Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/f46c48fc-eee4-350a-9887-1ba789ca5268.roa
File:                     f46c48fc-eee4-350a-9887-1ba789ca5268.roa (raw, json)
Hash identifier:          FOIk8FUL7cxZ2G7F116hGQaSarn6YHsN95ERcyXuJUg=
Subject key identifier:   E9:61:41:BF:04:C4:00:8E:81:59:21:AA:94:C6:D3:2F:77:DA:F7:A3
Certificate issuer:       /CN=a340834d-d728-405c-95f1-caa6810aa7d9
Certificate serial:       010D0C9F432858474DE5F91194D831EB1DCABF80
Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/f46c48fc-eee4-350a-9887-1ba789ca5268.roa
Signing time:             Mon 23 Sep 2024 01:00:31 +0000
ROA not before:           Mon 23 Sep 2024 01:00:31 +0000
ROA not after:            Sun 22 Dec 2024 02:00:31 +0000
asID:                     208136
IP address blocks:        131.153.94.0/24 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:4d:e5:f9:11:94:d8:31:eb:1d:ca:bf:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9
        Validity
            Not Before: Sep 23 01:00:31 2024 GMT
            Not After : Dec 22 02:00:31 2024 GMT
        Subject: CN=8ffc743c-c0f4-4521-a5da-b253fe552195
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:ac:28:ef:cc:61:6d:1b:38:80:21:34:37:01:
                    6e:fc:b1:e9:bd:1d:14:a0:2c:89:17:f7:64:75:9a:
                    77:d6:e4:cb:a0:fa:93:4f:96:54:9a:27:50:73:12:
                    8c:29:22:9d:f3:b2:8a:75:cf:91:90:20:07:b4:95:
                    46:55:f9:4e:91:fa:8e:42:a4:17:e5:72:90:8e:da:
                    ae:18:69:4d:ee:34:72:d7:f0:fe:bb:c0:5b:e4:19:
                    c7:1c:bb:bc:87:61:d6:da:9b:6e:16:08:11:ec:b2:
                    1e:11:fe:7b:c8:15:2a:30:67:21:12:5e:c9:8d:7c:
                    87:17:f0:39:93:58:79:f1:a1:ec:e8:80:cf:5b:a5:
                    f6:c2:6c:9f:df:43:d0:b1:18:b8:02:23:5c:1a:e7:
                    f1:68:98:ef:3e:81:e1:3f:3d:ba:58:e1:c7:f2:01:
                    d7:14:30:17:36:13:0c:f6:98:2d:9a:19:eb:ca:9b:
                    f5:0d:00:5d:0a:ad:a8:7f:95:1e:a4:b8:fc:fd:f0:
                    ec:31:ab:a4:de:b9:ab:60:8f:ee:19:4e:df:ee:b0:
                    a2:5d:df:ed:49:1f:c6:5b:fd:8f:a6:67:02:e7:85:
                    7b:cb:c7:21:66:f7:13:0d:16:20:41:21:79:8c:84:
                    fb:51:2e:06:b6:54:ca:d0:63:fa:f8:c0:f0:8a:1a:
                    55:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:61:41:BF:04:C4:00:8E:81:59:21:AA:94:C6:D3:2F:77:DA:F7:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/f46c48fc-eee4-350a-9887-1ba789ca5268.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl

            X509v3 Authority Key Identifier:
                keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.153.94.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:99:07:d8:76:b5:2f:5b:19:cc:b0:64:64:fe:92:94:21:ae:
         90:82:b1:bd:ea:b9:ee:39:8b:5e:8f:73:5d:0c:71:5c:8b:84:
         a6:15:a2:05:43:ca:dc:c5:4c:b6:3e:82:56:63:d9:9f:5f:94:
         47:15:aa:66:48:9e:1f:d0:4e:05:b8:83:e3:6c:61:e0:09:b4:
         fa:16:0f:03:09:ef:08:e9:86:af:81:f7:ad:a2:9f:68:1f:f8:
         8c:d6:08:b6:9a:35:2a:0d:5c:fa:0d:0a:f1:0f:a9:7a:86:c8:
         87:7f:87:d6:63:2f:ab:d7:ab:0a:90:ce:a7:84:13:14:9d:b2:
         2e:94:45:c2:ca:44:92:3d:97:02:7f:0b:f2:67:ee:ee:7a:86:
         18:fe:52:db:05:98:b9:04:a7:8c:a9:8a:8f:fd:fc:44:ca:db:
         3e:18:ec:08:2e:bd:74:34:87:82:b9:e0:43:12:e3:48:09:ab:
         2d:cd:8a:18:24:34:55:3d:f9:4e:97:45:bd:0b:2c:b4:21:24:
         97:56:21:f5:4c:79:4b:20:99:6c:aa:0f:14:7a:c1:0c:86:69:
         00:08:b6:4d:71:01:3c:48:1c:43:fe:57:6c:47:b6:aa:8b:1a:
         23:a5:b8:25:17:04:1c:e5:08:54:95:85:a6:7d:25:7f:58:81:
         d8:09:44:20
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdN5fkRlNgx6x3Kv4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh
N2Q5MB4XDTI0MDkyMzAxMDAzMVoXDTI0MTIyMjAyMDAzMVowLzEtMCsGA1UEAxMk
OGZmYzc0M2MtYzBmNC00NTIxLWE1ZGEtYjI1M2ZlNTUyMTk1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA06wo78xhbRs4gCE0NwFu/LHpvR0UoCyJF/dk
dZp31uTLoPqTT5ZUmidQcxKMKSKd87KKdc+RkCAHtJVGVflOkfqOQqQX5XKQjtqu
GGlN7jRy1/D+u8Bb5BnHHLu8h2HW2ptuFggR7LIeEf57yBUqMGchEl7JjXyHF/A5
k1h58aHs6IDPW6X2wmyf30PQsRi4AiNcGufxaJjvPoHhPz26WOHH8gHXFDAXNhMM
9pgtmhnrypv1DQBdCq2of5UepLj8/fDsMauk3rmrYI/uGU7f7rCiXd/tSR/GW/2P
pmcC54V7y8chZvcTDRYgQSF5jIT7US4GtlTK0GP6+MDwihpV6wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOlhQb8ExACOgVkhqpTG0y932vejMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw
ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvZjQ2YzQ4ZmMtZWVlNC0z
NTBhLTk4ODctMWJhNzg5Y2E1MjY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1
ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh
YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2
ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg5leMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACOZB9h2tS9bGcywZGT+kpQhrpCCsb3que45i16Pc10McVyLhKYVogVD
ytzFTLY+glZj2Z9flEcVqmZInh/QTgW4g+NsYeAJtPoWDwMJ7wjphq+B962in2gf
+IzWCLaaNSoNXPoNCvEPqXqGyId/h9ZjL6vXqwqQzqeEExSdsi6URcLKRJI9lwJ/
C/Jn7u56hhj+UtsFmLkEp4ypio/9/ETK2z4Y7AguvXQ0h4K54EMS40gJqy3Nihgk
NFU9+U6XRb0LLLQhJJdWIfVMeUsgmWyqDxR6wQyGaQAItk1xATxIHEP+V2xHtqqL
GiOluCUXBBzlCFSVhaZ9JX9YgdgJRCA=
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:48:56 2024 by rpki-client on console-ams.rpki-client.org