Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/9e468c02-912e-327f-a060-95177befb6a0.roa
File:                     9e468c02-912e-327f-a060-95177befb6a0.roa (raw, json)
Hash identifier:          6OTHjvttVwRTueL3eeEx9PdIdpyVTcYlqKCvWnHa2g4=
Subject key identifier:   0C:32:A0:81:54:3E:2A:A0:01:65:8E:1F:87:AE:89:D2:FA:BE:50:AC
Certificate issuer:       /CN=a340834d-d728-405c-95f1-caa6810aa7d9
Certificate serial:       010D0C9F432858474F4B6E59675C28F504F789A8
Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/9e468c02-912e-327f-a060-95177befb6a0.roa
Signing time:             Mon 23 Sep 2024 13:00:40 +0000
ROA not before:           Mon 23 Sep 2024 13:00:40 +0000
ROA not after:            Sun 22 Dec 2024 14:00:40 +0000
asID:                     12189
IP address blocks:        131.153.136.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:4f:4b:6e:59:67:5c:28:f5:04:f7:89:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9
        Validity
            Not Before: Sep 23 13:00:40 2024 GMT
            Not After : Dec 22 14:00:40 2024 GMT
        Subject: CN=2e2cf436-fbb2-4e0f-b176-f84db487ef9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:17:77:35:3d:1c:c6:b2:19:7e:8f:f6:74:cb:
                    af:f1:cf:1f:c1:ea:26:6b:2c:68:88:30:96:99:9a:
                    ba:1a:e3:56:21:1c:f0:e0:d5:dc:a5:f1:5e:79:2b:
                    c5:09:44:79:0d:54:ca:6a:7d:80:c4:4f:2c:f7:c3:
                    6a:86:0b:10:61:cb:8b:46:71:c8:7b:f4:ac:90:48:
                    d3:a0:a1:e5:61:4d:24:65:1e:cf:17:b5:63:63:c3:
                    8a:eb:f9:8d:85:36:02:5e:99:1b:02:73:5f:7a:6c:
                    ac:a0:a6:e1:39:1b:5b:fd:28:4d:d8:a4:05:03:ba:
                    cf:e8:2f:f4:7c:ba:5b:54:82:d7:df:e6:18:7e:d2:
                    89:ce:1a:33:13:ca:95:52:4a:33:db:d8:91:3e:a6:
                    66:f5:05:da:15:31:e3:75:1e:40:bc:8a:65:30:e8:
                    1d:51:d8:33:49:55:98:d4:dd:0d:60:62:ec:25:15:
                    22:94:aa:3c:e7:7b:ba:2c:10:5a:c7:84:99:31:99:
                    c6:19:f9:63:52:b9:15:af:da:38:2e:93:73:88:c6:
                    eb:b5:c5:ea:26:ec:62:03:fc:3e:d2:72:5a:50:7d:
                    fe:5f:f7:2a:b0:f6:e4:f6:39:66:e7:74:3d:7e:2e:
                    27:7d:f4:8b:1c:ec:5f:65:97:05:d0:18:14:9f:ab:
                    be:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:32:A0:81:54:3E:2A:A0:01:65:8E:1F:87:AE:89:D2:FA:BE:50:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/9e468c02-912e-327f-a060-95177befb6a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl

            X509v3 Authority Key Identifier:
                keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.153.136.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:6b:4f:a4:ee:2c:b9:8d:cf:c6:98:73:9c:08:07:3d:fe:37:
         46:a0:54:1a:03:e6:8c:5c:36:9e:41:44:f7:82:3e:7d:24:15:
         e0:1b:c9:52:d8:b8:06:20:54:77:7c:f9:ca:01:6b:8c:bc:a0:
         c0:19:fc:38:ec:84:ae:6d:09:6c:39:79:24:dd:4b:16:fa:9d:
         da:5a:ff:37:89:65:27:30:20:41:54:57:e4:af:60:73:87:07:
         57:64:b9:ba:a7:f9:18:a4:e5:56:a5:f6:2e:db:18:a4:d9:a7:
         88:95:94:ff:e9:2e:f0:9e:48:d0:94:64:c1:86:ff:7a:08:e2:
         fb:67:dd:38:e8:94:1e:45:a7:44:20:6e:4f:0d:eb:5a:f5:e7:
         c6:f7:d8:c9:3b:25:7b:ad:68:be:85:c9:39:07:61:de:91:19:
         2c:f7:a4:5a:c8:55:14:ba:91:e0:42:74:d3:6b:b6:67:76:15:
         26:80:6b:88:e6:3a:cb:8a:71:37:7c:82:76:a5:93:39:ad:99:
         46:4f:0a:63:d3:19:f6:83:28:ab:9b:c6:7b:66:d1:d6:de:50:
         b8:37:0a:bf:2b:e5:f5:43:95:4e:41:34:73:5f:b7:cb:c4:8b:
         37:59:8a:25:67:e7:71:ef:b0:05:b2:c5:87:02:c7:68:b7:d6:
         7d:cb:cc:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:48:52 2024 by rpki-client on console-ams.rpki-client.org