Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/9e468c02-912e-327f-a060-95177befb6a0.roa
File:                     9e468c02-912e-327f-a060-95177befb6a0.roa (raw, json)
Hash identifier:          Nbs4O2EqMRP3lpw0OqbeIQj1ILGiq2Var75alATfIoE=
Subject key identifier:   C0:30:94:28:13:DC:37:A0:BD:8D:E0:6B:AD:86:C6:DB:BD:66:81:E4
Certificate issuer:       /CN=a340834d-d728-405c-95f1-caa6810aa7d9
Certificate serial:       010D0C9F432858458F387E0C9DC60DF45FCA5C00
Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/9e468c02-912e-327f-a060-95177befb6a0.roa
Signing time:             Tue 16 Apr 2024 01:00:26 +0000
ROA not before:           Tue 16 Apr 2024 01:00:26 +0000
ROA not after:            Mon 15 Jul 2024 01:00:26 +0000
asID:                     12189
IP address blocks:        131.153.136.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:8f:38:7e:0c:9d:c6:0d:f4:5f:ca:5c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9
        Validity
            Not Before: Apr 16 01:00:26 2024 GMT
            Not After : Jul 15 01:00:26 2024 GMT
        Subject: CN=16dbca99-6212-40e4-a32f-55f19a622423
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:32:79:e6:4b:40:35:20:c9:e8:e6:be:95:b1:
                    a9:e6:b0:e5:3b:64:f2:e0:68:aa:b2:e7:e1:c8:57:
                    f4:f1:14:71:82:ef:bd:95:4d:1d:8b:36:11:b0:1b:
                    48:fc:10:ac:71:37:e2:0e:e2:cb:f2:a6:78:45:fc:
                    23:cb:cc:3e:34:c1:3f:c1:b2:43:63:d7:7a:44:16:
                    4e:ad:32:40:b7:8f:d5:04:a9:85:73:15:75:8e:88:
                    7c:7e:28:bb:61:9c:ea:bf:8c:0d:84:52:07:7d:e5:
                    73:f5:a3:41:cd:d9:36:1c:07:32:a8:82:65:9d:6a:
                    1f:95:e2:89:a4:36:d0:8b:20:25:9d:5b:50:ea:7d:
                    42:30:cb:de:b8:c3:b7:84:e0:53:02:c2:ec:2e:c6:
                    9a:37:6b:90:fe:7a:d7:ae:78:c0:f1:0b:5d:ef:0d:
                    b3:9e:24:1e:53:ea:ef:bd:d4:aa:ab:26:cb:72:0f:
                    52:f7:6c:1e:a8:83:bb:35:b1:12:d8:d3:ac:c8:22:
                    53:5d:52:52:d6:48:6b:63:13:b8:b5:20:bd:27:d7:
                    5c:ef:3f:9e:bb:ae:b3:a4:e5:6e:5f:19:d0:6e:94:
                    9c:77:21:93:bc:b9:6a:1f:30:c1:0e:d7:ed:65:65:
                    38:19:f6:3e:3a:29:18:fb:ce:fb:a9:f9:26:90:92:
                    d5:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:30:94:28:13:DC:37:A0:BD:8D:E0:6B:AD:86:C6:DB:BD:66:81:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/9e468c02-912e-327f-a060-95177befb6a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl

            X509v3 Authority Key Identifier:
                keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.153.136.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:ac:3f:cf:ed:f2:85:ea:cc:ef:9a:25:47:96:c6:d0:3b:89:
         f5:9b:2d:80:42:6c:bf:96:27:7a:a8:92:89:c9:af:dc:38:f3:
         8e:77:2b:79:ea:23:e3:31:8d:7e:f6:12:4e:a9:ae:e9:27:38:
         e4:59:8d:b1:45:62:c3:03:50:b3:85:b9:9c:35:50:fe:43:a6:
         8d:1b:be:be:88:e5:7f:fb:e5:72:49:9d:a5:e4:7d:65:f1:0d:
         36:85:5f:5a:f3:85:6a:b4:c9:8d:3a:58:2d:d3:be:eb:da:43:
         5b:a9:fb:00:f1:fb:09:c7:fe:36:0b:02:2b:60:f4:63:7a:91:
         0b:2b:2d:d4:15:96:ff:ea:b4:b1:3d:49:fa:a8:45:8c:b5:31:
         1b:56:f7:27:72:ce:00:04:ef:43:11:ad:0a:6e:8c:ae:4d:fc:
         15:6d:c7:69:2b:7b:40:21:66:d0:bc:e1:6d:bc:48:d4:62:17:
         89:b0:97:0f:b2:d1:4e:e9:c3:fa:32:07:fb:ea:bd:a4:60:b6:
         50:13:4e:b9:28:6f:6c:2d:f5:f3:a0:b5:11:a2:4d:01:f7:e5:
         8f:11:24:4f:27:88:e8:ab:38:b4:81:53:24:3c:4c:ab:5a:28:
         e7:4f:e5:22:4a:51:f3:af:4b:41:ae:46:67:82:7a:21:47:f2:
         87:f3:61:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 03:26:33 2024 by rpki-client on console-ams.rpki-client.org