Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/b31675c0-2c36-3160-853a-bfd750bd4d40.roa
File:                     b31675c0-2c36-3160-853a-bfd750bd4d40.roa (raw, json)
Hash identifier:          ehszHNgm5GG+J1PFDeSoGjB15nTon4ijY0B07q89y04=
Subject key identifier:   E0:63:E2:F7:4E:E5:9E:1F:84:7E:78:38:D5:6C:84:7B:96:D4:4C:E2
Certificate issuer:       /CN=a340834d-d728-405c-95f1-caa6810aa7d9
Certificate serial:       010D0C9F432858474F4B6F2C483E5BE4E88CBF18
Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/b31675c0-2c36-3160-853a-bfd750bd4d40.roa
Signing time:             Mon 23 Sep 2024 13:00:40 +0000
ROA not before:           Mon 23 Sep 2024 13:00:40 +0000
ROA not after:            Sun 22 Dec 2024 14:00:40 +0000
asID:                     20454
IP address blocks:        131.153.38.0/23 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:4f:4b:6f:2c:48:3e:5b:e4:e8:8c:bf:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9
        Validity
            Not Before: Sep 23 13:00:40 2024 GMT
            Not After : Dec 22 14:00:40 2024 GMT
        Subject: CN=dc3fe4a4-56b3-432b-9631-424c1a05178c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:cd:24:ab:c4:f5:a6:b5:f1:94:79:b3:28:04:
                    ae:b4:83:21:23:a3:9b:7b:55:48:54:de:0b:07:43:
                    da:53:3d:12:33:6a:93:f8:dd:db:a6:10:2d:84:73:
                    d8:9b:11:ac:72:1c:7d:89:e7:bf:ec:62:e2:b2:15:
                    e6:f0:13:3e:11:b8:76:e4:25:b3:05:3f:6c:67:4f:
                    27:1a:f4:a6:a9:ce:e4:3f:e7:bb:53:87:ef:bd:c3:
                    f3:9e:0f:9b:5d:ee:08:7c:e3:5f:c8:02:bc:be:be:
                    fa:80:66:f0:fe:dc:26:08:55:45:c9:71:26:9f:fe:
                    a6:5f:f9:59:0a:9e:82:58:ea:40:11:e2:bb:c6:2f:
                    a2:f6:b3:64:54:88:e8:0e:d5:70:5e:34:c3:fe:29:
                    f2:eb:3f:39:13:a0:c6:87:b5:cc:10:69:6f:20:9a:
                    3f:b7:19:c0:4d:8a:13:a2:89:ef:07:3a:db:32:5f:
                    33:bb:37:62:b2:72:d6:59:9a:14:24:3c:ec:ed:1a:
                    06:5c:fb:97:38:a0:f6:a6:37:0c:1e:01:9c:93:4e:
                    7a:28:ae:d3:70:dc:c4:32:4d:d2:df:bb:02:2a:eb:
                    c5:d8:97:2b:0d:1f:2e:92:45:3c:57:2d:e9:d5:e3:
                    60:a1:bd:7c:43:ce:3c:6c:ab:14:f3:bd:67:79:50:
                    6c:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:63:E2:F7:4E:E5:9E:1F:84:7E:78:38:D5:6C:84:7B:96:D4:4C:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/b31675c0-2c36-3160-853a-bfd750bd4d40.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl

            X509v3 Authority Key Identifier:
                keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.153.38.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:b1:b5:d9:5c:e4:06:08:dd:2d:ce:44:7d:e7:39:88:74:1a:
         00:20:55:09:71:da:c5:4f:9a:14:e2:1a:9f:64:bd:e5:fc:8e:
         71:85:c1:ba:b3:35:02:64:99:e7:c0:14:9b:89:18:66:27:dd:
         75:be:52:3c:bf:41:6a:9e:d9:63:09:a5:24:37:a4:b4:26:e9:
         36:50:65:c8:6a:fc:10:01:fc:3c:c7:5e:3f:94:12:7b:c3:e6:
         dd:c4:cf:95:bb:e6:ef:d9:ea:3a:c1:71:2c:aa:a0:11:9e:34:
         ef:d1:90:79:36:38:8c:4c:8a:6f:61:8e:79:c0:57:a3:cb:8b:
         00:40:ed:88:89:54:f1:96:52:4c:34:01:ea:16:1d:eb:5a:13:
         39:d5:8c:61:9b:8d:5f:91:da:82:82:71:0e:20:c5:af:c7:01:
         f8:76:39:f5:aa:bc:70:d6:7a:b4:b6:61:49:3f:3c:aa:5a:c2:
         f7:ce:db:b2:6c:19:73:81:e0:82:c4:8e:eb:e2:bb:2c:95:c7:
         81:48:1d:9a:07:a4:e1:cf:44:9c:bd:74:18:5c:fe:58:68:0b:
         98:75:46:af:a4:7a:d0:ea:dc:82:7d:bc:76:c4:6e:c9:30:65:
         7a:f4:8b:06:54:ec:39:81:6a:c2:33:68:e1:90:8d:bc:ce:8b:
         19:98:f0:12
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdPS28sSD5b5OiMvxgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh
N2Q5MB4XDTI0MDkyMzEzMDA0MFoXDTI0MTIyMjE0MDA0MFowLzEtMCsGA1UEAxMk
ZGMzZmU0YTQtNTZiMy00MzJiLTk2MzEtNDI0YzFhMDUxNzhjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgc0kq8T1prXxlHmzKASutIMhI6Obe1VIVN4L
B0PaUz0SM2qT+N3bphAthHPYmxGschx9iee/7GLishXm8BM+Ebh25CWzBT9sZ08n
GvSmqc7kP+e7U4fvvcPzng+bXe4IfONfyAK8vr76gGbw/twmCFVFyXEmn/6mX/lZ
Cp6CWOpAEeK7xi+i9rNkVIjoDtVwXjTD/iny6z85E6DGh7XMEGlvIJo/txnATYoT
oonvBzrbMl8zuzdisnLWWZoUJDzs7RoGXPuXOKD2pjcMHgGck056KK7TcNzEMk3S
37sCKuvF2JcrDR8ukkU8Vy3p1eNgob18Q848bKsU871neVBs0wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOBj4vdO5Z4fhH54ONVshHuW1EziMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw
ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvYjMxNjc1YzAtMmMzNi0z
MTYwLTg1M2EtYmZkNzUwYmQ0ZDQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1
ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh
YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2
ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBg5kmMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG+xtdlc5AYI3S3ORH3nOYh0GgAgVQlx2sVPmhTiGp9kveX8jnGFwbqz
NQJkmefAFJuJGGYn3XW+Ujy/QWqe2WMJpSQ3pLQm6TZQZchq/BAB/DzHXj+UEnvD
5t3Ez5W75u/Z6jrBcSyqoBGeNO/RkHk2OIxMim9hjnnAV6PLiwBA7YiJVPGWUkw0
AeoWHetaEznVjGGbjV+R2oKCcQ4gxa/HAfh2OfWqvHDWerS2YUk/PKpawvfO27Js
GXOB4ILEjuviuyyVx4FIHZoHpOHPRJy9dBhc/lhoC5h1Rq+ketDq3IJ9vHbEbskw
ZXr0iwZU7DmBasIzaOGQjbzOixmY8BI=
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:48:52 2024 by rpki-client on console-ams.rpki-client.org