Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/5f3402e5-cd92-33b6-812c-0892c0b8b16e.roa
File:                     5f3402e5-cd92-33b6-812c-0892c0b8b16e.roa (raw, json)
Hash identifier:          l/KhedC/9fasdN2vo0AQpZcmx3MDk1VyqIvjZ0qaLPg=
Subject key identifier:   62:EC:7A:A7:F3:A3:31:F7:24:72:54:E0:8E:C7:85:EE:A6:F4:50:ED
Certificate issuer:       /CN=a340834d-d728-405c-95f1-caa6810aa7d9
Certificate serial:       010D0C9F432858474F4B6E77C9A5670CBB027880
Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/5f3402e5-cd92-33b6-812c-0892c0b8b16e.roa
Signing time:             Mon 23 Sep 2024 13:00:40 +0000
ROA not before:           Mon 23 Sep 2024 13:00:40 +0000
ROA not after:            Sun 22 Dec 2024 14:00:40 +0000
asID:                     19437
IP address blocks:        131.153.144.0/21 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:4f:4b:6e:77:c9:a5:67:0c:bb:02:78:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9
        Validity
            Not Before: Sep 23 13:00:40 2024 GMT
            Not After : Dec 22 14:00:40 2024 GMT
        Subject: CN=63232f21-e5d7-4f4a-a607-cae44b6338e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:09:ac:a4:53:a1:5f:c6:57:59:54:e1:c6:43:
                    1a:ac:bb:ba:a8:1b:d6:e5:f4:5c:b1:b6:63:39:fe:
                    f4:30:2d:77:1c:31:24:47:bc:da:e5:20:f2:49:2d:
                    2a:05:9f:a5:5f:e3:90:bb:5a:48:8b:e1:90:3c:71:
                    9f:a5:4c:0d:02:a3:09:d5:a7:6b:66:9b:10:46:82:
                    cb:8a:b5:9d:c5:19:68:f9:bb:ec:15:b1:4c:12:50:
                    ff:ba:8a:22:95:76:21:e8:a9:ea:0e:9d:cd:df:46:
                    40:49:ef:4a:44:61:1e:00:86:97:bc:5e:95:45:95:
                    58:80:d7:55:e4:66:bf:b9:c2:37:24:db:ab:1d:79:
                    dd:63:ca:ea:1e:7e:ab:af:5c:10:d3:ab:0c:c4:26:
                    64:2a:07:bf:8b:1f:d2:d8:d6:ef:64:a9:05:7a:a3:
                    aa:0c:14:fc:28:4d:fd:63:bb:1b:0f:9f:e7:d4:9e:
                    67:77:d6:3a:82:a3:df:0c:c6:8c:2a:25:cb:e0:ae:
                    27:ff:dd:37:d0:17:1f:52:bd:42:e7:aa:af:d9:ed:
                    76:6f:8a:b0:a9:f1:a8:45:47:2c:d0:68:eb:9c:e0:
                    fe:b4:a1:34:e1:03:96:73:bf:ed:35:17:57:77:69:
                    53:1b:28:97:6e:b3:f3:1e:c2:4f:15:c5:2a:8b:d7:
                    6f:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:EC:7A:A7:F3:A3:31:F7:24:72:54:E0:8E:C7:85:EE:A6:F4:50:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/5f3402e5-cd92-33b6-812c-0892c0b8b16e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl

            X509v3 Authority Key Identifier:
                keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.153.144.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:bb:82:55:05:e0:50:5e:84:0a:05:a4:33:18:95:bb:de:f6:
         0c:e1:c9:2f:91:c5:2b:8e:3e:ff:7e:03:fe:2e:4b:5d:57:84:
         75:d9:d3:75:fb:c1:e7:2b:b4:13:2e:a8:13:7c:dd:43:82:0f:
         e2:7a:9e:74:f0:06:5f:78:81:67:a2:94:29:50:43:da:74:04:
         ad:fe:45:46:dd:bd:56:72:e8:3e:f6:cc:59:4d:cb:92:f0:61:
         c2:e7:e1:15:bb:0a:13:bd:88:7d:f9:d7:0f:01:6d:64:5b:e6:
         7e:0f:13:ad:d6:2f:ad:21:b2:a3:bb:0a:95:04:a1:bb:96:ee:
         a5:82:fb:a7:39:a6:84:04:cb:61:ce:3c:47:ef:62:54:cf:3b:
         ff:50:f7:3e:40:a8:1c:b1:78:dc:4d:ab:f3:a9:fe:c4:a8:28:
         76:24:ae:6e:30:1b:46:df:a1:ba:44:12:34:c7:26:e6:b2:4d:
         c9:d2:3d:90:e6:bf:c6:82:d3:17:77:ee:12:3d:4d:82:ba:36:
         d6:5a:7e:b3:0f:ee:d1:37:a3:90:cd:0f:9f:89:c8:02:39:9d:
         39:b5:9e:c6:06:25:1f:4b:f2:77:30:c0:a3:52:06:53:c9:eb:
         2a:fa:18:ff:e5:14:be:4d:ce:0d:c0:13:c7:bd:71:a4:af:af:
         a8:3d:07:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:49 2024 by rpki-client on console-fra.rpki-client.org