Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/7e61e908-169f-33b7-a055-27c63e9911e5.roa
File:                     7e61e908-169f-33b7-a055-27c63e9911e5.roa (raw, json)
Hash identifier:          PLeNKYrj0ZJFqKpH3kbhEkVb77BBpa8O+Lbe2lKSsgs=
Subject key identifier:   47:D5:37:7F:4D:23:96:47:E3:C5:3B:B7:3F:4C:3D:AF:12:6B:CA:7D
Certificate issuer:       /CN=a340834d-d728-405c-95f1-caa6810aa7d9
Certificate serial:       010D0C9F4328584774FBA56FCC0036410221A680
Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/7e61e908-169f-33b7-a055-27c63e9911e5.roa
Signing time:             Mon 07 Oct 2024 01:00:31 +0000
ROA not before:           Mon 07 Oct 2024 01:00:31 +0000
ROA not after:            Sun 05 Jan 2025 02:00:31 +0000
asID:                     394643
IP address blocks:        131.153.244.0/24 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:74:fb:a5:6f:cc:00:36:41:02:21:a6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9
        Validity
            Not Before: Oct  7 01:00:31 2024 GMT
            Not After : Jan  5 02:00:31 2025 GMT
        Subject: CN=34b03804-468d-4156-a337-7f4b141b7b4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:fe:34:34:51:85:6b:d1:2d:c3:4f:56:df:ee:
                    e9:14:e0:2a:e3:46:a4:e9:05:d1:39:c8:ba:8a:24:
                    64:44:8c:44:6d:81:0b:7e:68:b2:78:19:16:7a:62:
                    c1:0b:4c:f1:1e:48:a0:fe:ea:5d:84:6e:b0:b5:15:
                    2d:91:9c:65:97:04:bd:50:08:3e:57:3c:5e:67:d9:
                    59:fc:ee:c1:78:90:40:df:e3:f7:4e:03:04:4f:66:
                    bf:30:5e:50:e1:ca:07:db:29:46:25:40:a0:05:55:
                    ae:eb:5e:64:cf:3b:98:87:1e:51:e2:6a:3b:a2:b5:
                    43:78:f1:fb:b3:80:f2:8d:92:9f:e6:4e:ea:48:4f:
                    a2:5c:8f:81:90:1f:10:85:b9:7a:6a:35:12:eb:dc:
                    45:b3:42:d8:db:15:1f:a5:fd:ae:fd:d9:37:92:34:
                    dc:00:f9:0d:27:ab:59:58:41:ed:7b:b4:92:95:a3:
                    d9:de:7b:d2:b6:2a:75:94:20:10:0e:58:24:4d:0e:
                    9c:99:7f:a9:90:a8:54:32:63:07:4b:ff:d0:c7:cd:
                    b8:b7:67:85:9d:12:50:3a:e7:6b:06:4f:1a:94:f3:
                    c6:d0:b5:28:ce:fb:ce:91:74:49:f9:eb:7e:7d:49:
                    31:cf:43:d7:56:84:30:b3:d7:d6:68:89:9b:52:2e:
                    14:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:D5:37:7F:4D:23:96:47:E3:C5:3B:B7:3F:4C:3D:AF:12:6B:CA:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/7e61e908-169f-33b7-a055-27c63e9911e5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl

            X509v3 Authority Key Identifier:
                keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.153.244.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:ef:36:92:a1:5f:f5:82:da:11:02:39:9f:40:40:29:34:85:
         3b:86:72:c4:19:81:e4:24:01:06:51:fb:00:cb:8d:b8:73:89:
         5f:c8:0f:23:2d:7b:2b:fe:0a:b8:64:6f:13:ec:b1:c9:e4:22:
         11:d2:ce:d9:e5:7c:7b:34:19:3f:17:31:2e:50:30:f5:4b:9d:
         76:e9:85:1b:6d:43:8c:e0:e6:61:b1:db:38:f6:94:45:33:d0:
         e9:a8:12:89:2b:97:35:f2:da:48:17:99:35:6f:a6:f3:49:32:
         8b:0c:ef:ee:c5:fc:88:c7:a9:bc:d5:58:fe:4f:9a:20:2a:39:
         7f:be:7c:84:3f:16:c0:e8:61:39:61:2b:7b:b0:87:12:f5:70:
         35:a3:2f:91:46:6c:63:80:eb:19:f2:25:5c:78:ea:56:97:68:
         a2:51:b8:15:04:0e:98:62:e8:e4:aa:4b:cd:ae:18:22:30:c7:
         89:7a:05:28:c9:55:6e:09:86:82:58:a9:fc:6f:22:9b:09:39:
         9f:e1:8c:d5:38:3f:78:b4:ae:5a:4c:6a:db:a6:9a:59:5d:ad:
         7d:f7:60:9c:70:15:0e:e8:6f:81:ed:9c:f2:7b:98:c2:88:a4:
         e7:4e:94:30:76:66:e7:96:62:1e:e1:2c:0a:2d:ff:22:8f:ab:
         d2:56:01:4f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEd0+6VvzAA2QQIhpoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh
N2Q5MB4XDTI0MTAwNzAxMDAzMVoXDTI1MDEwNTAyMDAzMVowLzEtMCsGA1UEAxMk
MzRiMDM4MDQtNDY4ZC00MTU2LWEzMzctN2Y0YjE0MWI3YjRmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvf40NFGFa9Etw09W3+7pFOAq40ak6QXROci6
iiRkRIxEbYELfmiyeBkWemLBC0zxHkig/updhG6wtRUtkZxllwS9UAg+VzxeZ9lZ
/O7BeJBA3+P3TgMET2a/MF5Q4coH2ylGJUCgBVWu615kzzuYhx5R4mo7orVDePH7
s4DyjZKf5k7qSE+iXI+BkB8Qhbl6ajUS69xFs0LY2xUfpf2u/dk3kjTcAPkNJ6tZ
WEHte7SSlaPZ3nvStip1lCAQDlgkTQ6cmX+pkKhUMmMHS//Qx824t2eFnRJQOudr
Bk8alPPG0LUozvvOkXRJ+et+fUkxz0PXVoQws9fWaImbUi4USQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEfVN39NI5ZH48U7tz9MPa8Sa8p9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw
ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvN2U2MWU5MDgtMTY5Zi0z
M2I3LWEwNTUtMjdjNjNlOTkxMWU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1
ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh
YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2
ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg5n0MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAILvNpKhX/WC2hECOZ9AQCk0hTuGcsQZgeQkAQZR+wDLjbhziV/IDyMt
eyv+CrhkbxPsscnkIhHSztnlfHs0GT8XMS5QMPVLnXbphRttQ4zg5mGx2zj2lEUz
0OmoEokrlzXy2kgXmTVvpvNJMosM7+7F/IjHqbzVWP5PmiAqOX++fIQ/FsDoYTlh
K3uwhxL1cDWjL5FGbGOA6xnyJVx46laXaKJRuBUEDphi6OSqS82uGCIwx4l6BSjJ
VW4JhoJYqfxvIpsJOZ/hjNU4P3i0rlpMatummlldrX33YJxwFQ7ob4HtnPJ7mMKI
pOdOlDB2ZueWYh7hLAot/yKPq9JWAU8=
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:49 2024 by rpki-client on console-fra.rpki-client.org