Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/30cbe3fb-cf82-3693-9eb4-9036f6540e38.roa
File:                     30cbe3fb-cf82-3693-9eb4-9036f6540e38.roa (raw, json)
Hash identifier:          BajUdBa+3J5qg1k9NXhnYVmRtpgqF3BmnfLuWYbPJSc=
Subject key identifier:   FC:D4:2E:05:C0:48:B4:A0:D0:3D:75:C0:B5:8C:67:2D:41:67:6A:82
Certificate issuer:       /CN=a340834d-d728-405c-95f1-caa6810aa7d9
Certificate serial:       010D0C9F432858458DD353A45ABB34C265BA4500
Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/30cbe3fb-cf82-3693-9eb4-9036f6540e38.roa
Signing time:             Mon 15 Apr 2024 13:00:35 +0000
ROA not before:           Mon 15 Apr 2024 13:00:35 +0000
ROA not after:            Sun 14 Jul 2024 13:00:35 +0000
asID:                     39239
IP address blocks:        131.153.89.0/24 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 28 Apr 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:8d:d3:53:a4:5a:bb:34:c2:65:ba:45:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9
        Validity
            Not Before: Apr 15 13:00:35 2024 GMT
            Not After : Jul 14 13:00:35 2024 GMT
        Subject: CN=2af349cd-cc60-4693-9cfd-f9c362458a6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:6a:e3:eb:35:d3:fb:20:5a:09:52:4c:48:7d:
                    42:b8:8f:41:a3:68:9f:d3:b1:92:c6:6b:30:be:f4:
                    df:b7:e2:c7:8d:ac:04:ad:47:30:91:30:f0:ec:34:
                    eb:bf:21:80:49:69:de:9b:63:f8:94:35:f1:47:09:
                    18:bf:ef:2b:48:4b:86:65:52:f2:7b:81:2b:0c:7b:
                    43:ca:72:3f:48:70:51:23:4e:9d:05:90:43:99:91:
                    f8:ef:36:08:ee:99:93:d1:8b:c3:73:24:80:96:86:
                    21:59:55:05:ad:2f:4e:e2:cf:0e:56:4d:e4:26:d5:
                    49:6b:5d:5e:41:68:cf:b2:74:b5:45:f7:4e:15:93:
                    9d:e1:07:af:00:8b:6e:e6:66:b6:c7:c6:e2:a8:d8:
                    63:d8:4b:fd:13:36:07:e6:15:e5:b3:24:ec:0f:27:
                    6f:59:b8:40:ca:52:58:e4:76:e9:71:ad:65:dd:2d:
                    76:34:06:16:cd:95:56:6e:4a:5d:21:6e:d2:52:d3:
                    f0:32:94:c3:8d:b5:ad:63:96:3d:2b:28:ae:47:45:
                    da:cd:b1:fa:7c:06:f3:fc:d0:94:fa:ec:b7:f3:35:
                    6f:49:36:d3:eb:40:42:63:92:2d:46:33:b5:c2:8a:
                    20:fc:8b:05:62:05:0a:a1:2e:8d:d9:db:89:7b:0b:
                    54:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:D4:2E:05:C0:48:B4:A0:D0:3D:75:C0:B5:8C:67:2D:41:67:6A:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/30cbe3fb-cf82-3693-9eb4-9036f6540e38.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl

            X509v3 Authority Key Identifier:
                keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.153.89.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:b1:54:82:c5:4c:1e:f1:96:d8:24:ce:17:d9:c1:90:37:64:
         d7:5d:b7:a8:da:9e:cf:00:75:3c:e1:02:bc:f7:56:96:35:c3:
         05:e0:86:47:d5:e4:6e:3c:60:e9:0c:ea:04:70:dc:9e:5b:cb:
         17:41:00:87:75:46:33:f7:b8:a9:87:af:c5:0d:e7:d0:77:34:
         e1:e7:88:fc:3c:bf:52:43:33:52:5c:ce:ce:50:db:a5:dd:02:
         95:65:72:41:d5:d1:b6:56:e9:59:ef:35:06:cb:9d:89:58:c8:
         67:f0:df:42:6d:56:31:a3:35:be:57:68:de:e9:95:59:bc:08:
         04:7f:ec:13:ea:86:88:e1:2a:f5:59:76:86:ec:9a:77:9d:26:
         d6:61:1b:cf:8d:13:42:b5:4f:4d:25:e2:26:d0:5b:c8:9f:04:
         22:8a:75:c9:a6:ed:72:fc:c3:f5:a9:a8:6e:3d:ae:79:8c:f2:
         23:13:1a:38:4d:a9:23:d4:dc:47:14:95:e7:44:57:96:d4:f9:
         6a:99:6f:0e:28:a0:2a:ee:64:37:de:ca:15:b9:67:a2:1b:26:
         8c:c3:88:9b:75:33:fb:af:ab:6a:36:13:20:f2:74:16:f0:e2:
         f5:2f:8f:7a:2a:3f:8f:7d:47:12:85:07:14:7b:b1:e8:96:cf:
         55:f6:49:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 15:34:33 2024 by rpki-client on console-ams.rpki-client.org