Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/820f6bb7-bdb6-34a1-8660-db02bea35986.roa
File:                     820f6bb7-bdb6-34a1-8660-db02bea35986.roa (raw, json)
Hash identifier:          GLN3klt/ivQPjg+FyrNp8hzQLMU9MbhCNuNTvejbRkc=
Subject key identifier:   55:08:6D:F7:A6:A5:D4:5A:A9:CF:F1:15:05:93:1F:89:CD:D7:F1:53
Certificate issuer:       /CN=a340834d-d728-405c-95f1-caa6810aa7d9
Certificate serial:       010D0C9F432858458DD3513BFAE80B1C36012940
Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/820f6bb7-bdb6-34a1-8660-db02bea35986.roa
Signing time:             Mon 15 Apr 2024 13:00:35 +0000
ROA not before:           Mon 15 Apr 2024 13:00:35 +0000
ROA not after:            Sun 14 Jul 2024 13:00:35 +0000
asID:                     39239
IP address blocks:        131.153.105.0/24 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 28 Apr 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:8d:d3:51:3b:fa:e8:0b:1c:36:01:29:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9
        Validity
            Not Before: Apr 15 13:00:35 2024 GMT
            Not After : Jul 14 13:00:35 2024 GMT
        Subject: CN=6a52689f-e3a4-48a2-bd1d-2c5c2977e492
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:fc:ce:f4:e7:7d:56:a3:d0:0c:ff:e7:3a:3b:
                    42:a9:ca:d5:de:d8:a2:19:cb:b6:c0:de:17:37:72:
                    b1:2b:fd:d9:0f:53:c4:ae:1a:a2:84:5f:e1:af:f4:
                    0c:8e:64:c4:40:e3:32:69:0d:e9:20:30:40:b3:27:
                    42:c9:05:06:f1:42:bd:38:17:6e:b2:22:3f:c7:50:
                    00:cc:1d:8c:5f:d8:ea:44:b9:c1:cc:34:7e:89:1c:
                    7f:8f:e9:31:74:50:70:b5:da:10:81:6f:10:31:1d:
                    3f:8f:36:ac:8f:ee:b0:08:b2:3e:48:43:90:a4:30:
                    03:32:81:fd:27:f9:cc:05:99:72:4d:31:a4:19:b1:
                    a7:86:74:5d:1e:3b:b1:d0:9d:12:1b:a5:93:98:cc:
                    d5:41:2e:14:87:e2:97:a3:bd:3f:a8:cc:0f:0f:80:
                    1a:f8:8f:f1:e6:d8:d4:aa:09:29:9b:bf:6c:67:c7:
                    c7:14:83:97:84:c4:e8:32:a4:e4:bc:67:ec:c7:6c:
                    9f:66:c0:a3:cb:a1:54:d9:c8:4e:03:92:10:18:8e:
                    74:28:30:cc:7c:61:88:86:5e:73:a4:be:c8:43:5c:
                    2a:05:73:58:70:98:a8:70:21:00:3f:cf:bf:14:3a:
                    7b:e3:71:a9:91:a5:da:29:08:05:72:94:2e:1b:f9:
                    98:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:08:6D:F7:A6:A5:D4:5A:A9:CF:F1:15:05:93:1F:89:CD:D7:F1:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/820f6bb7-bdb6-34a1-8660-db02bea35986.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl

            X509v3 Authority Key Identifier:
                keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.153.105.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:2d:b7:7b:ef:cc:bc:dd:9e:ee:e9:3c:c7:d8:f7:b8:68:ae:
         9d:67:a6:79:a3:69:42:00:ca:07:44:35:8e:a9:da:d6:cc:0e:
         59:27:d7:08:db:56:f0:74:2b:05:85:08:b6:0d:11:e0:02:52:
         1a:87:3e:ae:89:78:31:85:86:3c:70:82:70:f1:41:02:72:d8:
         cc:f8:8f:c5:3f:32:2e:58:3f:2d:65:52:1a:d0:b7:36:2f:53:
         b4:f7:5a:15:48:99:00:d3:b8:d4:fb:d2:e7:87:9b:a9:a5:40:
         3e:4f:fa:1d:7e:cd:9e:d3:ab:b1:9c:98:c0:1b:45:98:97:35:
         82:e2:21:f2:38:96:a4:40:ea:ca:d8:cc:e5:ed:cc:df:59:ce:
         08:1f:b2:e6:08:89:36:46:14:46:7c:54:6a:db:23:fc:b9:b4:
         ec:b3:19:42:45:a8:7e:74:0a:84:68:43:c8:ce:60:7d:65:59:
         8e:f6:38:09:f8:1b:cf:57:aa:cd:3f:aa:e7:af:f6:a5:a8:6c:
         52:6b:69:ed:a6:e7:60:bb:bc:bc:98:84:8f:42:71:cc:14:54:
         4e:54:c1:b5:34:34:99:f2:15:37:cb:8d:62:a4:90:ba:ed:a6:
         00:38:56:aa:4c:0d:74:d5:ac:61:ed:26:ed:90:44:1d:31:23:
         98:7d:08:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 17:56:39 2024 by rpki-client on console-ams.rpki-client.org