Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/88a2969f-7abc-3c1c-af89-6b29fda18bf6.roa
File:                     88a2969f-7abc-3c1c-af89-6b29fda18bf6.roa (raw, json)
Hash identifier:          d0KBcrhadpQMsIIu+9C+nlD5iW1FA6OiaoAHp/ULSwk=
Subject key identifier:   2F:28:CA:51:A2:82:41:84:F3:09:32:C9:7B:F2:FE:BF:5D:22:00:3A
Certificate issuer:       /CN=a340834d-d728-405c-95f1-caa6810aa7d9
Certificate serial:       010D0C9F432858458DD34FDCB2CD8381B1580D00
Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/88a2969f-7abc-3c1c-af89-6b29fda18bf6.roa
Signing time:             Mon 15 Apr 2024 13:00:35 +0000
ROA not before:           Mon 15 Apr 2024 13:00:35 +0000
ROA not after:            Sun 14 Jul 2024 13:00:35 +0000
asID:                     59210
IP address blocks:        131.153.48.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 28 Apr 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:8d:d3:4f:dc:b2:cd:83:81:b1:58:0d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9
        Validity
            Not Before: Apr 15 13:00:35 2024 GMT
            Not After : Jul 14 13:00:35 2024 GMT
        Subject: CN=90d7ec76-ec0c-4767-9f2f-cffe30d7b92f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:fe:f3:e8:38:f3:e3:90:01:35:57:62:49:58:
                    e8:8d:0f:83:41:4c:41:36:15:48:e0:1d:2b:12:44:
                    b8:a1:7b:19:bd:0f:14:72:ac:30:89:8d:36:bb:3e:
                    0f:04:b8:19:25:83:ca:27:f6:b8:49:a1:ef:60:60:
                    f9:dc:68:45:59:53:76:0a:c3:69:68:5c:be:8c:4e:
                    9f:b2:5a:ee:59:fb:99:bb:7a:d7:42:50:3d:a4:63:
                    6c:05:a9:48:40:0a:1b:5e:7c:ba:2e:60:f4:40:36:
                    a2:43:23:d0:35:8c:e4:da:ed:56:27:09:37:97:04:
                    20:fa:95:b2:c4:3b:84:1f:b1:b6:75:fc:59:ef:5d:
                    3f:0e:ce:04:28:51:df:08:f7:06:a7:59:aa:68:5c:
                    71:81:f7:93:70:84:03:a4:1f:35:26:3f:92:b0:e8:
                    67:51:32:31:61:e9:3c:42:65:bc:fe:fa:bf:28:5d:
                    70:53:2f:d6:66:c9:99:c1:f9:2c:04:22:2c:c3:56:
                    bf:fa:03:2f:9c:7e:6e:27:ab:ba:c7:fd:68:49:aa:
                    1f:8a:4b:0a:10:22:a9:3e:02:89:ae:79:74:ff:ff:
                    ff:2e:59:b8:07:b7:1c:b0:93:a9:4b:44:71:0b:8e:
                    eb:3c:4b:95:26:dd:a6:3c:73:df:7d:a0:cc:98:6d:
                    b4:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:28:CA:51:A2:82:41:84:F3:09:32:C9:7B:F2:FE:BF:5D:22:00:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/88a2969f-7abc-3c1c-af89-6b29fda18bf6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl

            X509v3 Authority Key Identifier:
                keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.153.48.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:53:01:92:68:e7:d9:86:3f:93:46:e2:51:3c:97:81:71:f0:
         7e:83:cb:7c:94:09:a2:4f:19:2b:c8:f9:ad:34:ee:84:f9:bd:
         87:07:76:75:4d:a8:22:dd:35:b8:a3:2d:72:41:26:1b:23:30:
         3e:03:63:9d:31:89:a7:72:1a:0d:d6:ce:06:16:58:02:65:0e:
         30:22:84:36:b3:19:a4:98:7b:d0:ba:ac:64:77:d1:9c:d4:98:
         6d:b3:71:a7:62:2a:b9:25:94:9d:59:17:4d:db:34:50:39:1e:
         c9:a4:9a:af:d8:ee:0e:23:13:f3:d5:2a:cc:57:3f:91:6f:7f:
         3e:a7:d4:9c:0b:a9:53:9c:14:19:5e:ab:c4:f6:6e:6c:97:91:
         2e:67:7e:0d:23:cc:7d:5c:44:58:94:36:9d:70:73:d3:2c:9a:
         71:aa:ea:9b:1a:6f:8e:c8:62:c4:8f:be:4a:da:5b:e0:d6:01:
         d0:26:58:d2:6d:4e:66:4b:ac:fa:2b:6e:76:3d:c3:57:a7:db:
         6b:04:af:b0:ef:f1:a9:db:5a:d8:16:58:14:32:f9:a3:b2:fe:
         2a:91:96:d4:d5:52:3f:25:ad:e5:8e:26:eb:64:6b:dc:b9:db:
         e9:55:4b:2f:8f:22:17:4b:75:2d:b6:0b:fc:32:1d:12:f1:82:
         1c:8c:d7:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 17:56:39 2024 by rpki-client on console-ams.rpki-client.org