Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/61ccdaaa-d56f-34eb-ba36-f655103310f7.roa
File:                     61ccdaaa-d56f-34eb-ba36-f655103310f7.roa (raw, json)
Hash identifier:          HUcXQ+mN+dTxonnFF4jMk4EgYrjV4ODiUp5swiFCgv0=
Subject key identifier:   E8:75:E5:54:2D:49:C0:BE:B7:E9:17:EF:32:63:E1:5C:6D:59:EA:2C
Certificate issuer:       /CN=a340834d-d728-405c-95f1-caa6810aa7d9
Certificate serial:       010D0C9F432858458F387BE54ADFDF113CFE5A00
Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/61ccdaaa-d56f-34eb-ba36-f655103310f7.roa
Signing time:             Tue 16 Apr 2024 01:00:26 +0000
ROA not before:           Tue 16 Apr 2024 01:00:26 +0000
ROA not after:            Mon 15 Jul 2024 01:00:26 +0000
asID:                     19181
IP address blocks:        131.153.166.0/23 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:8f:38:7b:e5:4a:df:df:11:3c:fe:5a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9
        Validity
            Not Before: Apr 16 01:00:26 2024 GMT
            Not After : Jul 15 01:00:26 2024 GMT
        Subject: CN=13f94d38-7fbc-43e6-a097-08f190b8b721
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:a6:d9:b5:96:ee:aa:ee:c1:0a:f4:59:86:91:
                    c2:8a:3e:b9:01:26:64:0e:cc:46:5d:04:21:1c:1d:
                    c1:06:25:0f:6c:5c:4d:f2:a8:b6:86:9f:8f:23:aa:
                    cf:03:04:d0:0c:fd:01:8c:7e:a4:3f:7e:bc:d3:ee:
                    70:1c:5e:3f:7c:b1:c7:f2:41:c5:ff:ea:b9:bd:fd:
                    cd:c5:cc:94:0a:c0:be:94:de:55:ce:ca:27:8e:19:
                    59:2b:0d:de:76:12:36:3a:ab:7a:5c:c1:69:4d:3b:
                    15:81:79:51:96:3a:cd:7f:2a:a8:18:9d:35:ab:44:
                    80:e2:1c:f8:60:1e:2b:a8:f9:ee:48:58:c4:ca:26:
                    9e:2d:3a:7f:3c:ef:41:6d:6b:22:6e:99:93:58:10:
                    5f:0e:65:3e:7e:76:17:d0:ac:8f:bf:2b:84:29:1f:
                    a6:2d:c1:56:16:84:49:21:7a:6f:99:81:18:86:8f:
                    e5:7b:ed:7d:67:83:61:e7:59:1f:36:a3:69:10:3c:
                    ba:01:84:55:90:11:af:48:f7:d3:55:b6:0f:0a:a4:
                    c9:bb:38:55:f1:fb:9d:2d:ec:6f:5f:91:4d:e7:9d:
                    51:3b:14:23:86:a1:ad:c1:a8:e7:d5:9b:aa:1d:3e:
                    aa:29:d3:20:fc:f9:62:24:9a:53:37:80:9f:1b:ed:
                    3b:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:75:E5:54:2D:49:C0:BE:B7:E9:17:EF:32:63:E1:5C:6D:59:EA:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/61ccdaaa-d56f-34eb-ba36-f655103310f7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl

            X509v3 Authority Key Identifier:
                keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.153.166.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:33:2f:9a:a8:06:51:95:f2:ec:4a:64:36:fe:19:92:b3:51:
         9c:a2:35:1b:8c:b7:03:9a:7a:8d:1c:5d:40:de:d2:6c:85:9b:
         ef:a1:02:2f:71:df:10:d1:50:d8:46:e5:ab:e7:d8:23:39:5b:
         60:bc:4a:e8:c7:44:de:da:df:1c:25:b6:58:5f:12:d0:ea:30:
         e5:d4:7c:ff:51:64:e7:2b:87:a4:0b:4b:83:62:93:93:f1:38:
         c0:25:1b:d1:42:c3:92:c7:ac:fd:cf:11:64:69:38:a1:93:b7:
         0d:87:9e:1f:84:cf:22:02:da:a4:b6:8f:20:85:01:31:c0:35:
         3b:1c:78:a4:81:3a:fa:6f:47:cb:85:fd:51:ea:7c:da:62:b1:
         91:4a:7a:34:03:96:26:fb:f0:9d:14:a8:dc:01:80:10:fc:f4:
         08:d9:ec:51:af:d6:65:a8:f4:7a:33:04:78:01:12:63:94:e5:
         05:fb:31:6b:e4:a1:cf:16:cc:40:59:f8:f3:f6:6a:6b:a4:1b:
         97:8a:b8:52:da:4c:da:b2:ad:8a:07:69:9a:9f:d2:ac:40:d4:
         8a:ff:42:0f:3a:48:a7:1c:de:a8:7f:96:22:34:a2:00:0c:c3:
         f5:b0:fd:61:23:72:ea:50:e9:7a:3f:25:ff:8a:43:fa:d4:ca:
         e8:07:19:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 03:26:33 2024 by rpki-client on console-ams.rpki-client.org