Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88ab2065-ec65-41b7-b24d-cd8d9c2c276e/53d55cec-431e-39b0-a81e-7d12af083f74.roa
File:                     53d55cec-431e-39b0-a81e-7d12af083f74.roa (raw, json)
Hash identifier:          Ig2VHrybjKlcx20m3w57rbCuZtI8cEFdWgg864iOyc8=
Subject key identifier:   CC:67:B3:71:1E:43:42:D7:C8:02:55:8C:B6:0D:7F:FD:AA:5D:6A:75
Certificate issuer:       /CN=88ab2065-ec65-41b7-b24d-cd8d9c2c276e
Certificate serial:       010D0C9F43285847A5D6A124122AFAEEDE1AF500
Authority key identifier: 05:D0:66:4D:05:91:BD:A5:12:9D:86:DF:FE:36:8C:36:01:B9:62:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88ab2065-ec65-41b7-b24d-cd8d9c2c276e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88ab2065-ec65-41b7-b24d-cd8d9c2c276e/53d55cec-431e-39b0-a81e-7d12af083f74.roa
Signing time:             Thu 24 Oct 2024 13:00:42 +0000
ROA not before:           Thu 24 Oct 2024 13:00:42 +0000
ROA not after:            Wed 22 Jan 2025 14:00:42 +0000
asID:                     399921
IP address blocks:        165.140.134.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88ab2065-ec65-41b7-b24d-cd8d9c2c276e/88ab2065-ec65-41b7-b24d-cd8d9c2c276e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88ab2065-ec65-41b7-b24d-cd8d9c2c276e/88ab2065-ec65-41b7-b24d-cd8d9c2c276e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88ab2065-ec65-41b7-b24d-cd8d9c2c276e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:a5:d6:a1:24:12:2a:fa:ee:de:1a:f5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88ab2065-ec65-41b7-b24d-cd8d9c2c276e
        Validity
            Not Before: Oct 24 13:00:42 2024 GMT
            Not After : Jan 22 14:00:42 2025 GMT
        Subject: CN=ac627b87-9bcd-426d-8c51-7acc7c23c7b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:83:aa:d4:d0:c3:d6:b8:5a:ac:a4:29:94:5e:
                    a7:77:aa:6e:fc:2c:81:28:a6:5a:06:70:d1:a7:1e:
                    af:4e:2f:59:8f:28:75:57:77:60:9a:fa:9c:33:64:
                    3f:cc:1a:73:12:de:c9:9a:01:55:7a:3d:a8:b0:ff:
                    fd:15:28:05:07:a2:48:a1:f4:47:7c:e5:ec:d2:ff:
                    d1:17:4e:4c:86:85:1b:62:7c:31:ec:6d:28:33:e7:
                    2e:ac:06:26:5c:b2:11:f4:40:73:27:3e:01:a0:34:
                    8c:a5:18:89:36:40:f9:d2:b3:3d:34:00:f4:80:59:
                    bd:b8:0e:7b:b5:99:df:17:fb:d7:79:c3:ba:02:00:
                    83:16:3e:f3:3f:a6:8a:9c:0a:4f:a6:90:e9:63:9a:
                    48:77:93:d8:d3:29:12:4a:14:1f:e0:1b:88:ec:1c:
                    bd:83:7c:1f:fa:90:c4:83:7b:0f:c5:1d:3e:ad:4b:
                    1f:85:3b:2a:cf:a8:15:64:29:1a:bd:4f:95:aa:26:
                    a8:86:26:83:4e:56:05:48:1b:7a:43:d5:fb:79:90:
                    d5:1a:9d:2f:36:3d:5e:0f:5b:96:89:19:fa:56:65:
                    4b:05:d5:d6:9b:81:6f:a5:1b:d5:dc:e8:a7:de:6f:
                    be:ae:e5:d4:9a:b7:c6:0c:b3:a1:0a:a4:28:78:36:
                    c7:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:67:B3:71:1E:43:42:D7:C8:02:55:8C:B6:0D:7F:FD:AA:5D:6A:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88ab2065-ec65-41b7-b24d-cd8d9c2c276e/53d55cec-431e-39b0-a81e-7d12af083f74.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88ab2065-ec65-41b7-b24d-cd8d9c2c276e/88ab2065-ec65-41b7-b24d-cd8d9c2c276e.crl

            X509v3 Authority Key Identifier:
                keyid:05:D0:66:4D:05:91:BD:A5:12:9D:86:DF:FE:36:8C:36:01:B9:62:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88ab2065-ec65-41b7-b24d-cd8d9c2c276e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.140.134.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:32:46:30:83:41:49:60:54:9d:a6:d8:1e:0c:18:55:d6:09:
         93:c5:51:69:84:0e:37:4e:09:62:ce:67:e4:2f:1b:bd:22:26:
         11:35:05:36:51:d8:b2:f6:8a:b7:c3:31:d1:b7:b0:2e:62:6a:
         2b:c2:de:f5:c4:69:08:9f:36:ab:11:d8:32:01:59:aa:27:38:
         51:69:0c:b4:96:9d:47:35:91:26:55:fc:59:25:6a:7a:16:af:
         48:aa:d8:f4:4c:b2:25:e2:7b:a9:ec:f0:bd:60:95:93:d3:2c:
         9b:2c:ca:7d:a6:68:34:3d:dd:0b:1f:aa:2c:9f:df:72:2a:2e:
         02:0e:20:27:50:02:98:dc:1a:03:cb:ee:65:47:b9:5d:59:20:
         a5:45:8c:d7:5e:73:8f:f2:f5:93:5f:bc:4e:23:99:bd:e0:2f:
         b9:0e:85:4b:12:ef:99:73:ed:be:b1:7f:35:da:c9:ce:12:57:
         88:cc:45:e3:c1:68:83:64:d6:47:2f:83:e1:bb:74:4a:db:c5:
         1b:7d:6b:06:3b:ea:b1:fd:64:16:74:b6:09:1d:f8:35:76:63:
         62:16:b6:82:fe:68:2b:a0:c2:ee:31:fb:47:98:5d:b0:c3:54:
         e5:c5:a6:35:19:61:4f:d5:a4:3e:37:da:79:ee:b5:b3:82:b7:
         63:66:75:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:42:05 2024 by rpki-client on console-ams.rpki-client.org