Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/656fc147-50e3-39ef-ab55-4ef52a6cd0f2.roa
File:                     656fc147-50e3-39ef-ab55-4ef52a6cd0f2.roa (raw, json)
Hash identifier:          9DFSs6aX6adU1dNC17OISX6wLSPxv4Eh/clucVmoHfs=
Subject key identifier:   32:60:A4:BA:EA:DC:9F:70:FF:66:E1:E4:4B:50:33:D4:26:23:4C:16
Certificate issuer:       /CN=a340834d-d728-405c-95f1-caa6810aa7d9
Certificate serial:       010D0C9F432858475A763E9780026173EAD907A0
Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/656fc147-50e3-39ef-ab55-4ef52a6cd0f2.roa
Signing time:             Fri 27 Sep 2024 13:00:41 +0000
ROA not before:           Fri 27 Sep 2024 13:00:41 +0000
ROA not after:            Thu 26 Dec 2024 14:00:41 +0000
asID:                     19437
IP address blocks:        131.153.196.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:5a:76:3e:97:80:02:61:73:ea:d9:07:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9
        Validity
            Not Before: Sep 27 13:00:41 2024 GMT
            Not After : Dec 26 14:00:41 2024 GMT
        Subject: CN=9ee0c92f-92f0-4f34-9927-2793499dc6ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:d1:7c:5e:bf:a0:7b:7c:f4:8a:18:11:50:8c:
                    c7:00:64:a1:60:da:b3:55:27:4e:7b:3f:05:5f:80:
                    69:10:4c:a3:0b:cc:44:e6:68:c5:75:aa:0e:a8:4e:
                    48:ff:ff:e1:5b:ae:45:ed:9f:ee:3e:b4:02:62:da:
                    66:8d:dc:ad:3e:c2:68:5b:05:d9:ed:a2:9d:00:17:
                    28:b2:81:f1:5c:c9:7f:d7:52:49:c5:53:b1:0c:32:
                    33:c8:5b:e5:e9:2b:3d:cd:eb:f6:e8:48:dc:74:1f:
                    a4:2a:01:15:81:5b:94:93:df:c2:71:0e:05:58:5d:
                    a2:77:12:af:b2:0f:e3:25:0a:c5:06:94:63:59:96:
                    07:3c:96:e2:4f:3a:eb:08:21:23:7d:fc:66:f0:c3:
                    81:cb:25:8b:af:6a:31:2e:c3:f7:c5:18:06:7d:3b:
                    2d:75:6f:e1:80:f0:cf:e4:e4:2b:eb:d3:61:48:02:
                    c9:be:08:21:04:50:81:d4:31:55:06:b2:46:e1:a2:
                    29:08:67:6b:b2:35:e6:75:67:27:ad:c2:e5:7c:e5:
                    6a:af:ad:ce:b3:75:01:90:c6:b8:35:c7:6c:53:b0:
                    7b:50:5b:18:66:ff:63:d9:8f:e4:ef:0e:2d:d5:43:
                    96:e7:43:7e:5d:7c:13:99:81:f9:38:86:8b:f7:d3:
                    81:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:60:A4:BA:EA:DC:9F:70:FF:66:E1:E4:4B:50:33:D4:26:23:4C:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/656fc147-50e3-39ef-ab55-4ef52a6cd0f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl

            X509v3 Authority Key Identifier:
                keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.153.196.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:c6:f7:d7:06:68:a3:c1:56:a3:93:f0:83:1d:de:f7:f5:0e:
         66:1f:30:0c:7c:75:40:57:35:d2:29:f8:7a:3f:fc:fe:eb:65:
         fa:8b:a2:61:4c:0b:3d:4c:32:04:64:63:35:15:71:98:6d:67:
         37:13:0d:0d:94:f9:08:77:75:b5:86:47:84:37:0c:5d:f4:df:
         86:64:c0:ca:80:ac:39:60:d2:c0:ca:92:90:ef:32:43:1d:ff:
         6f:f7:dd:ab:9f:68:a2:e3:0d:7c:b3:d7:64:92:f4:72:4b:a3:
         d6:c9:2b:8b:ac:78:4c:e0:ff:76:5a:39:03:d5:02:1d:92:96:
         6b:d3:0c:0d:3c:bb:dc:b2:8d:f2:ff:f5:e3:ce:0a:ed:8b:0e:
         8d:bb:26:24:18:8a:83:38:8e:eb:0a:ef:c4:63:08:37:ce:6e:
         3a:05:49:e2:18:04:6d:74:6d:f3:4a:dd:4a:2e:7a:86:2f:f8:
         0e:54:e9:2e:8d:aa:18:cc:1a:a2:e8:85:7c:d4:b6:a2:cd:40:
         79:85:9c:2d:d5:e1:7a:d6:b9:56:e6:a5:76:f3:9b:2d:27:19:
         03:c1:48:bb:69:04:06:61:a2:41:b8:3f:04:c4:b0:43:a8:86:
         72:db:7a:85:9a:96:a3:6b:83:b7:b7:c3:3e:cd:3f:24:3a:9a:
         ad:ac:48:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:48:52 2024 by rpki-client on console-ams.rpki-client.org