Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/892a7b30-2efc-3c79-b6b7-d71e141ae8e5.roa
File:                     892a7b30-2efc-3c79-b6b7-d71e141ae8e5.roa (raw, json)
Hash identifier:          jGaI/LiNp5gl8txO/fZiRSrcXYzR8CdDgD7PKpvZVYU=
Subject key identifier:   8D:8E:F5:6F:E8:13:AF:18:89:60:6B:41:3F:10:DB:63:A1:51:F1:DF
Certificate issuer:       /CN=a340834d-d728-405c-95f1-caa6810aa7d9
Certificate serial:       010D0C9F432858474DE5F7A3A6A95BF9F19CCA00
Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/892a7b30-2efc-3c79-b6b7-d71e141ae8e5.roa
Signing time:             Mon 23 Sep 2024 01:00:31 +0000
ROA not before:           Mon 23 Sep 2024 01:00:31 +0000
ROA not after:            Sun 22 Dec 2024 02:00:31 +0000
asID:                     19437
IP address blocks:        131.153.44.0/24 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:4d:e5:f7:a3:a6:a9:5b:f9:f1:9c:ca:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9
        Validity
            Not Before: Sep 23 01:00:31 2024 GMT
            Not After : Dec 22 02:00:31 2024 GMT
        Subject: CN=4b2ec268-d020-4cee-8174-8b8a52f5cc1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:c6:f9:31:a9:f5:db:4d:57:a6:80:ce:1c:b6:
                    bb:a6:c8:c1:97:84:93:b0:48:6a:68:4c:b5:35:53:
                    91:a2:02:b3:25:3f:fb:53:f5:f2:da:1f:03:05:ce:
                    2b:d6:8c:24:ba:62:c2:1b:2f:f5:0d:ff:df:aa:88:
                    19:96:b6:ad:ac:9e:1c:2b:d0:c9:14:ea:f0:e8:d9:
                    b3:45:3e:60:7d:18:7f:ca:0d:de:3c:3b:f5:3c:b5:
                    f0:02:f1:ab:47:91:2b:a2:c7:18:87:57:86:0e:52:
                    a1:d1:4b:bb:18:53:aa:ed:4e:c4:72:a6:b1:9b:77:
                    51:17:d9:0b:6f:a5:7e:ef:97:90:1b:b3:18:04:9c:
                    ae:41:0f:cc:04:ef:01:eb:99:3d:f4:3f:c5:4f:a9:
                    56:30:de:30:b2:73:8b:4c:a4:bc:16:17:e4:e4:63:
                    f1:bd:85:ae:d3:f0:3b:f1:ba:3e:a1:c6:08:6c:8c:
                    dc:14:ed:d5:6a:3d:ef:25:0d:8b:e2:fd:01:72:8e:
                    3c:fa:87:5d:de:f1:12:c2:fc:e0:59:cb:a8:02:cd:
                    39:36:75:00:d7:7d:a1:65:ae:26:f3:5b:90:87:63:
                    0f:03:2c:7f:f4:06:dd:a1:a1:06:36:a6:f8:38:c4:
                    72:b7:30:60:15:6a:53:f7:0e:9e:af:ab:f8:a2:3a:
                    df:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:8E:F5:6F:E8:13:AF:18:89:60:6B:41:3F:10:DB:63:A1:51:F1:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/892a7b30-2efc-3c79-b6b7-d71e141ae8e5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl

            X509v3 Authority Key Identifier:
                keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.153.44.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:99:af:be:86:1d:11:75:8e:70:06:00:5d:b6:8b:6c:d1:3c:
         52:8c:b2:67:a7:4d:6c:73:91:63:07:44:3d:7d:90:cb:aa:13:
         1e:57:15:7c:a1:05:37:ea:19:34:c9:0a:cb:47:87:14:be:b3:
         87:56:f9:92:a1:a8:69:4c:75:7f:a4:44:81:09:04:e6:2d:e9:
         45:a3:89:bf:74:09:aa:10:61:c0:fd:f4:c1:25:fd:1b:e5:82:
         00:79:22:b8:6d:c0:c0:bc:22:4f:e7:72:17:f9:7a:fa:83:c0:
         30:00:99:90:d6:07:85:2e:ae:02:61:55:6b:3f:81:71:73:a6:
         36:59:d7:c6:24:4f:15:df:12:c7:b6:92:ca:5b:c0:8e:3b:21:
         6c:ad:d2:8d:38:e1:47:bf:99:7c:1a:3d:b6:b7:97:c8:9e:b0:
         6f:a0:c6:6f:3d:40:cc:91:5c:3b:5c:75:23:97:b2:a1:50:99:
         de:1d:01:3b:6e:43:1b:22:80:45:ac:52:71:e1:0a:7f:71:09:
         7f:0c:8b:1d:76:d1:79:4d:ea:48:ea:da:48:fa:cc:0e:a2:b3:
         ef:a3:5e:15:eb:99:ba:79:e8:62:d7:fe:3a:82:c0:08:63:16:
         66:43:35:04:f2:38:b9:75:0c:47:25:ea:04:dc:1a:88:cb:22:
         c9:9e:88:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:48:52 2024 by rpki-client on console-ams.rpki-client.org