Sep 2024 18:23:35 +0000
ROA not before:           Mon 16 Sep 2024 18:23:35 +0000
ROA not after:            Sun 15 Dec 2024 19:23:35 +0000
asID:                     53508
IP address blocks:        206.255.152.0/22 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3c:60:d8:57:fa:44:6b:20:2e:eb:05:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3
        Validity
            Not Before: Sep 16 18:23:35 2024 GMT
            Not After : Dec 15 19:23:35 2024 GMT
        Subject: CN=36123232-f483-4bf3-8c17-19e5d25d68f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:93:92:38:02:80:f5:7e:0a:49:1e:80:f6:07:
                    70:c7:81:f5:5e:05:ef:d3:6c:00:50:28:d1:32:28:
                    69:7e:a4:f9:28:56:05:83:df:1f:ba:9a:6b:52:60:
                    45:93:f2:cd:29:45:41:05:3f:84:15:3d:c6:ac:91:
                    5d:f5:30:a0:68:9e:89:61:37:7d:fe:01:ba:b9:a1:
                    cd:78:7b:1b:50:59:67:50:47:91:f5:6a:96:0c:08:
                    03:4a:a4:e7:dd:f6:d5:9e:57:06:15:7d:a5:02:83:
                    10:fb:d8:a9:46:82:70:91:eb:eb:1a:59:60:71:d5:
                    39:c4:3a:82:a2:d1:7d:d9:67:92:7d:a1:29:ee:86:
                    e5:5a:74:10:63:c1:d9:15:21:99:bc:26:df:7a:b0:
                    bd:d1:89:6a:62:fe:00:b5:94:70:d4:57:89:33:22:
                    dc:a4:ea:a1:0f:86:f4:34:db:96:5c:5f:57:16:93:
                    e9:38:48:b5:73:4f:f4:75:da:63:c6:cf:6f:af:5a:
                    55:82:b3:a7:72:dc:c2:0c:8b:68:8a:48:df:e3:eb:
                    98:55:67:d8:aa:3f:2b:32:0f:91:28:5f:fe:9d:f0:
                    07:1f:6b:a1:9f:d5:b7:e7:b5:30:cc:6b:e6:32:e8:
                    1d:80:1c:cc:fb:31:37:e8:d5:5d:c4:c2:8d:f7:f4:
                    f1:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:5A:DB:85:F6:77:C0:65:52:96:72:79:0A:D6:46:ED:0F:39:4F:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/efb511d0-3c37-335c-ba0b-442e98173e1e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl

            X509v3 Authority Key Identifier:
                keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.255.152.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:81:d9:2e:f9:cf:13:f4:dd:79:f1:9c:4c:ec:33:86:97:03:
         b7:96:5b:75:a8:60:ea:aa:60:01:24:41:72:ee:33:7e:4d:17:
         e0:8d:34:b8:10:1c:a3:13:b3:49:4c:3a:47:da:5c:eb:bb:26:
         33:70:15:d0:ef:3b:93:27:62:4e:df:27:81:66:af:fd:1b:33:
         c0:ba:d5:ac:d9:15:79:0c:5a:af:b7:34:fd:20:f1:db:19:a2:
         60:06:7c:22:f0:e9:89:a3:e2:0d:e7:c5:3c:ec:86:3b:de:07:
         85:0a:9e:ee:aa:1a:47:a8:11:60:0a:04:54:1c:76:51:fc:ae:
         9c:02:be:12:6c:78:09:38:05:34:32:4a:a5:b7:ea:df:ba:68:
         7d:ef:56:72:f8:40:e2:0d:5f:3e:ca:25:c3:d5:d0:6e:10:66:
         16:e4:76:e3:bd:50:14:ce:ed:61:45:24:ce:f3:8d:44:d8:48:
         5c:57:42:98:42:d0:70:63:b6:9e:69:7d:ed:5b:a1:2e:66:09:
         0e:63:d9:6c:18:be:b4:22:4c:bc:f8:08:bf:d4:e1:e1:37:3e:
         c8:0f:ef:d2:13:5b:ca:2b:42:de:cf:95:a8:30:bb:f5:23:e0:
         60:a7:e4:13:1f:30:6f:6d:24:be:f6:4b:d9:f9:9e:ce:ab:db:
         9d:a5:41:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:37:28 2024 by rpki-client on console-fra.rpki-client.org