Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/87419330-11c9-3ca9-b1d8-ee0eb71d2381.roa
File:                     87419330-11c9-3ca9-b1d8-ee0eb71d2381.roa (raw, json)
Hash identifier:          m2rnmjRAYvdFV27ysCg9p3lfyrScs3Bu2d+1XoakwYY=
Subject key identifier:   B2:C6:D2:72:1A:12:4C:01:24:8E:7D:D5:AA:B9:BC:BA:10:44:58:77
Certificate issuer:       /CN=4edd6357-2935-4b92-8130-68071d4eaf01
Certificate serial:       010D0C9F432858474C80BB0186B8F6361A4A45A0
Authority key identifier: 0C:50:4D:48:49:67:68:5C:71:1A:A1:6A:4F:32:0F:F5:18:64:07:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/87419330-11c9-3ca9-b1d8-ee0eb71d2381.roa
Signing time:             Sun 22 Sep 2024 13:00:40 +0000
ROA not before:           Sun 22 Sep 2024 13:00:40 +0000
ROA not after:            Sat 21 Dec 2024 14:00:40 +0000
asID:                     4181
IP address blocks:        135.131.0.0/16 maxlen: 24
                          135.134.0.0/15 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/4edd6357-2935-4b92-8130-68071d4eaf01.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/4edd6357-2935-4b92-8130-68071d4eaf01.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:4c:80:bb:01:86:b8:f6:36:1a:4a:45:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4edd6357-2935-4b92-8130-68071d4eaf01
        Validity
            Not Before: Sep 22 13:00:40 2024 GMT
            Not After : Dec 21 14:00:40 2024 GMT
        Subject: CN=6db0b61c-03de-45a0-9114-9e9a9cd9323a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:a3:9a:f7:b6:0e:9e:26:32:38:04:a8:e8:87:
                    6e:8a:75:87:1a:c5:1b:fb:9a:ce:09:aa:66:85:42:
                    a2:42:d7:ad:f5:5e:60:1b:f7:de:52:ac:8d:0b:62:
                    40:f7:45:45:ed:fe:87:f5:94:2f:52:23:04:15:d7:
                    3e:8a:59:36:76:f5:90:63:17:e9:81:b6:af:56:73:
                    56:ae:11:93:2d:d8:e0:70:d5:29:25:e7:c4:66:b1:
                    87:6c:63:25:d8:3a:dc:6c:46:2c:44:30:ac:a3:57:
                    00:bc:0b:4f:4a:67:84:ac:8d:55:80:eb:d3:22:3f:
                    49:5c:91:de:8b:6a:9a:71:2e:f3:03:1a:18:44:bd:
                    4e:4c:cc:7c:90:07:eb:b3:dd:bf:79:33:c2:4a:7e:
                    19:ed:61:1d:69:de:46:7f:08:bc:f3:85:99:c0:1d:
                    61:ad:fa:9a:8b:4e:5d:97:ce:95:18:08:51:3c:8c:
                    ac:33:f9:0c:20:f3:7f:b1:7b:cc:18:cd:3c:c6:49:
                    e5:c6:58:ac:06:f3:1f:87:75:43:ee:8c:91:60:d3:
                    3b:bb:0a:22:26:a5:c2:17:97:9b:a4:a7:6f:3f:b5:
                    c6:8f:2f:cf:c5:65:71:1e:90:46:36:dc:20:d1:ef:
                    53:5a:57:f6:30:cb:c4:34:bf:62:b0:75:a6:a4:50:
                    a5:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:C6:D2:72:1A:12:4C:01:24:8E:7D:D5:AA:B9:BC:BA:10:44:58:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/87419330-11c9-3ca9-b1d8-ee0eb71d2381.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/4edd6357-2935-4b92-8130-68071d4eaf01.crl

            X509v3 Authority Key Identifier:
                keyid:0C:50:4D:48:49:67:68:5C:71:1A:A1:6A:4F:32:0F:F5:18:64:07:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  135.131.0.0/16
                  135.134.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:29:ec:5e:76:07:3a:fa:94:43:07:27:9e:1c:45:eb:43:30:
         fe:cf:b1:53:d1:22:ff:8a:d6:03:9c:bf:89:62:77:1b:46:d5:
         c9:af:ef:de:ad:c8:41:4b:5f:53:9d:47:e7:f5:8e:59:55:ca:
         16:51:a6:f3:15:67:5e:66:d0:86:46:49:8a:1f:9b:99:9f:ec:
         3c:57:ce:3a:fb:48:71:ec:51:4a:da:2c:80:a7:59:0b:d5:fb:
         ed:a0:8f:f3:aa:3a:56:28:9e:aa:d1:9b:5c:bd:97:20:1b:5b:
         eb:5c:f3:93:08:74:bf:6c:d0:44:3b:78:cc:b5:e6:93:40:d9:
         a6:8c:08:4f:d7:82:33:e3:81:19:e7:33:9d:85:f1:7f:b2:90:
         9d:5c:f8:89:a1:9c:e2:52:6d:6e:3d:d6:76:1b:72:61:4b:74:
         f6:41:b2:c3:13:64:42:04:e5:68:d9:1c:72:8f:d6:da:30:df:
         df:79:57:76:4d:8a:a4:58:27:f1:69:51:fa:b0:6f:ac:f2:92:
         03:0a:32:18:c7:34:b5:5f:67:72:2c:8e:71:9b:a8:d3:45:8e:
         09:3a:84:4e:3a:cd:12:b4:bd:aa:f0:9f:4e:58:95:9b:02:35:
         f8:95:03:99:fa:af:5a:ed:9f:a7:50:33:3c:4d:8b:f5:57:cb:
         52:22:3e:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 01:25:50 2024 by rpki-client on console-ams.rpki-client.org