Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/ec914c46-61ef-30cf-8167-eaf87809abdd.roa
File:                     ec914c46-61ef-30cf-8167-eaf87809abdd.roa (raw, json)
Hash identifier:          Gw/XoyqzqWCCtCOm5Le/ZtngmPIHDwP+3P9SeEXGqbk=
Subject key identifier:   FE:B2:0F:72:E5:1A:4E:AC:DB:48:CD:DB:AE:13:1F:CE:5C:42:2C:33
Certificate issuer:       /CN=a340834d-d728-405c-95f1-caa6810aa7d9
Certificate serial:       010D0C9F432858474DE5FCC49E85A6FBD10BC5C0
Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/ec914c46-61ef-30cf-8167-eaf87809abdd.roa
Signing time:             Mon 23 Sep 2024 01:00:31 +0000
ROA not before:           Mon 23 Sep 2024 01:00:31 +0000
ROA not after:            Sun 22 Dec 2024 02:00:31 +0000
asID:                     210266
IP address blocks:        131.153.109.0/24 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:4d:e5:fc:c4:9e:85:a6:fb:d1:0b:c5:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9
        Validity
            Not Before: Sep 23 01:00:31 2024 GMT
            Not After : Dec 22 02:00:31 2024 GMT
        Subject: CN=6cdc8442-6895-498b-bc4d-56cabc951e5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:a8:6d:ee:0b:5f:65:19:30:be:49:04:0a:f7:
                    8f:7e:fc:ff:46:fa:d7:62:a6:68:98:b2:65:f2:a9:
                    99:14:fc:dc:bd:42:cc:bf:36:a6:11:f2:4a:0e:36:
                    b6:d7:d5:8c:95:40:b3:6d:9b:75:ad:9c:13:04:db:
                    ef:28:73:f8:42:bb:48:38:99:0b:e7:cc:f1:9e:2a:
                    f1:33:bd:17:91:8c:7b:7b:78:60:4b:aa:dc:09:d7:
                    45:83:bb:43:a5:a1:3b:de:2d:4d:fb:95:58:89:ec:
                    af:d5:3b:12:7b:eb:67:9c:91:d4:31:b3:eb:23:de:
                    93:be:28:91:f4:aa:01:69:a6:35:47:d8:b1:ca:25:
                    d4:86:cd:4b:8e:d2:4f:97:06:d7:c6:83:66:c9:4a:
                    9e:aa:a3:8d:69:f4:cd:f7:e8:2b:b5:c8:53:b2:c5:
                    26:b0:ae:df:dc:77:47:c2:83:62:e8:cd:fa:9e:a3:
                    9d:93:c1:75:50:89:dc:e7:54:fe:ca:f3:07:a0:f1:
                    8e:45:b0:c3:ba:b1:04:a4:96:80:2b:a7:91:b6:10:
                    3f:b8:e1:39:c4:68:fd:d6:2a:b0:45:b6:c2:b8:58:
                    8f:bd:ed:f0:37:23:87:fe:26:c2:33:a2:07:25:2d:
                    e3:7c:23:d6:77:11:ee:0f:fc:9d:5d:1b:91:56:20:
                    e2:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:B2:0F:72:E5:1A:4E:AC:DB:48:CD:DB:AE:13:1F:CE:5C:42:2C:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/ec914c46-61ef-30cf-8167-eaf87809abdd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl

            X509v3 Authority Key Identifier:
                keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.153.109.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:83:47:e9:47:c4:55:81:52:5f:3a:12:8b:87:f9:2a:83:52:
         b0:83:cb:af:b3:00:86:60:cc:00:73:2e:f0:86:06:84:d3:a7:
         6c:a9:f7:58:30:7a:a6:11:b8:a6:f7:2e:ec:76:c2:b0:0a:fa:
         ec:99:f0:c8:73:09:52:ab:b3:6d:a1:dc:30:ed:a9:87:6f:b3:
         3b:59:13:bd:27:53:a3:e0:9a:8e:09:78:f1:47:53:68:be:da:
         66:cc:5f:7e:a0:0c:4a:10:97:c6:38:22:80:fb:0e:d4:c6:43:
         4a:f6:82:72:46:66:7f:08:0a:b0:03:f2:72:2d:e2:d7:03:64:
         43:e0:6a:7d:e0:36:22:63:64:9c:5a:c6:f4:1a:9f:74:c3:eb:
         1b:87:c5:c0:2e:6a:ce:36:99:f0:72:7d:b8:6b:b7:6a:12:f8:
         57:97:af:36:5b:2d:b4:27:f0:70:ab:0b:d5:0a:42:c8:11:0f:
         ca:f6:03:4d:f6:f2:66:eb:5a:1d:cd:64:64:4a:de:40:12:23:
         36:2d:42:98:11:13:b4:ad:ab:b8:bb:63:34:e3:2e:22:29:de:
         85:7a:75:07:8c:66:b8:f9:9a:cb:ce:b7:1b:7c:36:ac:3e:2a:
         f8:cb:8b:db:41:a1:d5:27:54:6f:77:6d:98:a7:27:4c:58:3b:
         23:27:de:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:48:56 2024 by rpki-client on console-ams.rpki-client.org