Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/7776e941-b405-3bce-be48-def35de489d4.roa
File:                     7776e941-b405-3bce-be48-def35de489d4.roa (raw, json)
Hash identifier:          eukNlGv3smM1YusukQ4sY7EQB0cm5eWg+oIz0w5c+us=
Subject key identifier:   76:12:7A:53:42:24:A2:28:61:E1:65:EC:64:BD:0C:46:46:80:5B:F4
Certificate issuer:       /CN=a340834d-d728-405c-95f1-caa6810aa7d9
Certificate serial:       010D0C9F4328584782F1029B786A38EB8F559380
Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/7776e941-b405-3bce-be48-def35de489d4.roa
Signing time:             Sat 12 Oct 2024 01:00:32 +0000
ROA not before:           Sat 12 Oct 2024 01:00:32 +0000
ROA not after:            Fri 10 Jan 2025 02:00:32 +0000
asID:                     20454
IP address blocks:        131.153.236.0/24 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:82:f1:02:9b:78:6a:38:eb:8f:55:93:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9
        Validity
            Not Before: Oct 12 01:00:32 2024 GMT
            Not After : Jan 10 02:00:32 2025 GMT
        Subject: CN=ee130ad0-43a1-4764-a0d3-03f50a981ab8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:d3:fc:c6:f5:1b:91:ca:14:7d:5a:8e:f6:1d:
                    00:29:6e:db:82:05:3f:f0:6c:9b:d1:92:de:3d:55:
                    3d:71:ad:8f:4e:7e:43:4a:2c:99:18:e2:c6:31:fb:
                    a0:68:66:2d:74:7b:8b:5a:06:00:2e:13:e8:93:ca:
                    e3:9e:71:b7:81:bc:b8:db:f6:dd:73:32:ea:de:af:
                    e5:01:2f:99:ff:1f:3e:03:d0:cf:5e:a9:75:ce:dc:
                    d8:d5:0b:f8:60:3d:85:7b:f0:dc:e8:4a:62:77:8f:
                    6b:f4:54:3f:ed:59:cf:f7:0f:16:2b:65:3e:d3:09:
                    c1:6e:1f:5c:f1:e1:d7:9f:8f:f6:e5:e3:35:51:ef:
                    ca:3b:6e:de:f6:ff:85:ab:4e:a5:14:cf:58:10:52:
                    b4:e3:f1:5d:7f:5d:3c:17:9d:34:d0:19:2c:d0:bd:
                    02:48:d9:a7:75:bc:92:a4:2e:cc:1c:f4:f2:82:be:
                    ce:27:80:36:e5:a0:76:41:68:2c:49:f3:50:3f:e6:
                    92:e4:ae:7b:4e:f2:a0:06:ef:74:36:14:80:30:1c:
                    e8:bf:c3:71:96:43:86:46:05:a8:54:cc:fd:0a:26:
                    ad:62:3c:0b:fb:76:38:52:c4:5d:6c:66:85:92:d8:
                    f6:ca:e3:67:ed:bf:28:60:96:43:35:d9:6b:da:18:
                    e2:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:12:7A:53:42:24:A2:28:61:E1:65:EC:64:BD:0C:46:46:80:5B:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/7776e941-b405-3bce-be48-def35de489d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl

            X509v3 Authority Key Identifier:
                keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.153.236.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:a9:a3:e7:63:bd:e8:7d:03:b6:43:97:b4:92:a5:22:89:af:
         2f:9a:9a:34:1b:68:ed:a8:5b:60:07:0d:d2:c6:4d:a9:9c:a3:
         58:ad:64:db:ba:8c:b3:6c:46:25:f0:9b:f4:fa:c2:68:c9:ef:
         1c:13:93:af:01:e5:b0:95:f0:e5:a1:23:4e:34:4b:bb:94:cd:
         a5:6f:e7:98:4b:19:c6:5e:a5:12:c6:b0:96:ce:7f:41:28:a8:
         fb:54:3a:7e:69:f5:a0:34:98:3b:17:6f:28:ec:03:01:e5:fb:
         e5:52:43:df:18:0f:b8:a5:5a:33:3a:16:c6:42:11:15:03:b2:
         fe:5d:56:50:89:63:10:e6:ed:76:37:cc:ea:e5:5f:75:45:e9:
         47:83:65:9a:b5:57:03:bb:8f:03:0d:bf:e8:0d:d1:63:b7:05:
         28:ce:cc:3d:09:df:a0:17:1c:20:b6:26:f1:5e:d3:f1:f8:86:
         1e:08:6a:58:bb:04:3a:f1:7c:f0:6b:13:99:21:1e:2c:5d:ab:
         d8:3a:50:23:e9:2e:aa:cd:48:6f:17:73:88:54:9f:d2:76:52:
         d9:96:b0:df:53:5e:39:ee:4f:86:e9:05:b8:49:c4:27:59:bf:
         9b:98:20:39:16:1a:dd:4d:06:92:31:d9:f4:cc:8b:48:17:15:
         f1:73:25:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:48:52 2024 by rpki-client on console-ams.rpki-client.org