Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/8a02698f-e66f-3fd5-a9d0-8f283b13bc42.roa
File:                     8a02698f-e66f-3fd5-a9d0-8f283b13bc42.roa (raw, json)
Hash identifier:          EFnj/YpY3+JH79U1JHifrk6zuYBjmOdPT2y2VsjQ0U4=
Subject key identifier:   30:F4:8A:E2:B6:2E:74:CE:FB:73:AE:38:25:CF:68:C9:65:22:47:D5
Certificate issuer:       /CN=a340834d-d728-405c-95f1-caa6810aa7d9
Certificate serial:       010D0C9F432858458DD3541FECDC714271C75760
Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/8a02698f-e66f-3fd5-a9d0-8f283b13bc42.roa
Signing time:             Mon 15 Apr 2024 13:00:35 +0000
ROA not before:           Mon 15 Apr 2024 13:00:35 +0000
ROA not after:            Sun 14 Jul 2024 13:00:35 +0000
asID:                     213246
IP address blocks:        131.153.140.0/24 maxlen: 32
                          131.153.141.0/24 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:8d:d3:54:1f:ec:dc:71:42:71:c7:57:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9
        Validity
            Not Before: Apr 15 13:00:35 2024 GMT
            Not After : Jul 14 13:00:35 2024 GMT
        Subject: CN=1111359e-e59e-425e-9942-265acd220280
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:8c:9a:7a:67:0c:73:e5:38:d1:bf:02:2a:5c:
                    af:a5:ee:56:1a:d5:20:f2:5f:b6:ed:6c:b8:2b:7d:
                    c6:39:28:0f:19:e0:d3:cb:3a:6e:62:00:6b:1e:2e:
                    5b:40:21:b4:74:33:7a:47:2c:ce:7f:2c:ca:8e:aa:
                    0f:f2:70:83:43:cc:a3:b7:55:e3:f9:07:20:f3:35:
                    b8:1c:4e:40:ea:89:c8:b0:9d:ce:71:c1:b9:76:a2:
                    4f:de:ce:d7:d4:5d:c1:a6:b1:ff:f9:00:2d:6d:e1:
                    99:e7:1e:04:b6:4f:11:6c:0b:59:9b:9f:ec:38:1c:
                    47:08:3a:2e:9d:c1:8e:70:7a:26:53:09:ce:bb:4d:
                    71:fd:4f:10:c7:ff:61:49:85:75:b0:61:f7:b6:27:
                    70:91:2a:a0:f5:17:dc:80:d8:96:39:7a:6d:8f:33:
                    c9:d6:20:a0:6e:db:12:be:07:56:47:17:86:5e:5d:
                    e9:d8:d5:88:e2:d1:90:9c:08:d3:e4:6c:e6:2d:78:
                    98:73:04:64:ce:05:8e:11:15:61:b9:32:25:30:a9:
                    93:c9:ff:58:4c:f6:4d:1a:6f:1e:46:af:7c:05:a4:
                    c9:a4:cb:9d:05:e4:3b:a3:dd:10:8d:d9:a5:09:10:
                    5a:45:e3:a6:4e:30:44:58:28:50:74:86:94:ea:0e:
                    2d:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:F4:8A:E2:B6:2E:74:CE:FB:73:AE:38:25:CF:68:C9:65:22:47:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/8a02698f-e66f-3fd5-a9d0-8f283b13bc42.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl

            X509v3 Authority Key Identifier:
                keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.153.140.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:5e:47:a7:e3:46:80:5d:a7:fe:f5:79:db:5f:bd:7c:49:5b:
         73:52:f0:d1:09:71:2e:4c:ff:79:49:4f:5b:c8:77:3c:b5:b5:
         bc:5d:d7:cf:89:4b:4f:43:49:fe:46:3a:9a:75:e2:52:6d:05:
         4b:e0:87:50:df:97:ac:2a:d7:10:2f:a8:da:07:f3:65:da:5d:
         9c:c6:98:ed:d4:80:5b:42:16:7a:fd:b2:15:58:a9:0a:21:df:
         25:b1:27:9f:78:ef:28:1a:53:c0:cb:a3:1d:f7:3e:d3:70:53:
         fa:6f:49:1c:54:60:34:70:06:30:8c:6f:55:7e:9b:ff:2b:d6:
         f4:1c:31:a1:1e:06:83:8a:54:57:97:87:ee:9a:ed:78:80:62:
         79:ab:10:70:a0:b3:ee:19:b9:ae:31:d6:9d:d2:28:58:63:3f:
         b6:c1:9a:13:20:e7:2c:ab:24:22:72:51:d3:80:b5:2e:3a:40:
         5e:d0:d0:bd:48:33:77:25:32:a8:23:59:1a:fc:cf:0e:07:27:
         f3:58:77:87:79:08:7a:dd:46:a1:2e:73:58:38:1f:7a:68:22:
         b2:8b:a9:ad:94:dd:73:c6:17:f4:0f:48:ec:78:36:1a:87:31:
         18:dd:d7:47:a8:ff:95:12:c2:1e:24:6f:a7:a9:d7:6c:9a:a7:
         6d:ef:81:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 03:26:33 2024 by rpki-client on console-ams.rpki-client.org