Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/15d723b0-2ac4-355b-9b80-4009a2416282.roa
File:                     15d723b0-2ac4-355b-9b80-4009a2416282.roa (raw, json)
Hash identifier:          n4kCK1Or03k6OlnrXYpOOmQ4uvtuXr/bwtUGLIIubWs=
Subject key identifier:   FE:31:AB:C9:96:27:39:1F:C5:5E:3F:28:34:39:B1:E9:A1:C7:6E:90
Certificate issuer:       /CN=a340834d-d728-405c-95f1-caa6810aa7d9
Certificate serial:       010D0C9F432858458F387E975C09999051AD2C20
Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/15d723b0-2ac4-355b-9b80-4009a2416282.roa
Signing time:             Tue 16 Apr 2024 01:00:26 +0000
ROA not before:           Tue 16 Apr 2024 01:00:26 +0000
ROA not after:            Mon 15 Jul 2024 01:00:26 +0000
asID:                     19437
IP address blocks:        131.153.176.0/20 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 28 Apr 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:8f:38:7e:97:5c:09:99:90:51:ad:2c:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9
        Validity
            Not Before: Apr 16 01:00:26 2024 GMT
            Not After : Jul 15 01:00:26 2024 GMT
        Subject: CN=bc708675-d9f5-47a2-8829-0dc203215690
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:f5:cc:87:e3:b7:61:83:94:16:f2:00:fa:6d:
                    a3:62:e6:70:e1:5f:7c:09:c1:35:87:99:a7:26:ce:
                    b8:78:74:f1:b1:89:22:ad:28:85:0d:c9:b8:b2:89:
                    02:4b:7e:fb:2b:7d:00:7c:7e:f4:36:c2:60:aa:49:
                    a3:4e:83:cf:16:d4:2b:00:bf:e3:80:34:d9:b0:34:
                    c3:98:d9:ae:c8:65:5f:24:2e:cd:2f:01:88:bc:a9:
                    76:7a:cc:42:c9:37:31:b2:ef:3b:69:b5:7f:1f:ec:
                    d0:f0:f3:ea:ba:1e:d4:b5:3e:72:e4:0d:d4:91:db:
                    b0:a4:63:12:fa:cf:9e:4a:13:8a:03:31:bf:11:82:
                    65:ab:d2:07:d0:d8:e1:f2:59:10:7a:fa:ef:dc:22:
                    fb:34:49:fa:9d:18:ec:cf:60:d9:18:b6:e2:64:3a:
                    33:e5:84:5d:22:e5:83:92:68:c4:c7:e5:ad:24:59:
                    0a:8e:bc:9e:4a:28:fc:f0:4e:f1:65:b5:ef:5d:ff:
                    99:83:2a:8f:fe:e0:b9:b8:3e:c4:d1:e6:e9:ff:76:
                    9e:d7:28:50:12:2c:9a:4c:51:58:42:75:9a:2e:18:
                    fb:53:50:2b:0e:12:d5:7f:60:e6:84:a0:59:ca:c0:
                    65:81:9c:2a:ee:8d:c6:db:cb:a0:66:02:e4:93:3b:
                    ba:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:31:AB:C9:96:27:39:1F:C5:5E:3F:28:34:39:B1:E9:A1:C7:6E:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/15d723b0-2ac4-355b-9b80-4009a2416282.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl

            X509v3 Authority Key Identifier:
                keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.153.176.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:f2:d6:94:45:73:23:e0:c0:48:06:5b:c4:2b:1e:65:02:7a:
         e8:8a:ea:55:41:9b:a8:ad:14:17:47:ac:52:6d:62:70:e3:a9:
         14:d8:3f:88:cb:16:15:5f:af:a9:c0:c1:4c:19:33:92:5f:b9:
         04:44:18:98:52:ed:42:11:1a:63:f0:2d:ac:97:85:a5:70:81:
         25:84:66:cd:65:98:70:fb:12:32:54:47:9b:be:96:c2:e0:fd:
         2b:50:a1:56:3c:12:1a:61:a1:ac:89:08:3c:91:00:a9:36:e7:
         75:69:25:53:54:d7:0e:a1:56:26:e3:94:f5:e6:f7:d6:41:73:
         81:b8:76:5e:a0:4f:cf:a5:04:bc:bc:68:89:14:5d:57:96:c4:
         9f:9a:a2:cc:78:d8:b9:b0:c9:17:eb:68:87:55:93:25:dc:f1:
         00:ad:58:6b:a0:b7:08:bf:49:c1:e1:d6:90:82:46:23:27:96:
         ee:e1:65:f2:82:e4:b3:eb:c4:d2:4b:bf:f5:5c:cb:de:6c:1d:
         21:e3:e9:64:20:c3:a5:d4:85:63:ec:1d:22:1f:92:44:b1:73:
         60:e5:b6:06:f1:32:85:79:fe:96:da:07:0a:6e:6f:89:21:73:
         59:27:e2:0b:bb:eb:65:8a:1a:d3:6a:8e:87:d7:e5:db:c0:3d:
         fe:b6:de:70
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWPOH6XXAmZkFGtLCAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh
N2Q5MB4XDTI0MDQxNjAxMDAyNloXDTI0MDcxNTAxMDAyNlowLzEtMCsGA1UEAxMk
YmM3MDg2NzUtZDlmNS00N2EyLTg4MjktMGRjMjAzMjE1NjkwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvPXMh+O3YYOUFvIA+m2jYuZw4V98CcE1h5mn
Js64eHTxsYkirSiFDcm4sokCS377K30AfH70NsJgqkmjToPPFtQrAL/jgDTZsDTD
mNmuyGVfJC7NLwGIvKl2esxCyTcxsu87abV/H+zQ8PPquh7UtT5y5A3UkduwpGMS
+s+eShOKAzG/EYJlq9IH0Njh8lkQevrv3CL7NEn6nRjsz2DZGLbiZDoz5YRdIuWD
kmjEx+WtJFkKjryeSij88E7xZbXvXf+ZgyqP/uC5uD7E0ebp/3ae1yhQEiyaTFFY
QnWaLhj7U1ArDhLVf2DmhKBZysBlgZwq7o3G28ugZgLkkzu6QwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFP4xq8mWJzkfxV4/KDQ5semhx26QMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw
ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvMTVkNzIzYjAtMmFjNC0z
NTViLTliODAtNDAwOWEyNDE2MjgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1
ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh
YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2
ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEg5mwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADvy1pRFcyPgwEgGW8QrHmUCeuiK6lVBm6itFBdHrFJtYnDjqRTYP4jL
FhVfr6nAwUwZM5JfuQREGJhS7UIRGmPwLayXhaVwgSWEZs1lmHD7EjJUR5u+lsLg
/StQoVY8EhphoayJCDyRAKk253VpJVNU1w6hVibjlPXm99ZBc4G4dl6gT8+lBLy8
aIkUXVeWxJ+aosx42LmwyRfraIdVkyXc8QCtWGugtwi/ScHh1pCCRiMnlu7hZfKC
5LPrxNJLv/Vcy95sHSHj6WQgw6XUhWPsHSIfkkSxc2DltgbxMoV5/pbaBwpub4kh
c1kn4gu762WKGtNqjofX5dvAPf623nA=
-----END CERTIFICATE-----
Generated at Sat Apr 27 17:56:39 2024 by rpki-client on console-ams.rpki-client.org