Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/ac7b4e1e-0a10-3720-8cd3-3356381d352a.roa
File:                     ac7b4e1e-0a10-3720-8cd3-3356381d352a.roa (raw, json)
Hash identifier:          D2Sf4waRqrdFOFsJbOfd45HyDdFrIl+q6rHWZx3Owqw=
Subject key identifier:   92:5D:5B:5A:A2:8A:B7:DD:C9:B4:AC:C8:BB:38:05:34:F2:B6:DD:A2
Certificate issuer:       /CN=a340834d-d728-405c-95f1-caa6810aa7d9
Certificate serial:       010D0C9F432858458DD35356D751AE91839CBF00
Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/ac7b4e1e-0a10-3720-8cd3-3356381d352a.roa
Signing time:             Mon 15 Apr 2024 13:00:35 +0000
ROA not before:           Mon 15 Apr 2024 13:00:35 +0000
ROA not after:            Sun 14 Jul 2024 13:00:35 +0000
asID:                     20454
IP address blocks:        131.153.68.0/23 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:8d:d3:53:56:d7:51:ae:91:83:9c:bf:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9
        Validity
            Not Before: Apr 15 13:00:35 2024 GMT
            Not After : Jul 14 13:00:35 2024 GMT
        Subject: CN=3d68ecc0-9cdc-4daf-a04b-c60d395b0c8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:c4:eb:4b:24:03:1b:22:70:e2:86:a6:ce:cf:
                    e3:df:6f:5f:b7:61:5d:e5:d2:9e:e3:38:59:5e:11:
                    0d:5b:37:7f:68:95:fc:0b:67:76:9f:db:4b:eb:2a:
                    5c:2f:b2:71:fd:e9:45:08:9a:d5:cb:4c:22:1c:d7:
                    bd:2a:b5:ab:57:0b:8a:7b:d1:c4:01:d9:68:5c:ad:
                    72:54:de:87:9c:cf:1b:b0:3b:b9:d6:28:be:fe:bf:
                    f4:a4:66:11:3b:ae:7f:00:ad:ca:25:63:3e:e4:9d:
                    69:1c:f4:1b:f9:5b:b3:e2:85:96:32:df:f9:8c:7a:
                    ba:81:a1:c6:42:aa:90:5d:72:4c:32:82:9c:a8:e2:
                    1b:49:43:0e:7a:8d:1c:f9:15:7d:f6:46:f5:2d:9b:
                    0b:46:16:25:e4:70:e2:71:f1:b8:db:61:96:07:da:
                    1e:6d:26:88:a0:b7:90:14:35:20:70:c1:35:4d:2e:
                    85:2e:dc:96:14:37:16:1a:7f:89:ea:d9:01:7b:d4:
                    00:87:03:52:45:c8:1b:27:31:61:0e:1b:7b:0e:42:
                    d2:ea:af:d8:0d:d2:2a:84:eb:da:a0:67:15:f1:ab:
                    3a:01:a4:ef:94:e0:b8:38:48:84:0b:ed:91:21:97:
                    ad:5b:ff:eb:e0:6d:79:e6:a4:f6:d4:53:28:d7:eb:
                    f8:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:5D:5B:5A:A2:8A:B7:DD:C9:B4:AC:C8:BB:38:05:34:F2:B6:DD:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/ac7b4e1e-0a10-3720-8cd3-3356381d352a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl

            X509v3 Authority Key Identifier:
                keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.153.68.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:a7:f9:2e:e0:e0:86:d5:74:11:6b:39:5f:23:84:f8:0f:ce:
         a5:34:1a:d0:5c:dd:bf:49:1a:d2:1c:e9:7b:9c:d2:75:9c:be:
         7c:e8:56:f9:fb:7f:8a:d4:c8:02:02:c2:13:d8:0c:0e:35:a9:
         5a:ac:c2:e1:7a:ff:29:4a:aa:49:7a:c7:7d:15:ee:56:18:16:
         15:07:ed:dd:ad:20:0f:50:46:fd:7d:87:c4:ea:e0:f0:18:fb:
         0b:3f:87:f9:5c:1b:60:1b:09:e5:92:aa:36:0e:06:d8:7d:18:
         5b:12:4a:50:2d:32:75:bc:29:f1:7f:d5:ba:af:dd:43:9b:18:
         c6:4d:74:c1:c6:d8:b3:8c:c9:76:8c:5c:a9:aa:58:35:5b:8f:
         e0:79:32:ef:41:72:89:0e:46:19:de:fc:4a:9e:b0:59:ea:67:
         6c:e4:19:44:4d:27:48:48:84:c6:01:99:62:d1:9a:a6:86:2d:
         b7:43:dd:4d:4c:0f:6a:a9:5a:73:bc:bd:f3:8d:8b:16:50:b9:
         f9:e7:e0:23:f3:7c:af:09:9d:a8:52:3c:12:23:d6:71:59:ef:
         11:c0:06:cd:72:bc:19:d0:3d:a5:2e:6b:a1:6d:ed:14:9f:ba:
         78:06:7d:be:2a:8f:0e:e1:39:49:a8:f0:a3:0f:ff:39:8d:6b:
         c8:40:d4:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 03:26:33 2024 by rpki-client on console-ams.rpki-client.org