Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/8d254be0-4973-3adb-9609-4a7ab5dad347.roa
File:                     8d254be0-4973-3adb-9609-4a7ab5dad347.roa (raw, json)
Hash identifier:          Z1BGt7NDQXjaoCNiHMBE4orIT2TiWl8UEWlJf01xT30=
Subject key identifier:   68:C7:D6:99:43:1A:DA:07:A5:66:AF:49:CD:7E:59:B4:41:24:05:E1
Certificate issuer:       /CN=a340834d-d728-405c-95f1-caa6810aa7d9
Certificate serial:       010D0C9F432858458DD351B9C0D37E8CB63B4400
Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/8d254be0-4973-3adb-9609-4a7ab5dad347.roa
Signing time:             Mon 15 Apr 2024 13:00:35 +0000
ROA not before:           Mon 15 Apr 2024 13:00:35 +0000
ROA not after:            Sun 14 Jul 2024 13:00:35 +0000
asID:                     12189
IP address blocks:        131.153.116.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 28 Apr 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:8d:d3:51:b9:c0:d3:7e:8c:b6:3b:44:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9
        Validity
            Not Before: Apr 15 13:00:35 2024 GMT
            Not After : Jul 14 13:00:35 2024 GMT
        Subject: CN=8d685526-1850-4061-b682-306f7a5d0bd3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:75:5b:52:a5:9a:ae:d7:18:b2:4e:8c:df:b6:
                    4a:af:a0:0d:01:65:0e:99:26:68:16:a8:64:cd:f6:
                    61:38:7c:68:e0:9b:77:a0:5b:cf:c1:9d:5a:61:68:
                    08:8d:a5:c0:cd:59:04:19:07:43:84:65:5a:fc:9d:
                    94:6a:0e:b8:b1:fc:44:50:fc:24:4e:93:c3:07:b8:
                    6f:8c:9f:f3:e0:39:6c:2f:7f:e0:aa:9e:31:bf:7e:
                    34:a9:ac:ac:73:38:16:cf:b9:35:64:29:f3:fa:49:
                    56:98:75:98:74:e4:a1:00:a2:b2:02:89:2c:42:d0:
                    65:f9:24:d1:2a:7b:95:8d:bb:99:f2:24:52:53:46:
                    58:2e:61:3c:01:ee:39:74:43:a7:65:48:30:84:ea:
                    70:1c:a7:7e:68:16:11:6d:36:64:75:f9:8c:ed:a5:
                    e6:6b:e1:5f:9f:11:18:13:53:b2:bd:69:2f:51:c2:
                    61:ef:51:42:46:49:cc:30:88:e8:6c:53:cb:b8:3f:
                    43:95:c8:2c:4b:a3:7c:8a:87:6f:6a:58:d0:c5:a5:
                    c6:c2:ac:4a:a2:68:54:20:16:d9:0c:80:ce:39:8a:
                    63:02:a7:f8:53:1d:89:bf:07:13:9b:4e:4b:72:bd:
                    58:f4:cf:18:1e:1b:0e:c2:d1:20:bd:e2:73:18:f1:
                    3e:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:C7:D6:99:43:1A:DA:07:A5:66:AF:49:CD:7E:59:B4:41:24:05:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/8d254be0-4973-3adb-9609-4a7ab5dad347.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl

            X509v3 Authority Key Identifier:
                keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.153.116.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:13:71:b9:a2:48:4d:7c:38:9d:9f:30:8d:a4:71:aa:33:f6:
         83:8e:8f:52:71:be:3e:c5:b2:7a:09:c0:55:b3:cf:8b:95:f3:
         09:74:e9:d2:46:a6:f6:8b:22:a5:3f:81:ca:49:1f:35:8a:33:
         9b:92:dd:e6:16:48:71:28:9d:69:d1:15:f5:1c:94:e0:52:8d:
         b2:4b:42:98:e3:e4:05:80:71:64:4d:94:12:4e:04:e1:3a:4f:
         56:05:1a:27:0c:82:65:bf:ec:06:11:ca:09:44:ce:b0:3a:b9:
         f2:4e:8f:3a:e9:bd:b6:9a:24:dc:56:6a:cc:4a:c0:1d:6f:6c:
         a5:d1:64:d2:74:23:10:38:77:44:fc:c3:dc:b7:77:f0:9a:06:
         1e:78:89:34:37:11:aa:eb:1e:6d:fb:4f:1a:fd:91:1b:17:c8:
         50:dd:14:48:d7:74:e6:b5:d4:a8:f2:e4:cd:e7:59:5b:01:6d:
         40:65:81:ce:7e:65:50:7d:67:c9:08:8a:3d:68:d9:14:05:c7:
         44:a1:3e:90:0f:82:ef:16:20:ba:d2:d2:98:37:2e:75:53:82:
         97:1b:19:37:cb:34:17:4c:95:2f:87:9b:b1:ae:48:81:82:0b:
         f1:c8:ac:96:4c:aa:d3:dc:79:59:ac:f4:5c:11:e1:3f:ed:4d:
         05:1d:1d:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 15:34:33 2024 by rpki-client on console-ams.rpki-client.org