Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/cbc1f567-c14a-38d1-917a-e3f1f193c5f5.roa
File:                     cbc1f567-c14a-38d1-917a-e3f1f193c5f5.roa (raw, json)
Hash identifier:          aSMFt6OpmYbuYZzMMxRLcDZsEOQy2ClHB+ixRBowRno=
Subject key identifier:   21:CD:2A:CA:D5:88:B8:6C:CF:88:40:CF:28:66:F1:67:5B:C0:D7:98
Certificate issuer:       /CN=a340834d-d728-405c-95f1-caa6810aa7d9
Certificate serial:       010D0C9F43285847537B5A26635277B6EC2B9EC0
Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/cbc1f567-c14a-38d1-917a-e3f1f193c5f5.roa
Signing time:             Wed 25 Sep 2024 01:00:31 +0000
ROA not before:           Wed 25 Sep 2024 01:00:31 +0000
ROA not after:            Tue 24 Dec 2024 02:00:31 +0000
asID:                     19437
IP address blocks:        131.153.200.0/23 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:53:7b:5a:26:63:52:77:b6:ec:2b:9e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9
        Validity
            Not Before: Sep 25 01:00:31 2024 GMT
            Not After : Dec 24 02:00:31 2024 GMT
        Subject: CN=1eae92bf-61dd-41df-aab7-12b244fe4559
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:d4:ea:4d:d5:d6:13:7b:90:ec:d6:91:20:9a:
                    9a:ab:90:b5:2d:0a:cf:6e:6e:79:0c:b2:d7:d4:1f:
                    86:d6:50:a8:89:e0:a9:e4:4a:6e:1f:c6:2c:30:c0:
                    6b:fe:19:5e:b7:f8:4b:28:6b:2f:be:8c:25:e0:81:
                    c0:d0:f1:ee:0d:14:f2:6a:e7:96:0e:60:c0:7e:6b:
                    e5:24:c8:8d:3b:f5:e5:88:f7:36:d0:c5:4e:05:9b:
                    59:f8:fd:67:c4:94:3f:14:1d:14:8c:6c:45:28:a1:
                    96:a4:96:0a:fa:9c:39:a5:5c:fb:c1:7d:56:38:6d:
                    0d:16:95:f7:bb:c6:69:74:ab:7f:3e:b2:55:66:4a:
                    1c:5d:eb:4a:da:40:b8:ff:c5:4a:3a:7c:11:e7:9f:
                    30:f9:87:97:e1:0e:d5:26:16:3a:f1:f9:4f:70:f7:
                    89:a0:ad:0d:ec:6a:46:af:66:ac:74:86:fb:d5:8c:
                    5d:6a:56:9f:56:05:a4:16:f1:fe:c7:28:5a:fb:17:
                    b5:6f:5e:20:ec:06:bc:2c:08:d7:c7:b3:5c:a9:a6:
                    de:7f:06:68:49:6d:18:bf:dd:b5:13:2d:d2:6a:7e:
                    09:c5:8f:79:e4:e5:fa:5c:6b:75:ee:e4:c6:3b:4c:
                    5b:ca:29:78:38:e9:72:bb:de:09:d2:95:8b:d9:46:
                    f3:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:CD:2A:CA:D5:88:B8:6C:CF:88:40:CF:28:66:F1:67:5B:C0:D7:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/cbc1f567-c14a-38d1-917a-e3f1f193c5f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl

            X509v3 Authority Key Identifier:
                keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.153.200.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:9a:c0:a1:9c:7f:28:b9:af:60:03:f9:65:f4:51:e4:57:d1:
         bd:ed:f8:d3:de:7e:a4:45:d5:25:31:c1:47:68:fb:59:ec:ee:
         e9:38:c9:80:0b:65:65:4b:ca:04:2b:49:4c:fa:4a:cb:31:60:
         56:55:14:29:10:ff:1e:a3:d9:e1:41:d7:9a:a0:b5:c8:0f:c7:
         d6:f5:3d:2f:50:89:ae:06:04:0f:69:d7:e7:94:1b:54:40:11:
         6b:bf:36:8e:83:93:b0:43:90:a3:c3:39:2b:df:45:f9:df:31:
         93:d2:bb:2c:e0:3c:b8:0f:61:e1:cf:03:e9:2f:f0:b6:06:a1:
         5e:97:b0:3b:85:0e:71:82:e4:bd:2a:d1:00:b1:5d:e1:16:b3:
         23:61:cb:ac:b0:c2:a2:75:f0:cc:43:e1:de:e5:43:03:ec:7e:
         2e:ea:d8:91:7f:62:71:88:61:d3:b7:c3:6d:a1:58:c2:6d:bd:
         44:f5:38:48:7c:4b:91:c7:93:53:e5:1b:5e:e7:dc:21:46:50:
         06:7e:2c:3e:22:ba:26:70:3d:5c:c9:a5:83:84:49:be:26:b7:
         02:08:52:cd:4b:9e:84:bb:1b:8f:c1:65:84:4b:ab:bc:81:10:
         4e:f1:e0:27:16:a9:f3:3c:a8:75:e5:2b:a6:f5:28:bb:a6:f2:
         69:48:97:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 21:48:43 2024 by rpki-client on console-ams.rpki-client.org