Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/69872d89-79da-3819-8185-7de21929d884.roa
File:                     69872d89-79da-3819-8185-7de21929d884.roa (raw, json)
Hash identifier:          s/Pu9iPwIy3qC4gcg9jTwDOMGlgLJYuqT1a52eYcpjE=
Subject key identifier:   B4:BE:A0:48:63:0A:8D:F6:08:27:8C:13:45:81:66:00:A7:E2:EC:26
Certificate issuer:       /CN=a340834d-d728-405c-95f1-caa6810aa7d9
Certificate serial:       010D0C9F43285845B0B8AC2EDAE3ACE81A037640
Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/69872d89-79da-3819-8185-7de21929d884.roa
Signing time:             Sun 28 Apr 2024 01:00:25 +0000
ROA not before:           Sun 28 Apr 2024 01:00:25 +0000
ROA not after:            Sat 27 Jul 2024 01:00:25 +0000
asID:                     19437
IP address blocks:        131.153.238.0/24 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:b0:b8:ac:2e:da:e3:ac:e8:1a:03:76:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9
        Validity
            Not Before: Apr 28 01:00:25 2024 GMT
            Not After : Jul 27 01:00:25 2024 GMT
        Subject: CN=3d0e4ce0-ef13-4829-8730-39a65b2e34cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:e4:09:82:ee:14:1d:d4:9f:49:cc:d6:05:07:
                    34:82:6a:69:1e:bb:17:5d:60:5b:af:b0:1b:a9:19:
                    fc:db:84:f2:5a:e8:37:65:df:69:1a:d7:2c:b2:ae:
                    ac:bd:f2:cc:58:ae:3a:d8:1c:93:e2:97:27:e6:79:
                    97:e5:99:68:46:65:0e:ed:c8:3e:27:6c:0a:2d:a9:
                    3a:64:d9:09:fa:4e:f0:aa:e6:84:36:30:bd:b5:5a:
                    99:90:7f:8c:3c:90:27:18:9e:89:87:af:08:d2:5d:
                    00:06:71:b5:c4:bc:30:84:f8:fb:ec:e2:75:c8:9f:
                    fd:13:a0:ea:80:38:14:a9:96:b7:42:f6:44:0a:16:
                    cb:99:01:11:b4:19:9d:8c:4d:6b:4f:45:30:6e:5d:
                    e6:d5:8e:8a:cb:45:fa:69:85:d9:17:1b:56:f6:5c:
                    05:94:da:ed:3d:3e:03:7b:cc:f8:89:60:b5:e5:d1:
                    74:b2:10:26:79:08:a2:aa:7d:0e:b6:b8:97:65:75:
                    21:d6:75:07:41:ca:4f:29:15:97:0d:86:ed:8b:8d:
                    52:06:45:3c:4d:ea:52:73:07:45:fc:41:7a:12:fb:
                    6c:cc:eb:5e:cd:49:79:69:64:6d:df:2a:74:68:ce:
                    c4:75:cd:3a:f3:4c:50:9c:87:bf:a4:7a:67:c8:5b:
                    0f:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:BE:A0:48:63:0A:8D:F6:08:27:8C:13:45:81:66:00:A7:E2:EC:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/69872d89-79da-3819-8185-7de21929d884.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl

            X509v3 Authority Key Identifier:
                keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.153.238.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:9c:14:6a:3a:dd:f1:cb:80:62:a7:1e:85:15:fb:01:eb:40:
         60:5e:09:51:94:58:95:de:f8:f6:b3:6e:62:4a:50:89:66:55:
         f8:02:fe:75:dd:40:a1:42:74:43:1e:dd:59:ec:66:51:42:24:
         ff:7e:15:1b:4c:f2:d8:94:f1:81:9a:f4:39:7d:36:0a:d8:e1:
         db:3a:a7:10:86:ae:18:d7:7a:c8:75:37:b6:74:47:14:ae:84:
         75:2a:0c:9a:78:9e:69:63:42:36:34:f6:40:1a:37:94:f7:9b:
         05:13:3a:7e:ae:48:08:79:13:96:1b:48:85:63:3d:4a:76:b6:
         42:04:58:89:37:44:87:09:c6:a4:49:4b:3f:41:ea:f4:86:29:
         d1:5c:94:1d:f9:b5:65:1b:a8:5c:1a:7b:f3:08:69:07:fb:37:
         1f:99:c1:61:e2:97:ce:25:f5:81:e1:27:a1:11:a2:c7:2a:26:
         40:16:c3:5c:a1:fe:81:1a:2a:c1:62:1f:48:95:c3:ec:bc:27:
         81:ba:f5:74:af:cd:87:b3:bf:78:7a:ec:83:14:b8:59:ba:1d:
         31:4b:46:e2:39:21:ff:7c:b6:16:22:40:6f:0f:c3:f6:fc:ad:
         46:a7:c0:de:17:49:7c:90:e1:eb:74:1e:1e:5e:36:7a:3b:85:
         d2:e1:b7:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 01:57:32 2024 by rpki-client on console-ams.rpki-client.org