Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/ae5ad5b6-1e7e-33fe-8e48-b4014fbaf2d6.roa
File:                     ae5ad5b6-1e7e-33fe-8e48-b4014fbaf2d6.roa (raw, json)
Hash identifier:          JLLSxYZmnC7a1i/AckAoND2oUbPtRJwuyWblUdq9EhE=
Subject key identifier:   5C:EE:93:B9:F4:CD:CC:22:B1:37:51:A0:9B:17:C0:38:88:5B:72:90
Certificate issuer:       /CN=a340834d-d728-405c-95f1-caa6810aa7d9
Certificate serial:       010D0C9F432858474DE5F82BBB08A56752E28E80
Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/ae5ad5b6-1e7e-33fe-8e48-b4014fbaf2d6.roa
Signing time:             Mon 23 Sep 2024 01:00:31 +0000
ROA not before:           Mon 23 Sep 2024 01:00:31 +0000
ROA not after:            Sun 22 Dec 2024 02:00:31 +0000
asID:                     19181
IP address blocks:        131.153.57.0/24 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:4d:e5:f8:2b:bb:08:a5:67:52:e2:8e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9
        Validity
            Not Before: Sep 23 01:00:31 2024 GMT
            Not After : Dec 22 02:00:31 2024 GMT
        Subject: CN=8f10b803-735b-48de-bd1b-a3bf0c5451eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:48:0f:5f:cc:de:52:61:f1:d6:b1:16:07:2d:
                    19:a0:10:a4:54:d7:54:32:e8:5c:11:53:f9:77:00:
                    30:60:6e:b9:9e:3f:98:b6:0f:bd:09:29:0b:ce:c6:
                    c0:9a:83:83:8d:27:9a:8d:89:dd:74:f5:f6:38:33:
                    c7:1d:04:98:9d:a6:4d:b2:ce:16:3e:be:c4:de:af:
                    21:64:b1:cb:c5:59:85:ad:e4:5d:2e:9b:9f:27:b4:
                    96:b9:05:28:8f:9e:fc:3f:73:87:f5:bf:ea:f7:44:
                    6e:0e:72:2a:f7:52:a8:19:2c:ad:9a:9e:be:ad:80:
                    41:c6:57:34:80:79:6a:09:70:c0:91:4b:83:23:0d:
                    a9:2e:28:e4:b7:33:59:22:ca:9c:66:07:8c:09:71:
                    b5:24:b4:a6:f9:de:9f:30:8c:2a:27:41:42:f6:e0:
                    6e:58:00:54:ce:24:a8:e1:30:68:5c:bb:c1:4a:28:
                    8c:1f:f0:89:cf:81:48:f4:ad:2c:d4:c6:df:4e:40:
                    63:49:2e:88:59:1f:71:d0:47:44:a8:13:15:f5:d3:
                    12:10:e6:72:d4:eb:16:33:b5:84:4d:b7:f8:91:fd:
                    c9:77:58:1a:d8:99:b8:ba:c1:08:ac:a3:21:f6:79:
                    51:f4:de:8f:6b:fb:64:8b:3c:9f:e3:84:f8:3e:1b:
                    37:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:EE:93:B9:F4:CD:CC:22:B1:37:51:A0:9B:17:C0:38:88:5B:72:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/ae5ad5b6-1e7e-33fe-8e48-b4014fbaf2d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl

            X509v3 Authority Key Identifier:
                keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.153.57.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:e2:a8:f4:4d:10:3b:76:48:e1:d6:47:ee:b2:43:b1:b6:95:
         e5:5e:2d:7b:9a:e8:c1:e1:e5:4d:4d:70:ec:dd:fc:31:2d:ed:
         68:14:b5:ce:11:29:2f:44:03:91:55:f4:4b:01:fc:7a:d2:a7:
         5d:1d:c1:65:e7:da:20:6c:be:36:64:10:af:f8:ae:18:b5:df:
         db:7e:c6:3e:bf:a1:b2:3f:5d:39:81:0b:88:ef:9a:65:e9:1e:
         ec:f9:d5:0e:8e:f1:4b:77:62:47:af:b6:c8:a8:e8:6d:2c:07:
         68:2f:08:56:61:52:dc:e5:c4:e5:75:20:eb:a1:d8:f6:a9:8a:
         d5:fc:a0:eb:75:e9:ad:05:8d:99:3d:75:72:9b:e9:9c:04:3f:
         ed:e5:e4:ff:0c:b3:ea:3e:4e:ac:f0:a8:21:ad:9e:67:b2:b5:
         3a:dc:3a:2e:04:94:7e:e3:a9:ea:ac:7a:4e:25:5d:3e:6a:47:
         d6:96:2e:21:2c:ce:80:1f:d5:17:2b:c8:dd:df:24:4e:54:ec:
         41:07:f0:d5:d5:90:b9:19:5a:e8:50:e3:ab:54:89:cb:e9:75:
         9f:51:81:94:37:05:6a:22:20:04:06:49:45:17:aa:a6:23:51:
         23:4e:2d:6e:e7:88:51:18:cf:38:3f:08:3a:3d:37:5b:11:79:
         b7:1e:a3:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:48:52 2024 by rpki-client on console-ams.rpki-client.org