Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/543031bb-b48b-4efb-ae26-4035688199f7/34408d9c-ba17-3a98-a30c-784c9718904b.roa
File:                     34408d9c-ba17-3a98-a30c-784c9718904b.roa (raw, json)
Hash identifier:          C9+zmgFGlmmwPjGe2MXRL8yPKBI6EytOX6zVIafu3R4=
Subject key identifier:   61:CC:39:C2:A2:EA:9D:32:61:9D:64:44:12:22:C1:5C:34:0B:05:87
Certificate issuer:       /CN=543031bb-b48b-4efb-ae26-4035688199f7
Certificate serial:       010D0C9F4328584765A0E5FFB6EC10578CB5BE20
Authority key identifier: 2D:2F:7D:F2:35:FF:0E:F9:30:77:87:20:41:F4:80:D2:3E:08:D8:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/543031bb-b48b-4efb-ae26-4035688199f7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/543031bb-b48b-4efb-ae26-4035688199f7/34408d9c-ba17-3a98-a30c-784c9718904b.roa
Signing time:             Tue 01 Oct 2024 13:00:42 +0000
ROA not before:           Tue 01 Oct 2024 13:00:42 +0000
ROA not after:            Mon 30 Dec 2024 14:00:42 +0000
asID:                     3257
IP address blocks:        134.195.152.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/543031bb-b48b-4efb-ae26-4035688199f7/543031bb-b48b-4efb-ae26-4035688199f7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/543031bb-b48b-4efb-ae26-4035688199f7/543031bb-b48b-4efb-ae26-4035688199f7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/543031bb-b48b-4efb-ae26-4035688199f7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:65:a0:e5:ff:b6:ec:10:57:8c:b5:be:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=543031bb-b48b-4efb-ae26-4035688199f7
        Validity
            Not Before: Oct  1 13:00:42 2024 GMT
            Not After : Dec 30 14:00:42 2024 GMT
        Subject: CN=ba9578a3-7cd6-43c4-a529-3f2f24e2ffd0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:49:4a:b3:9d:41:b1:23:bd:7d:59:95:36:80:
                    14:2d:43:62:cc:ba:39:c7:c8:c4:91:b1:2c:53:89:
                    32:e2:04:84:1d:fe:80:53:35:84:b1:28:42:d9:36:
                    5c:fb:14:37:ac:5d:4c:a7:d6:f3:2f:80:dd:c0:e2:
                    60:c4:83:0b:6c:31:ac:18:e0:de:b9:a5:0f:f2:80:
                    1f:49:32:8b:65:b9:88:fa:10:5f:ae:e6:b7:dd:d3:
                    5d:ab:86:65:90:a3:bc:2c:05:15:c5:41:ed:dc:d6:
                    15:ea:f2:bf:cc:34:19:c0:90:45:22:72:c0:2a:de:
                    9c:d2:55:ba:f8:90:62:9b:4c:91:24:34:a4:37:a0:
                    3b:e3:42:fe:3d:90:b1:9b:5c:29:bf:ec:a7:1f:97:
                    2a:f7:c0:d4:52:dd:20:b4:18:95:4f:84:7e:23:5f:
                    7b:87:83:0c:60:82:16:61:b2:b1:47:2b:8c:0f:8c:
                    ca:a7:8d:95:b6:f3:da:30:df:f6:e7:74:df:a8:d1:
                    58:33:ee:bc:65:8f:b5:3b:42:81:7c:d7:7d:3c:40:
                    59:7d:ea:72:c0:c7:06:ee:cb:2f:33:79:bf:79:a4:
                    8c:3b:16:b5:f1:0d:da:ff:4f:1c:76:7d:01:21:d7:
                    a6:4a:da:ff:a0:f6:cf:fe:72:e4:fb:7a:36:aa:c4:
                    80:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:CC:39:C2:A2:EA:9D:32:61:9D:64:44:12:22:C1:5C:34:0B:05:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/543031bb-b48b-4efb-ae26-4035688199f7/34408d9c-ba17-3a98-a30c-784c9718904b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/543031bb-b48b-4efb-ae26-4035688199f7/543031bb-b48b-4efb-ae26-4035688199f7.crl

            X509v3 Authority Key Identifier:
                keyid:2D:2F:7D:F2:35:FF:0E:F9:30:77:87:20:41:F4:80:D2:3E:08:D8:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/543031bb-b48b-4efb-ae26-4035688199f7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.195.152.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:9b:dc:4d:08:63:c9:2c:7c:7c:f5:6b:e6:0f:b6:42:0e:49:
         ed:18:51:83:d2:d6:4e:e1:29:a9:75:b5:f3:1a:f4:1d:4e:b3:
         68:de:34:c7:87:97:dc:9b:71:06:cf:5a:80:80:9c:36:40:3e:
         88:c7:3d:70:76:c9:ee:e4:89:85:58:f7:d3:20:ed:32:e1:10:
         a3:cb:03:41:70:6c:c0:df:94:88:3f:da:08:3d:ec:61:b2:62:
         65:30:c0:d9:41:9b:91:d1:e3:1c:03:0c:bc:d1:72:05:a0:23:
         86:a7:59:68:ec:eb:8a:09:49:36:8b:d5:3f:c6:4d:ce:71:f6:
         c2:43:f6:e3:47:20:a5:ec:4f:1a:14:85:27:5b:89:19:b0:c0:
         ff:91:3b:c4:a5:e2:1d:03:7b:ed:49:27:3b:33:92:5d:07:c3:
         96:44:4f:a8:cf:c4:b2:3e:8a:ee:d7:a5:66:9f:f8:f5:a7:23:
         10:08:9c:2d:c4:8d:fb:99:a1:8a:f0:e6:90:93:12:54:b4:04:
         4c:b1:bc:f8:2d:24:c7:af:78:e6:12:e0:b1:6c:07:97:e2:3a:
         5d:cb:7c:c7:d1:36:95:5a:aa:91:4c:c9:8c:59:28:78:0b:3b:
         5b:09:3a:a9:35:6b:8c:b2:4b:97:c4:0a:18:c9:4a:cd:03:af:
         ab:5f:83:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:38 2024 by rpki-client on console-fra.rpki-client.org