Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/f3bf331d-19cf-3d03-986c-190a6e650b75.roa
File:                     f3bf331d-19cf-3d03-986c-190a6e650b75.roa (raw, json)
Hash identifier:          J83AtneO4GxtWKPrgZHYg5+nRMIXIHFiPnmTG7AOPII=
Subject key identifier:   3F:46:8A:9F:C2:69:12:8F:E4:F3:CC:81:69:4C:11:51:71:DD:E1:D7
Certificate issuer:       /CN=6c86d366-9f08-4852-b060-53c54ef6dda0
Certificate serial:       010D0C9F43285847A0414A54697E4974C4856CF0
Authority key identifier: AC:8B:A9:6E:4F:59:DC:EB:11:59:A5:17:A6:AB:9F:9E:14:38:F1:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/f3bf331d-19cf-3d03-986c-190a6e650b75.roa
Signing time:             Tue 22 Oct 2024 13:00:40 +0000
ROA not before:           Tue 22 Oct 2024 13:00:40 +0000
ROA not after:            Mon 20 Jan 2025 14:00:40 +0000
asID:                     14618
IP address blocks:        164.153.131.0/24 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/6c86d366-9f08-4852-b060-53c54ef6dda0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/6c86d366-9f08-4852-b060-53c54ef6dda0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:a0:41:4a:54:69:7e:49:74:c4:85:6c:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c86d366-9f08-4852-b060-53c54ef6dda0
        Validity
            Not Before: Oct 22 13:00:40 2024 GMT
            Not After : Jan 20 14:00:40 2025 GMT
        Subject: CN=60919dbf-7911-4de5-b162-6c7b4dc213b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:64:92:1e:d9:89:cc:8c:77:6d:ad:41:50:74:
                    7f:98:09:04:9c:ba:66:cf:47:5d:c8:c6:3f:1e:4f:
                    51:d0:61:59:23:6a:2f:60:04:36:77:80:0d:c9:fb:
                    ce:b9:36:c5:12:5c:5a:6a:36:e3:d2:1e:30:f2:10:
                    1d:84:05:82:95:d5:9c:6d:4b:ef:56:93:d9:d2:28:
                    e7:45:47:0d:29:21:ba:16:46:aa:62:81:67:a3:31:
                    cf:2a:1c:5d:79:be:d5:89:13:da:43:f9:b0:0e:16:
                    94:d2:f3:51:be:49:d5:90:29:dd:5d:93:56:25:de:
                    c5:1d:fe:16:fa:07:17:ea:5e:86:3d:31:cc:18:6f:
                    3a:86:9b:26:dd:0c:f4:0b:a7:5c:4d:f9:f8:2d:e2:
                    3c:ea:a9:92:4c:76:70:7b:25:13:53:39:8a:64:85:
                    88:86:4f:2c:b5:e4:6f:23:3d:eb:de:5a:9d:0b:76:
                    73:28:06:dd:a5:71:5c:c7:22:09:0e:8f:2b:a7:54:
                    d8:c9:d1:66:cb:79:8f:19:88:82:55:6d:6d:70:db:
                    3d:fd:bb:0b:66:7a:0a:d7:f1:05:c0:b1:63:e2:6d:
                    3a:09:36:12:c1:ac:89:4c:f3:58:7e:f4:93:41:cf:
                    dc:0e:d7:45:12:77:64:17:6c:ff:86:fe:5c:78:e8:
                    74:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:46:8A:9F:C2:69:12:8F:E4:F3:CC:81:69:4C:11:51:71:DD:E1:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/f3bf331d-19cf-3d03-986c-190a6e650b75.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/6c86d366-9f08-4852-b060-53c54ef6dda0.crl

            X509v3 Authority Key Identifier:
                keyid:AC:8B:A9:6E:4F:59:DC:EB:11:59:A5:17:A6:AB:9F:9E:14:38:F1:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.153.131.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b6:42:8b:cf:9c:17:a9:3a:81:0b:38:fc:26:50:dd:41:3e:50:
         dc:ab:0e:65:90:d9:98:28:dc:1f:6a:d4:12:72:d4:8d:55:3c:
         d2:37:48:84:95:4b:bf:6a:7b:a3:bf:37:9b:31:e9:a5:3f:2c:
         f3:0c:22:2d:35:8d:6d:d2:e5:18:c2:32:ba:84:17:7b:e8:f3:
         a6:65:ae:2e:5f:4d:b1:74:bb:63:d1:12:36:df:04:76:18:e8:
         e0:bf:2f:ac:9e:f4:e8:ab:db:fe:cc:e1:16:c5:cf:2a:c6:f7:
         7c:2d:d3:8d:2a:45:74:2a:8d:bc:9d:ea:c7:02:75:40:7b:cb:
         ee:8b:10:50:c6:02:08:21:5f:80:8a:2d:49:df:e6:35:e8:4f:
         b7:78:0f:50:cd:9d:54:31:c6:68:bc:2f:45:8d:45:fc:7a:31:
         bf:52:65:d3:ca:32:17:e4:b4:2e:00:76:67:eb:37:db:29:d1:
         3d:2b:53:28:f3:ef:76:2f:b1:f5:8c:d1:ac:ba:49:89:f8:8b:
         5f:27:4a:51:70:0d:a1:82:d5:a7:d3:33:85:6d:e8:90:49:7b:
         f7:ab:c4:6d:cc:fa:ef:6c:a0:e0:e5:d4:95:4e:eb:90:bd:e5:
         d4:3f:a5:b9:3f:4d:51:17:04:4b:8e:5a:13:84:3e:fb:eb:3e:
         0f:fb:43:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 23:10:25 2024 by rpki-client on console-ams.rpki-client.org