Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/fd024f7b-7f82-397a-b676-0e4b1349bccf.roa
File:                     fd024f7b-7f82-397a-b676-0e4b1349bccf.roa (raw, json)
Hash identifier:          2xCQLO6ucyzRk9IZCgsUVg6J59Xe4M3xzC73pZmRNGI=
Subject key identifier:   0F:9C:D3:A4:8C:9A:02:72:FF:ED:3B:B5:D1:A1:AA:E7:84:AB:D4:0E
Certificate issuer:       /CN=a340834d-d728-405c-95f1-caa6810aa7d9
Certificate serial:       010D0C9F43285845936891EE7B5BE14F67C0C700
Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/fd024f7b-7f82-397a-b676-0e4b1349bccf.roa
Signing time:             Wed 17 Apr 2024 13:00:34 +0000
ROA not before:           Wed 17 Apr 2024 13:00:34 +0000
ROA not after:            Tue 16 Jul 2024 13:00:34 +0000
asID:                     0
IP address blocks:        131.153.64.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:93:68:91:ee:7b:5b:e1:4f:67:c0:c7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9
        Validity
            Not Before: Apr 17 13:00:34 2024 GMT
            Not After : Jul 16 13:00:34 2024 GMT
        Subject: CN=ebb7ce76-ca0f-4ca6-b2bd-bd8bbd69847d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:7b:e2:66:a2:34:b6:c6:83:0a:68:8c:89:16:
                    96:9e:54:bb:34:1b:15:70:88:02:03:a8:69:f0:5f:
                    17:69:2b:04:12:a6:37:3a:e4:24:10:01:cd:0c:ad:
                    d3:08:63:7a:39:85:1a:27:1f:1a:4b:ce:2a:3b:89:
                    d4:c8:8a:18:15:a6:f3:ef:c4:fa:64:79:4d:9a:51:
                    e0:22:79:ed:57:45:a6:72:a2:b6:0e:ef:e4:90:20:
                    f5:87:d6:d6:29:cc:0a:37:9c:3a:06:ec:de:ce:7d:
                    ba:48:75:e3:1a:ab:3e:45:a8:2e:0d:b5:e8:f4:a3:
                    80:9f:26:e0:49:62:50:88:91:a7:9b:57:4a:cf:0c:
                    59:4e:88:70:0b:a2:a3:d9:55:17:29:11:8e:ea:74:
                    d9:d7:5f:17:66:48:3a:d9:d2:ff:0c:1b:68:72:b8:
                    e9:0d:42:47:ea:41:3a:8a:4a:75:e0:6a:35:b8:c1:
                    f2:a7:81:25:29:f0:88:bf:c0:b4:a3:82:ea:1d:54:
                    42:11:a0:39:08:61:eb:a7:bb:0a:ef:e8:0e:06:04:
                    cf:96:c9:7b:ad:f3:9e:6b:25:aa:c4:63:50:6d:64:
                    c4:ae:74:59:df:de:32:c5:78:f9:0d:40:85:bb:a8:
                    0f:2a:be:ca:e2:ed:57:80:a7:f2:c3:25:fc:b3:16:
                    7f:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:9C:D3:A4:8C:9A:02:72:FF:ED:3B:B5:D1:A1:AA:E7:84:AB:D4:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/fd024f7b-7f82-397a-b676-0e4b1349bccf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl

            X509v3 Authority Key Identifier:
                keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.153.64.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:3b:26:5d:05:3f:25:5e:b9:41:ce:a8:84:40:77:08:df:a1:
         9e:ef:a0:1e:85:34:56:4f:58:18:de:44:b8:e5:9d:07:14:71:
         35:9b:5c:82:80:20:10:0f:51:23:49:b7:2a:b8:ba:64:1b:d1:
         e9:f6:2c:c6:94:2a:51:92:cc:8b:7f:32:1e:7a:e5:dc:ae:33:
         87:4c:90:8f:99:50:0f:19:61:76:46:a2:93:cb:08:1f:39:d3:
         12:11:e9:eb:eb:eb:ed:d8:b0:61:ed:b6:38:e8:8f:cc:89:92:
         50:96:20:f4:64:a0:f9:20:3e:1a:b4:43:fc:f5:cf:28:eb:ba:
         fc:b2:c9:b9:19:6b:8c:67:c5:79:19:ec:1a:57:b0:38:a4:b4:
         7f:c3:f5:4f:98:3c:80:e1:c9:04:b7:a9:ff:67:aa:0a:0a:5b:
         98:7e:06:7a:ab:85:0e:d4:4e:25:79:73:b9:2e:34:65:4f:ea:
         0d:0e:18:13:d2:67:bf:18:a8:18:2e:9d:c1:72:97:ec:13:14:
         2d:68:c4:3b:6e:08:8c:b8:01:76:52:d4:06:6a:6e:6f:e3:73:
         12:fb:9b:51:e4:06:21:8a:f5:68:ae:b5:69:cf:f7:ed:9f:31:
         a8:52:98:a2:6b:ea:c3:3c:e6:ed:fa:36:2f:f1:f7:d5:59:6b:
         f0:c6:da:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 02:10:15 2024 by rpki-client on console-ams.rpki-client.org