Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/7af57255-95e9-35f8-a3b4-964cc0e6608e.roa
File:                     7af57255-95e9-35f8-a3b4-964cc0e6608e.roa (raw, json)
Hash identifier:          Ln6QR8YrSTnMk8S9TuOWnsbJtqMZoBm9LKm34z7PPEE=
Subject key identifier:   F3:81:3D:40:A7:36:C3:D4:DB:DC:81:C9:1F:BC:AB:E8:CC:11:39:A0
Certificate issuer:       /CN=a340834d-d728-405c-95f1-caa6810aa7d9
Certificate serial:       010D0C9F432858458F387C309AD120F711F83824
Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/7af57255-95e9-35f8-a3b4-964cc0e6608e.roa
Signing time:             Tue 16 Apr 2024 01:00:26 +0000
ROA not before:           Tue 16 Apr 2024 01:00:26 +0000
ROA not after:            Mon 15 Jul 2024 01:00:26 +0000
asID:                     12189
IP address blocks:        131.153.72.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 28 Apr 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:8f:38:7c:30:9a:d1:20:f7:11:f8:38:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9
        Validity
            Not Before: Apr 16 01:00:26 2024 GMT
            Not After : Jul 15 01:00:26 2024 GMT
        Subject: CN=3450be3f-f8a7-41a6-b9db-275aa7dfbe20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:96:1e:49:dc:5e:ca:41:f0:48:b4:66:c1:48:
                    a2:23:aa:36:84:d4:12:36:38:0e:69:67:f6:b9:90:
                    00:85:bf:a3:4d:c0:58:d9:bb:95:29:99:5d:e4:2a:
                    cb:4d:25:e3:b9:dc:f9:61:69:b9:e1:0a:ff:57:dd:
                    f7:06:47:ed:f8:ae:2d:1c:f3:41:42:57:d2:c6:e7:
                    48:24:6e:3e:8a:80:4f:75:4f:f7:28:59:d4:6e:b2:
                    81:20:0e:59:d3:c9:a7:21:56:9f:e6:82:ba:de:22:
                    c5:d7:9e:9b:e0:6f:b9:00:ea:41:c5:93:13:0f:45:
                    f5:99:82:08:93:64:73:b2:f2:5e:15:fa:9c:c5:fe:
                    b1:96:e2:82:68:65:5a:7f:f3:c4:1d:65:3c:65:e7:
                    14:94:2e:75:09:df:eb:28:68:bb:a8:55:a9:06:d8:
                    05:8f:07:84:45:3e:0b:ab:74:47:0f:fa:b2:7d:5b:
                    14:68:15:2f:4e:22:85:da:fb:8f:dd:3e:56:3b:9d:
                    b3:b1:c9:d9:78:e7:0d:e0:1e:eb:7d:a9:3a:b9:8c:
                    d7:0e:d6:55:85:21:a7:2c:7c:00:ae:99:ca:6e:96:
                    fc:31:0a:1c:ed:8a:45:fb:8d:f5:db:e8:64:80:bd:
                    d1:7a:72:19:f9:09:3d:83:e6:d3:0e:46:44:1b:01:
                    5e:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:81:3D:40:A7:36:C3:D4:DB:DC:81:C9:1F:BC:AB:E8:CC:11:39:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/7af57255-95e9-35f8-a3b4-964cc0e6608e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl

            X509v3 Authority Key Identifier:
                keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.153.72.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:af:c7:0f:00:0f:5d:de:6f:37:14:d8:56:dd:29:0f:d4:45:
         63:1b:a5:69:a2:a1:e3:9b:71:8a:71:11:64:fc:c0:6a:9c:bb:
         4e:bf:fc:6b:94:f0:41:47:c2:ee:ca:a7:e3:47:2c:65:25:ce:
         b3:c7:43:9a:38:b8:50:5d:95:f4:57:c7:7c:22:2d:7e:03:59:
         10:95:37:6d:d6:14:27:ab:c0:a2:a6:8f:3e:81:18:1e:a1:bc:
         2f:d1:eb:fc:4e:e0:6a:b7:ea:d1:15:ae:b5:fd:5a:4f:2e:9f:
         2c:55:63:33:5a:fe:4e:ce:af:45:a8:43:56:64:fa:6f:fc:68:
         65:34:e7:b2:6c:54:0e:1e:79:5e:ad:99:b0:84:d9:79:44:87:
         4f:75:0f:4d:f0:e5:11:97:33:2a:3b:e7:e8:b8:fb:94:fc:da:
         c0:32:59:6a:97:dd:81:24:7f:bc:6e:4a:fe:d0:df:71:25:6d:
         2b:66:df:da:08:a9:cc:5a:d9:90:1c:da:b0:83:44:a0:1a:ab:
         e3:78:a2:4f:06:8c:c9:5a:f6:a6:c8:60:5c:cc:c0:de:22:e7:
         4e:4f:26:67:bd:59:6f:c2:7d:88:9c:20:d5:1b:c7:08:3f:d8:
         bf:95:19:63:d3:9c:25:af:6d:66:42:9a:b6:51:ea:3c:b8:7f:
         b5:2c:ae:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 17:56:39 2024 by rpki-client on console-ams.rpki-client.org