Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/1123680b-9df2-3e1d-af74-0486a85ed8bf.roa
File:                     1123680b-9df2-3e1d-af74-0486a85ed8bf.roa (raw, json)
Hash identifier:          zRA8lVtCYO8wdztvZbGgl1e40Z0IawKYJlPKKWBkIiY=
Subject key identifier:   06:84:18:59:4A:0C:23:B0:8A:78:83:8E:D2:3D:4D:7A:33:56:87:9E
Certificate issuer:       /CN=a340834d-d728-405c-95f1-caa6810aa7d9
Certificate serial:       010D0C9F432858458F387EC1A540DBAEC1832FC0
Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/1123680b-9df2-3e1d-af74-0486a85ed8bf.roa
Signing time:             Tue 16 Apr 2024 01:00:26 +0000
ROA not before:           Tue 16 Apr 2024 01:00:26 +0000
ROA not after:            Mon 15 Jul 2024 01:00:26 +0000
asID:                     20454
IP address blocks:        131.153.8.0/21 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:8f:38:7e:c1:a5:40:db:ae:c1:83:2f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9
        Validity
            Not Before: Apr 16 01:00:26 2024 GMT
            Not After : Jul 15 01:00:26 2024 GMT
        Subject: CN=4663b6a9-54c2-40f5-9995-f4200566e1f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:f6:d3:dd:38:1a:ed:da:fb:77:5e:f0:6f:1c:
                    cf:e2:e1:f7:1f:58:f9:57:0e:97:9a:f4:1c:0c:87:
                    55:87:4b:25:c7:33:e4:e2:96:ab:03:60:e3:2a:31:
                    a2:31:6d:78:8b:1b:2e:ac:ad:4b:87:ad:13:55:05:
                    c3:b9:e1:4a:8b:eb:a8:2d:c0:89:50:d6:ae:27:ac:
                    89:fd:e3:89:8d:c9:46:0e:cd:79:6d:88:84:7f:79:
                    1f:5a:ff:41:d1:95:2d:14:6b:a1:99:37:85:21:cf:
                    b2:95:f3:3b:64:1d:6b:2f:95:b1:2d:42:d8:a2:f8:
                    8e:78:58:b3:2d:0a:54:68:a7:13:95:70:f9:a7:83:
                    b3:21:ed:56:b8:98:db:c1:e9:9a:98:94:fe:45:35:
                    8e:50:05:50:9f:a5:22:71:73:84:6f:e7:37:b8:7e:
                    5c:c0:16:22:39:cc:84:9a:c9:9a:d7:f4:11:18:93:
                    96:2b:f0:3c:81:ae:c6:16:26:3c:ff:f6:10:02:f6:
                    a4:45:84:10:c8:e5:89:65:31:6c:fb:c1:4f:50:db:
                    29:12:1a:0b:96:78:88:b2:d3:47:81:e3:ff:83:79:
                    b7:3c:24:4e:62:91:d5:59:66:b9:75:95:be:20:14:
                    e8:db:9c:c6:d2:49:3b:c1:01:ca:a1:8d:02:c8:0c:
                    04:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:84:18:59:4A:0C:23:B0:8A:78:83:8E:D2:3D:4D:7A:33:56:87:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/1123680b-9df2-3e1d-af74-0486a85ed8bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl

            X509v3 Authority Key Identifier:
                keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.153.8.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:c9:32:b0:70:55:c7:2f:e5:69:5a:ad:08:54:9e:06:e4:6d:
         5e:97:ad:fe:0d:a0:0b:b7:87:91:9f:96:d7:76:89:a9:df:f4:
         41:18:96:b4:62:a5:b1:bc:c7:9c:76:f9:f5:d5:3f:ab:c2:93:
         00:03:ba:2f:91:b0:e6:ef:47:af:1f:b5:06:12:10:98:ad:e2:
         49:37:7b:83:2c:1a:1c:bb:00:94:c5:6c:a8:e7:86:ce:71:ac:
         a2:c6:14:79:ca:48:ed:1e:af:8a:e8:66:d8:52:f8:eb:21:17:
         9e:19:b3:9b:01:26:bd:3f:78:27:a0:48:46:87:5f:89:dd:80:
         3e:8d:3c:65:0e:a8:de:7e:f5:f3:8a:9a:54:56:c7:ee:d6:f4:
         88:24:5f:9b:e8:ba:e5:3b:bf:87:37:46:3e:27:80:64:e2:35:
         cb:72:fc:11:aa:fa:59:28:57:4b:16:18:84:93:0e:8b:ba:7a:
         7e:ff:32:ca:eb:a1:e5:ed:5e:1c:77:a1:d1:06:5a:c5:6b:27:
         3f:70:65:2f:c8:32:59:72:b3:ac:86:de:20:40:d6:1d:a2:af:
         b6:8b:bf:72:f4:3c:94:43:69:d8:6c:81:04:fe:e9:2d:05:01:
         ba:9e:36:8c:27:14:4b:a9:48:6a:8c:93:fd:9b:a3:4f:23:f0:
         c7:ce:3b:04
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWPOH7BpUDbrsGDL8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh
N2Q5MB4XDTI0MDQxNjAxMDAyNloXDTI0MDcxNTAxMDAyNlowLzEtMCsGA1UEAxMk
NDY2M2I2YTktNTRjMi00MGY1LTk5OTUtZjQyMDA1NjZlMWY4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArfbT3Tga7dr7d17wbxzP4uH3H1j5Vw6XmvQc
DIdVh0slxzPk4parA2DjKjGiMW14ixsurK1Lh60TVQXDueFKi+uoLcCJUNauJ6yJ
/eOJjclGDs15bYiEf3kfWv9B0ZUtFGuhmTeFIc+ylfM7ZB1rL5WxLULYoviOeFiz
LQpUaKcTlXD5p4OzIe1WuJjbwemamJT+RTWOUAVQn6UicXOEb+c3uH5cwBYiOcyE
msma1/QRGJOWK/A8ga7GFiY8//YQAvakRYQQyOWJZTFs+8FPUNspEhoLlniIstNH
geP/g3m3PCROYpHVWWa5dZW+IBTo25zG0kk7wQHKoY0CyAwE1QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAaEGFlKDCOwiniDjtI9TXozVoeeMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw
ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvMTEyMzY4MGItOWRmMi0z
ZTFkLWFmNzQtMDQ4NmE4NWVkOGJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1
ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh
YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2
ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDg5kIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGbJMrBwVccv5WlarQhUngbkbV6Xrf4NoAu3h5Gfltd2ianf9EEYlrRi
pbG8x5x2+fXVP6vCkwADui+RsObvR68ftQYSEJit4kk3e4MsGhy7AJTFbKjnhs5x
rKLGFHnKSO0er4roZthS+OshF54Zs5sBJr0/eCegSEaHX4ndgD6NPGUOqN5+9fOK
mlRWx+7W9IgkX5vouuU7v4c3Rj4ngGTiNcty/BGq+lkoV0sWGISTDou6en7/Msrr
oeXtXhx3odEGWsVrJz9wZS/IMllys6yG3iBA1h2ir7aLv3L0PJRDadhsgQT+6S0F
AbqeNownFEupSGqMk/2bo08j8MfOOwQ=
-----END CERTIFICATE-----
Generated at Sun Apr 28 03:26:33 2024 by rpki-client on console-ams.rpki-client.org