Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/498edecf-1b28-3ff2-8e56-58ead838dea2.roa
File:                     498edecf-1b28-3ff2-8e56-58ead838dea2.roa (raw, json)
Hash identifier:          r7sZPDqfJRIE1761n0FEUqGPKaUq55b1rTWMyCRXlRI=
Subject key identifier:   98:B0:38:CE:41:03:FE:2B:7E:0D:8F:69:31:1C:58:C4:15:F8:EE:DC
Certificate issuer:       /CN=a340834d-d728-405c-95f1-caa6810aa7d9
Certificate serial:       010D0C9F432858474DE5F8C154195865A644E5C0
Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/498edecf-1b28-3ff2-8e56-58ead838dea2.roa
Signing time:             Mon 23 Sep 2024 01:00:31 +0000
ROA not before:           Mon 23 Sep 2024 01:00:31 +0000
ROA not after:            Sun 22 Dec 2024 02:00:31 +0000
asID:                     46385
IP address blocks:        131.153.84.0/24 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:4d:e5:f8:c1:54:19:58:65:a6:44:e5:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9
        Validity
            Not Before: Sep 23 01:00:31 2024 GMT
            Not After : Dec 22 02:00:31 2024 GMT
        Subject: CN=70c5e4c1-687e-45cb-a58d-f0a7c573dfb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:24:33:e0:c2:de:96:22:0c:fb:06:1e:85:08:
                    c4:53:7b:64:49:06:fd:51:9a:f3:54:1e:ed:b0:9d:
                    6e:d5:9f:b1:b4:ed:7a:13:0c:51:28:54:f7:2c:58:
                    54:01:e0:9b:8a:ac:55:63:37:e6:ed:76:88:a4:13:
                    f4:21:b6:d1:0e:ac:67:47:f2:43:e3:b6:ba:d9:f1:
                    e8:28:bb:08:67:b8:c7:91:0e:53:be:bc:39:0f:b7:
                    34:ec:a7:90:75:00:c5:57:83:44:12:1c:9a:49:d5:
                    26:73:99:67:45:6d:85:74:69:06:3d:7a:ca:6d:be:
                    1d:ee:9b:14:51:d1:5b:68:69:ca:16:17:0a:ec:27:
                    17:a9:17:b6:82:87:9c:10:d5:bd:b5:00:f4:f0:ed:
                    84:6f:39:1b:dd:40:ab:a1:bc:c2:ba:3d:80:d9:92:
                    58:37:a3:cd:64:9e:31:85:3a:51:c9:17:1c:7e:df:
                    0e:3c:19:d1:72:12:d6:b1:bd:84:4a:9c:bd:ae:ed:
                    12:5f:ac:ce:7f:d9:6f:cb:e2:67:1c:22:46:1a:05:
                    49:36:c5:83:67:a3:82:29:2a:00:56:2a:e2:12:4a:
                    b3:91:18:1b:43:c3:8e:42:a7:e0:94:db:d4:60:fa:
                    31:cb:a5:23:0d:ce:96:68:64:64:5f:99:2a:2d:fe:
                    9d:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:B0:38:CE:41:03:FE:2B:7E:0D:8F:69:31:1C:58:C4:15:F8:EE:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/498edecf-1b28-3ff2-8e56-58ead838dea2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl

            X509v3 Authority Key Identifier:
                keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.153.84.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:94:bf:85:82:aa:fe:a8:99:14:67:2b:f5:b9:ef:c6:1f:59:
         98:81:11:6c:30:90:e5:c1:0f:ef:4d:6b:df:69:e6:fc:76:3a:
         a6:08:81:02:5f:3a:8b:ad:c1:61:42:8a:29:f9:88:bb:0f:c2:
         41:07:29:96:a6:66:cf:fe:06:3d:69:f7:0f:1d:9a:d1:45:de:
         a0:b3:da:f0:27:1a:a9:c3:9b:61:5b:e1:45:a3:eb:78:53:ee:
         a7:e2:32:6d:cd:1b:5c:75:30:20:37:54:07:a5:2c:55:ae:b0:
         c3:9f:34:06:37:0f:d3:77:6d:dd:a6:d8:83:80:de:7f:06:29:
         98:d9:91:3d:85:e1:89:93:4d:ae:ff:19:7f:45:9a:0d:26:7f:
         db:02:22:71:76:ca:c2:da:41:d4:b5:f4:1b:fa:53:6e:c3:7a:
         1f:79:a6:19:2a:fc:e8:71:f7:6c:ec:12:85:67:71:92:c2:d2:
         4a:24:8f:0e:25:cf:16:05:51:0c:b6:d1:ce:98:ce:65:94:c3:
         b4:b7:1f:d7:96:46:22:ef:34:06:7d:9e:d2:94:51:eb:7c:10:
         fb:13:0a:5d:e7:51:21:fc:a5:d7:dc:be:3e:b7:d9:76:4a:58:
         b1:ce:8e:d9:dd:16:07:d8:c6:74:6f:9f:8e:0c:89:e6:1c:59:
         b3:25:c5:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:49 2024 by rpki-client on console-fra.rpki-client.org