Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/bb2bc32d-cc6b-3226-bbeb-caa3e9feba3a.roa
File:                     bb2bc32d-cc6b-3226-bbeb-caa3e9feba3a.roa (raw, json)
Hash identifier:          tFZKKKoJ9VBCBRkCvLFPdvQeHJiSmTFAAipyi2gNi0A=
Subject key identifier:   5D:BD:DC:53:7E:A0:6D:C7:77:EF:22:46:67:7B:54:91:60:69:99:2A
Certificate issuer:       /CN=a340834d-d728-405c-95f1-caa6810aa7d9
Certificate serial:       010D0C9F432858474DE5F8E380751232CA27DF00
Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/bb2bc32d-cc6b-3226-bbeb-caa3e9feba3a.roa
Signing time:             Mon 23 Sep 2024 01:00:31 +0000
ROA not before:           Mon 23 Sep 2024 01:00:31 +0000
ROA not after:            Sun 22 Dec 2024 02:00:31 +0000
asID:                     136899
IP address blocks:        131.153.92.0/24 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:4d:e5:f8:e3:80:75:12:32:ca:27:df:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9
        Validity
            Not Before: Sep 23 01:00:31 2024 GMT
            Not After : Dec 22 02:00:31 2024 GMT
        Subject: CN=d7b30f61-3ec7-4e01-bfb1-562b60ec2d82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:c4:b8:72:2b:5c:28:43:0b:ab:7e:58:b4:2a:
                    94:8b:1a:5a:d8:60:6c:08:6b:82:89:61:fb:90:be:
                    96:04:17:59:88:62:71:cc:d3:ba:9f:6b:96:1c:a5:
                    78:c7:dd:c6:ae:7a:a8:fc:75:75:4c:14:6a:13:0e:
                    92:e5:f8:d9:bd:e2:30:79:34:51:43:4a:af:4c:f7:
                    1c:82:0b:a5:49:9d:ff:a0:bd:e9:d1:81:f7:53:c1:
                    1d:13:b4:8b:7c:ad:e5:71:94:40:85:0b:05:35:aa:
                    6e:cf:98:75:af:77:84:29:11:c6:67:d6:21:f9:91:
                    86:ac:c6:99:6a:56:f8:9a:ce:b5:02:85:e9:5f:a7:
                    bf:25:35:c2:af:15:27:9b:89:e6:cb:d6:b4:e8:d3:
                    e7:4c:bd:5a:67:23:ce:e0:f9:3b:44:b1:b6:64:4b:
                    a6:b5:2e:2e:6d:b7:45:5a:d6:f2:d4:d4:9c:96:2b:
                    62:24:ba:d6:42:fd:0c:e5:e9:d2:29:8d:67:6b:e1:
                    a3:33:89:5c:ab:34:d4:e1:55:74:73:e0:39:e0:7b:
                    d4:8e:af:c6:db:c7:b2:03:49:6d:e8:52:51:20:b1:
                    8b:08:62:ca:8f:55:2c:9f:9f:5d:0c:a5:b1:5d:1e:
                    e9:5d:78:81:98:8d:de:97:3e:b1:72:de:86:ca:31:
                    0c:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:BD:DC:53:7E:A0:6D:C7:77:EF:22:46:67:7B:54:91:60:69:99:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/bb2bc32d-cc6b-3226-bbeb-caa3e9feba3a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl

            X509v3 Authority Key Identifier:
                keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.153.92.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:35:34:a3:7f:b6:b2:f3:40:3b:3e:bf:82:c5:b0:27:fc:bb:
         13:4f:02:67:e1:33:97:83:09:ed:1b:eb:a0:71:d9:c0:56:5f:
         ae:01:2f:73:c9:f2:82:9c:6b:c5:d8:7f:69:83:f1:93:db:b5:
         d6:01:ac:02:09:af:e8:36:cc:15:7a:72:0e:77:f2:92:f0:45:
         39:f3:9d:d5:3d:82:d2:47:b5:c4:4d:2f:0e:d0:38:dc:be:1b:
         47:23:fc:56:17:c4:48:42:86:e4:1f:87:d3:fd:e6:81:93:84:
         9b:fb:14:50:25:af:87:91:4a:32:3d:bc:50:d5:53:48:95:7e:
         17:4c:60:4a:68:6f:aa:45:9a:08:bd:ea:e1:d9:6c:23:2a:63:
         f6:96:2f:05:c9:92:89:86:66:f4:aa:57:c1:ea:e2:c3:28:b2:
         2f:16:b2:51:98:36:fd:72:81:ae:ce:f5:9d:eb:ca:7d:e3:96:
         a9:2a:27:1f:47:aa:d5:b4:40:56:98:a6:06:14:eb:ad:9d:a3:
         84:71:8d:51:fb:9b:1b:67:06:29:ff:e7:cc:13:0c:6c:96:fd:
         c3:2f:bf:97:23:dc:6b:60:a4:79:b2:a7:e4:e9:ee:e8:9a:9c:
         7b:59:ff:9c:9e:3f:d8:9c:23:f3:53:3c:ff:d5:b3:e4:d4:e7:
         53:31:a1:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:49 2024 by rpki-client on console-fra.rpki-client.org