Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/ac5492f6-7473-38cf-b089-8eb390c48316.roa
File:                     ac5492f6-7473-38cf-b089-8eb390c48316.roa (raw, json)
Hash identifier:          do8nUKhqnaWubGUy+D0EoM29KfGTyOzvRYm3SjU5FXk=
Subject key identifier:   DB:AB:1A:C7:52:0F:8B:82:50:11:6B:89:8A:BB:C9:28:1C:12:49:6E
Certificate issuer:       /CN=a340834d-d728-405c-95f1-caa6810aa7d9
Certificate serial:       010D0C9F432858474DE5FBEF9933173CD6C71280
Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/ac5492f6-7473-38cf-b089-8eb390c48316.roa
Signing time:             Mon 23 Sep 2024 01:00:31 +0000
ROA not before:           Mon 23 Sep 2024 01:00:31 +0000
ROA not after:            Sun 22 Dec 2024 02:00:31 +0000
asID:                     19181
IP address blocks:        131.153.58.0/23 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:4d:e5:fb:ef:99:33:17:3c:d6:c7:12:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9
        Validity
            Not Before: Sep 23 01:00:31 2024 GMT
            Not After : Dec 22 02:00:31 2024 GMT
        Subject: CN=7e1c33cd-025f-47dd-b0d5-c22e9e6e10f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:4e:2e:8b:f1:1b:6a:25:35:02:0f:7f:b4:e2:
                    c6:48:46:c0:5d:99:5b:61:db:97:fb:a1:e2:ca:fa:
                    52:06:e4:58:41:d7:e0:80:b0:1d:1e:18:fa:7f:42:
                    36:cb:a6:4c:49:d6:ae:8b:75:bb:41:8a:eb:d8:b4:
                    24:74:0c:9f:99:89:59:b2:16:f4:78:84:a1:b7:bd:
                    2f:3e:1c:ae:6f:ff:88:0a:d3:8f:e5:2b:b4:e8:48:
                    14:d7:2b:85:56:4a:e0:0e:05:0f:13:b4:5b:a9:3c:
                    9c:f9:b8:d8:68:48:60:43:b3:02:c7:e6:cc:be:18:
                    6b:30:6d:87:a4:66:93:5a:aa:59:8c:09:8f:11:8b:
                    b1:46:c7:e0:3e:65:77:e8:30:ce:13:8c:96:57:13:
                    81:8a:31:94:36:c8:ff:0f:2c:7b:ef:b3:bd:ab:a9:
                    76:80:35:9b:1a:76:49:6d:a2:5f:4b:0b:5f:cd:36:
                    23:ad:13:fb:4e:55:fb:ed:48:17:41:6f:05:47:a8:
                    bb:41:4e:8b:ef:08:6c:a1:5b:14:6c:39:9d:98:0a:
                    e6:ff:0e:0a:a2:72:6d:20:a9:80:d7:b7:2a:35:d2:
                    14:4e:0a:97:33:69:c5:23:c0:4e:16:64:94:c7:b8:
                    dd:e0:66:5f:4e:24:56:9f:13:e7:d5:3d:97:77:67:
                    f8:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:AB:1A:C7:52:0F:8B:82:50:11:6B:89:8A:BB:C9:28:1C:12:49:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/ac5492f6-7473-38cf-b089-8eb390c48316.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl

            X509v3 Authority Key Identifier:
                keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.153.58.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:e0:48:f8:1c:75:5b:18:50:c3:72:53:90:22:d1:1b:e5:49:
         c1:0b:99:ac:45:d5:51:fe:e7:d0:c7:5e:61:bc:2a:47:c7:ed:
         f0:de:18:33:9b:66:93:77:07:3e:eb:4a:26:c4:4d:3a:2c:61:
         c0:14:44:1f:84:b9:c6:1f:f9:e6:c7:3e:cb:bf:f5:5a:56:5e:
         3d:3b:07:53:9f:f2:81:52:e0:1f:4a:02:71:74:d2:54:d8:4c:
         21:e4:b8:40:ce:9d:06:d7:7c:63:a6:3d:75:2f:26:79:f8:14:
         bd:97:85:f3:6d:c0:b5:3b:5f:98:82:96:8b:34:45:b2:f6:db:
         bb:37:59:9f:11:5f:5d:2c:90:dc:57:61:c8:c4:6c:54:18:45:
         44:74:3c:89:44:5d:79:e0:4a:bd:8c:06:0a:8e:c8:f4:24:56:
         29:3a:db:71:7a:97:85:e3:0d:ef:11:1e:e7:b9:e5:57:56:10:
         12:d0:08:75:ae:dc:5b:38:a1:85:52:c9:65:46:ae:dc:dc:a0:
         8e:b6:69:32:3c:62:4c:6a:b1:cc:b7:33:37:f2:a3:c3:22:0d:
         84:3a:7c:2d:b0:d2:e8:ce:df:ac:b1:67:15:ac:d8:ea:a9:7e:
         1a:41:52:fd:a8:46:15:c1:c8:d4:d2:d5:a8:48:97:cd:a4:0a:
         62:8f:52:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:49 2024 by rpki-client on console-fra.rpki-client.org