Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/53f05558-bdf3-3584-84db-3b70198450f8.roa
File:                     53f05558-bdf3-3584-84db-3b70198450f8.roa (raw, json)
Hash identifier:          u23q9wto045C7WoqTVzwmO4S7yGvZcdc6V4BcODvkkw=
Subject key identifier:   C0:A2:64:24:E1:3C:D8:74:EC:0B:E6:8B:11:4F:C7:64:64:AE:25:EB
Certificate issuer:       /CN=a340834d-d728-405c-95f1-caa6810aa7d9
Certificate serial:       010D0C9F43285847537B605E9419BC5213F6C180
Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/53f05558-bdf3-3584-84db-3b70198450f8.roa
Signing time:             Wed 25 Sep 2024 01:00:31 +0000
ROA not before:           Wed 25 Sep 2024 01:00:31 +0000
ROA not after:            Tue 24 Dec 2024 02:00:31 +0000
asID:                     20454
IP address blocks:        131.153.240.0/23 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:53:7b:60:5e:94:19:bc:52:13:f6:c1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9
        Validity
            Not Before: Sep 25 01:00:31 2024 GMT
            Not After : Dec 24 02:00:31 2024 GMT
        Subject: CN=fd3a083f-d2b4-4e9f-b1dc-9e3ff5541bc7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:8b:ca:70:66:0c:8e:42:a6:1e:f5:53:df:1e:
                    b9:87:28:f8:5e:ed:89:b1:fd:3d:6a:6f:dd:44:fc:
                    7b:aa:6d:7b:b2:bd:ab:19:bf:5b:17:f2:aa:83:5d:
                    3d:df:2d:4e:ee:3b:76:47:f8:a6:1a:7d:8e:5e:22:
                    e1:9d:e5:2f:79:52:94:3d:3f:4e:21:79:58:8a:b5:
                    6a:cb:7b:51:ac:7a:aa:be:e6:49:d7:d9:52:90:89:
                    f7:56:a5:b0:a9:4b:b1:da:4f:28:ca:32:13:7f:98:
                    24:80:df:bb:35:14:af:8b:c1:08:b9:78:c4:c0:eb:
                    31:0c:ee:ac:c4:f3:f5:ec:b3:00:74:18:da:18:ef:
                    40:fd:1b:22:7d:1b:ba:10:9d:d8:b5:bf:f1:15:ee:
                    f1:97:b3:d5:ff:ae:b2:fb:f4:2f:e5:74:1b:3a:a1:
                    df:cd:17:89:91:09:ee:07:9a:b4:29:c7:f0:77:76:
                    e3:a9:a2:e4:51:8c:79:7c:31:e5:74:15:98:11:8c:
                    e6:16:49:3f:07:d5:b7:e3:6b:77:7d:39:1e:86:4a:
                    a7:d4:30:40:2f:b4:73:fb:7e:eb:71:dd:95:7f:38:
                    17:ba:c4:c0:96:b5:62:9e:9e:60:6c:2d:10:43:7e:
                    3d:0a:9c:58:ce:45:38:cc:98:ed:28:58:19:ed:15:
                    9c:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:A2:64:24:E1:3C:D8:74:EC:0B:E6:8B:11:4F:C7:64:64:AE:25:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/53f05558-bdf3-3584-84db-3b70198450f8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl

            X509v3 Authority Key Identifier:
                keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.153.240.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:1e:63:0b:46:56:68:08:a9:da:be:fc:97:16:8a:75:a3:01:
         ec:f5:65:87:dc:fc:8b:fa:96:c3:5f:40:20:b0:d8:50:ed:74:
         33:ec:58:a9:cf:86:63:25:f9:f1:8b:d2:b1:92:31:b3:0f:67:
         66:00:bf:4f:93:25:bf:36:7a:3d:36:79:0f:c1:21:90:96:b5:
         d4:05:c5:21:eb:b8:e1:b3:ff:84:23:60:67:cf:41:72:5e:28:
         43:51:51:4f:90:e7:ee:76:84:22:75:8c:36:e1:99:d4:6c:3d:
         a4:eb:e5:16:d7:3f:f3:e6:78:a1:57:e1:c8:8e:9a:63:82:78:
         5a:5b:b7:39:80:e0:fb:73:93:56:20:65:04:aa:f4:e9:b1:70:
         26:c0:7f:f2:88:fd:b6:91:01:ae:84:f9:1c:f3:ec:6e:d8:cd:
         28:09:8a:ad:62:fc:63:28:03:60:d4:1f:51:6b:79:16:13:f0:
         8a:a4:6c:c7:01:6c:b3:e1:c3:49:b8:35:b4:7e:38:04:5b:49:
         49:f1:6d:00:9e:97:37:75:50:41:39:48:18:af:4c:6b:da:0f:
         7c:31:6b:19:cd:d6:75:60:27:39:47:23:d6:7b:2b:29:ab:17:
         b8:12:60:82:15:2e:34:b0:4c:c5:78:ea:76:cc:3c:bd:44:ca:
         24:48:05:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:49 2024 by rpki-client on console-fra.rpki-client.org