Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/6fe950cf-7f2d-3b67-a3c6-78f966af48ed.roa
File:                     6fe950cf-7f2d-3b67-a3c6-78f966af48ed.roa (raw, json)
Hash identifier:          FJTcavGu/YxDP9NT2m/fZx5FsWFCzVwXGcqi3SqLT44=
Subject key identifier:   E4:28:30:7D:A2:CE:E7:8A:CA:0A:CD:E3:E1:DD:19:1C:23:E5:A1:F7
Certificate issuer:       /CN=a340834d-d728-405c-95f1-caa6810aa7d9
Certificate serial:       010D0C9F432858478CB6824D8C56AC5BF066C600
Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/6fe950cf-7f2d-3b67-a3c6-78f966af48ed.roa
Signing time:             Tue 15 Oct 2024 13:00:47 +0000
ROA not before:           Tue 15 Oct 2024 13:00:47 +0000
ROA not after:            Mon 13 Jan 2025 14:00:47 +0000
asID:                     400672
IP address blocks:        131.153.55.0/24 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:8c:b6:82:4d:8c:56:ac:5b:f0:66:c6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9
        Validity
            Not Before: Oct 15 13:00:47 2024 GMT
            Not After : Jan 13 14:00:47 2025 GMT
        Subject: CN=cfb9010c-9ecd-4cd5-ab80-b0905edc1015
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:ef:0d:09:89:b3:f1:ad:de:a1:e0:36:69:30:
                    fc:d2:0e:ec:2a:db:ab:ad:3f:5d:02:cf:d2:20:ba:
                    cb:6d:da:86:f0:c6:c8:bb:0f:62:a2:7c:88:f8:8d:
                    4a:fe:50:82:13:8a:42:2d:d2:cb:6e:a0:f1:6b:29:
                    ce:8f:01:75:5e:b4:50:14:61:fe:6f:50:71:ab:45:
                    ea:22:dd:d5:11:51:52:b6:d0:93:4f:c9:88:95:d5:
                    9a:46:b6:e8:d2:4a:52:7e:6d:a6:9c:7a:b9:66:64:
                    1c:ab:84:dd:7c:f7:42:6f:11:39:00:23:db:c4:50:
                    94:bc:0f:12:5a:72:00:f0:8f:c3:aa:27:86:93:09:
                    7b:5e:5e:8a:a3:bb:34:03:41:d4:bb:af:2d:15:cf:
                    96:56:66:93:2e:b9:5c:bb:95:a7:5b:df:fa:f4:5a:
                    f3:ff:6f:b0:e7:13:11:96:75:03:fb:fd:04:e8:1e:
                    c4:9b:57:51:e6:88:c4:fc:a2:27:8d:f6:e9:be:8d:
                    ee:a4:2f:7d:48:47:50:9e:a6:f3:27:b5:91:0b:58:
                    56:51:7c:6e:8d:06:c9:1c:d9:39:61:d8:94:f3:47:
                    ce:44:e7:41:b4:12:44:3e:af:be:0f:bb:d6:b9:10:
                    29:49:e6:8e:a3:a6:07:ee:fc:9e:61:c1:09:9c:48:
                    bb:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:28:30:7D:A2:CE:E7:8A:CA:0A:CD:E3:E1:DD:19:1C:23:E5:A1:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/6fe950cf-7f2d-3b67-a3c6-78f966af48ed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl

            X509v3 Authority Key Identifier:
                keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.153.55.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:96:3e:b6:a4:49:5b:9f:e0:9c:ff:16:98:b8:7a:18:40:ff:
         84:2a:2b:e8:ed:a1:1c:32:34:3f:db:fd:ee:eb:6a:d5:d6:60:
         0e:a7:73:0c:d3:08:61:c0:49:27:66:bf:1f:f9:e0:ff:5a:9e:
         3c:27:5d:6d:a2:20:c4:02:32:2a:ec:4b:4c:ce:5e:6a:c8:bd:
         93:7b:78:d3:01:0d:bd:5d:3a:54:d4:93:cc:73:09:aa:15:be:
         8a:20:94:2f:00:9f:2d:a4:a0:19:af:d4:1d:33:d2:ba:fc:7a:
         fc:f1:f7:fc:d4:e5:5f:dc:ea:a0:e2:11:48:88:8e:dd:a9:fb:
         1b:5b:df:ea:7a:83:0b:b3:06:fc:b3:cd:7c:76:8b:b9:7d:52:
         9d:ae:a9:70:ac:56:d7:8f:9a:59:08:26:04:6b:16:10:ef:20:
         c4:e6:f5:b9:5d:a7:a5:0b:45:84:6d:02:90:df:fa:dc:e5:e0:
         a6:9e:e9:15:98:8f:6e:1d:e9:c0:a8:c4:7d:5d:35:80:f9:d3:
         53:cf:95:ad:04:2f:81:05:b3:89:99:f4:bf:56:83:6d:e8:d5:
         ee:6d:7c:55:24:25:e7:6c:af:cd:a3:50:a1:d3:3f:a3:53:1e:
         47:0d:c9:67:a7:a2:4a:0e:36:9a:d8:95:d1:06:4f:87:1f:b7:
         0a:22:af:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:49 2024 by rpki-client on console-fra.rpki-client.org