Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/543031bb-b48b-4efb-ae26-4035688199f7/34408d9c-ba17-3a98-a30c-784c9718904b.roa
File:                     34408d9c-ba17-3a98-a30c-784c9718904b.roa (raw, json)
Hash identifier:          nQuYJ4pjiPgVPPymTKWicJLJetjmBc5OaXFmMqZj6tk=
Subject key identifier:   E7:83:AD:5B:65:D5:60:C2:22:AE:C1:6C:79:2B:0D:90:83:09:6A:8F
Certificate issuer:       /CN=543031bb-b48b-4efb-ae26-4035688199f7
Certificate serial:       010D0C9F43285845A6F35C347D79EC42D7626FF0
Authority key identifier: 2D:2F:7D:F2:35:FF:0E:F9:30:77:87:20:41:F4:80:D2:3E:08:D8:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/543031bb-b48b-4efb-ae26-4035688199f7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/543031bb-b48b-4efb-ae26-4035688199f7/34408d9c-ba17-3a98-a30c-784c9718904b.roa
Signing time:             Wed 24 Apr 2024 13:00:33 +0000
ROA not before:           Wed 24 Apr 2024 13:00:33 +0000
ROA not after:            Tue 23 Jul 2024 13:00:33 +0000
asID:                     3257
IP address blocks:        134.195.152.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/543031bb-b48b-4efb-ae26-4035688199f7/543031bb-b48b-4efb-ae26-4035688199f7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/543031bb-b48b-4efb-ae26-4035688199f7/543031bb-b48b-4efb-ae26-4035688199f7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/543031bb-b48b-4efb-ae26-4035688199f7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 06 May 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a6:f3:5c:34:7d:79:ec:42:d7:62:6f:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=543031bb-b48b-4efb-ae26-4035688199f7
        Validity
            Not Before: Apr 24 13:00:33 2024 GMT
            Not After : Jul 23 13:00:33 2024 GMT
        Subject: CN=35889181-dbc5-42d7-abbf-da81dd654923
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:55:5c:35:c9:6d:c2:7a:55:f7:34:cc:91:55:
                    91:37:38:72:21:42:89:54:c7:54:cd:5d:71:b8:c9:
                    11:8c:bb:94:80:ef:17:1b:a9:3b:5c:c6:2b:d8:af:
                    b6:34:72:ba:57:bc:7b:e5:d5:47:b5:24:40:f0:2b:
                    9b:8b:94:fc:e6:af:cf:d0:2f:4b:e9:5d:69:08:a5:
                    a6:8c:87:e8:de:e4:d0:e8:f4:09:66:e0:c6:f6:a8:
                    f6:9a:d7:85:bc:4a:bb:14:40:2a:38:ba:ed:e6:49:
                    bc:62:d6:e8:34:c9:7f:28:a5:9b:c8:7c:2d:33:14:
                    c8:f7:88:0e:82:0e:e3:85:67:b5:a6:aa:1a:79:cf:
                    2f:93:51:40:5e:ec:f0:6a:89:3d:b6:a1:9d:db:6a:
                    f2:7e:60:8d:b4:58:39:cc:94:3e:c0:38:07:13:d1:
                    e6:f3:45:ba:5d:36:63:5b:6d:0c:e8:17:6c:bc:7d:
                    63:62:c9:9a:a0:2a:04:78:08:b1:c7:eb:79:aa:b1:
                    a3:4d:52:3e:3a:93:6e:f3:82:b5:10:3b:75:48:79:
                    75:f5:f4:b9:59:0c:94:ff:0f:b7:2e:8f:c2:57:90:
                    c0:00:7c:fb:7d:6a:2f:1e:0d:59:b3:da:53:68:aa:
                    91:78:b1:a4:aa:6d:83:f6:d7:5e:39:7c:45:32:46:
                    ea:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:83:AD:5B:65:D5:60:C2:22:AE:C1:6C:79:2B:0D:90:83:09:6A:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/543031bb-b48b-4efb-ae26-4035688199f7/34408d9c-ba17-3a98-a30c-784c9718904b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/543031bb-b48b-4efb-ae26-4035688199f7/543031bb-b48b-4efb-ae26-4035688199f7.crl

            X509v3 Authority Key Identifier:
                keyid:2D:2F:7D:F2:35:FF:0E:F9:30:77:87:20:41:F4:80:D2:3E:08:D8:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/543031bb-b48b-4efb-ae26-4035688199f7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.195.152.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         be:fa:f2:25:9b:74:3b:ae:ce:61:26:44:ba:1d:37:95:6c:1d:
         cc:d1:9d:d9:4d:7a:d6:ed:3e:8a:31:22:5c:be:3a:07:ea:fe:
         2d:82:40:0e:91:3e:a5:09:d3:9f:97:35:ce:ef:65:a2:f3:0a:
         bc:92:43:65:d9:22:9c:a8:36:53:5e:94:60:55:d2:91:15:e0:
         22:bd:5f:2d:72:6b:eb:e8:6a:99:a6:c5:10:65:59:9a:03:e6:
         c2:e6:f0:8e:62:12:7a:40:bb:35:ab:72:04:12:a8:a7:03:51:
         ed:ff:ca:3f:23:e4:71:e1:10:e8:4e:10:04:bc:1a:ef:f2:c0:
         29:47:b4:a6:43:d5:10:1e:cc:3d:c4:06:f0:48:59:69:5f:5b:
         26:c4:da:23:b0:20:4e:8b:ca:53:55:a5:4e:6c:70:3d:02:17:
         05:f9:a1:0f:fc:08:89:e2:45:77:37:21:d6:0a:52:07:c3:09:
         96:cd:30:55:98:18:17:e9:50:76:80:4c:cb:47:e9:39:82:b9:
         6a:0c:7f:f7:2c:f0:29:57:83:49:7f:5d:db:40:89:02:87:64:
         2b:73:06:31:a9:15:76:e7:0d:6c:fa:77:ff:58:2d:9f:4f:da:
         d5:2b:09:98:63:37:25:83:d9:ae:5f:4a:e0:35:cc:35:69:95:
         df:ce:69:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 15:56:06 2024 by rpki-client on console-ams.rpki-client.org