Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/cd1d2995-4610-3bd4-b98d-17721b22293f.roa
File:                     cd1d2995-4610-3bd4-b98d-17721b22293f.roa (raw, json)
Hash identifier:          2FOj9yfZ6Dd/ZApwvoG665sSzKvarnM+23LQnY1LOvQ=
Subject key identifier:   BA:EF:10:42:1B:CA:3E:FC:EB:AF:01:B7:EF:C7:51:97:19:F5:FF:A9
Certificate issuer:       /CN=a340834d-d728-405c-95f1-caa6810aa7d9
Certificate serial:       010D0C9F432858474DE5FC5B706CD16B7BE92980
Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/cd1d2995-4610-3bd4-b98d-17721b22293f.roa
Signing time:             Mon 23 Sep 2024 01:00:31 +0000
ROA not before:           Mon 23 Sep 2024 01:00:31 +0000
ROA not after:            Sun 22 Dec 2024 02:00:31 +0000
asID:                     60558
IP address blocks:        131.153.86.0/24 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:4d:e5:fc:5b:70:6c:d1:6b:7b:e9:29:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9
        Validity
            Not Before: Sep 23 01:00:31 2024 GMT
            Not After : Dec 22 02:00:31 2024 GMT
        Subject: CN=70346a15-8de3-479b-843a-f7a282161497
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:26:68:19:52:be:dc:30:bd:bc:da:9b:37:54:
                    06:33:7b:fb:74:64:9e:75:e9:16:f9:f2:43:c0:98:
                    fa:f6:a2:c0:b8:ed:b5:38:05:6f:13:2f:da:cd:63:
                    73:2c:a1:6d:64:ca:a4:b7:b0:71:81:cb:8e:85:88:
                    cd:96:69:ef:0e:ae:72:4d:8f:76:7e:81:9a:38:65:
                    7a:25:5c:bb:0a:ab:d6:f9:de:fb:9e:c5:ad:c6:7a:
                    e1:cc:46:8c:60:72:22:71:a2:7c:4b:22:e2:7b:4f:
                    9d:69:79:c7:76:88:5a:d7:24:f8:e1:20:fb:32:93:
                    05:2b:ae:6d:af:24:a2:e9:3a:e5:2a:8e:7e:e5:18:
                    a2:1f:a1:25:5f:38:63:8e:09:ea:bc:d1:6e:e4:6f:
                    8a:c2:45:d8:a9:c9:ff:7a:b3:ab:db:15:ad:b4:14:
                    ef:63:41:76:16:43:e5:87:b7:fc:c0:e8:1e:f5:03:
                    5e:09:a7:d4:de:38:1e:4c:df:34:2b:fd:b0:31:ef:
                    f8:99:82:b9:ec:b1:70:23:ae:dd:81:80:b2:a8:3b:
                    ce:81:66:a8:7c:cf:63:6d:66:a8:57:76:9a:e5:e6:
                    30:96:af:93:50:36:8b:b6:9f:76:9a:58:4e:51:02:
                    c9:ed:1d:52:3b:e2:bd:f5:4a:07:d7:db:ac:bb:1b:
                    b1:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:EF:10:42:1B:CA:3E:FC:EB:AF:01:B7:EF:C7:51:97:19:F5:FF:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/cd1d2995-4610-3bd4-b98d-17721b22293f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl

            X509v3 Authority Key Identifier:
                keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.153.86.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:4a:37:5e:c4:d4:ab:f8:7c:d0:eb:b8:ba:42:63:4f:1b:9a:
         26:90:df:d7:8f:cf:ca:ce:75:51:42:c8:af:2e:d6:2f:e6:d2:
         50:58:d9:5e:7f:2c:28:28:42:3f:48:30:59:6e:ac:ff:3b:04:
         26:55:01:27:e8:14:82:28:44:08:a4:cd:d6:3b:df:aa:4a:55:
         b9:4a:2a:b5:b5:e7:15:ae:ac:a7:c9:af:a7:7f:45:98:97:58:
         b7:e9:ce:1a:76:0b:33:85:b7:9c:e5:27:07:cd:b5:54:92:55:
         83:c3:61:6b:28:f7:06:72:47:5c:d8:d4:83:96:c5:11:32:2b:
         01:4b:8c:d7:f8:35:b2:32:90:1e:03:1c:5b:31:2c:a6:25:7f:
         2c:f2:37:e3:95:f2:27:79:8e:ab:58:a2:fd:0e:98:01:50:f6:
         24:84:e3:8f:d3:a6:03:8d:5a:c8:85:df:03:98:98:dc:b1:06:
         85:3b:1b:80:0d:86:5c:61:00:3f:af:7b:be:61:cc:4e:32:f1:
         ed:ba:fa:11:de:ab:29:8e:f6:33:6d:4a:fb:72:ac:a5:ae:87:
         41:b0:36:cd:dc:83:ec:e3:d5:f9:b8:08:29:7c:c8:0a:b1:8b:
         3d:04:df:2b:84:05:1d:3f:6c:20:e5:dc:8c:68:da:26:af:f9:
         85:81:6b:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:49 2024 by rpki-client on console-fra.rpki-client.org