Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/bb2bc32d-cc6b-3226-bbeb-caa3e9feba3a.roa
File:                     bb2bc32d-cc6b-3226-bbeb-caa3e9feba3a.roa (raw, json)
Hash identifier:          9gFUX9aARj44z1iORl3DMdVVBoNwBPkfE42pS30rNw4=
Subject key identifier:   DD:A7:08:A5:4D:D4:0B:B9:C9:56:35:A6:4C:08:F0:8D:6E:21:B4:9D
Certificate issuer:       /CN=a340834d-d728-405c-95f1-caa6810aa7d9
Certificate serial:       010D0C9F432858458DD350BEC5895F87251AA000
Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/bb2bc32d-cc6b-3226-bbeb-caa3e9feba3a.roa
Signing time:             Mon 15 Apr 2024 13:00:35 +0000
ROA not before:           Mon 15 Apr 2024 13:00:35 +0000
ROA not after:            Sun 14 Jul 2024 13:00:35 +0000
asID:                     136899
IP address blocks:        131.153.92.0/24 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:8d:d3:50:be:c5:89:5f:87:25:1a:a0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9
        Validity
            Not Before: Apr 15 13:00:35 2024 GMT
            Not After : Jul 14 13:00:35 2024 GMT
        Subject: CN=95e590f4-56a2-4971-aeeb-db6e5177647c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:cf:09:ca:63:73:57:38:fe:16:cd:5f:f2:5a:
                    e2:e6:2d:c9:cd:d3:8c:4c:b7:d8:37:63:c9:99:49:
                    c5:02:41:f9:a6:3d:56:a9:2d:b0:91:6f:b2:1d:92:
                    bb:ce:95:3c:93:81:09:d2:ea:e1:71:2d:99:93:8e:
                    22:73:68:09:07:a3:c7:c5:01:32:ce:c9:1d:ac:2d:
                    6a:4c:b9:1b:63:ce:13:6f:0d:fb:45:7f:b2:4d:10:
                    16:d4:fa:03:95:1a:18:30:d3:32:c2:74:ab:d8:b0:
                    64:22:e6:24:dc:58:82:1e:21:13:36:61:b1:5f:57:
                    7f:48:d6:26:67:f2:69:e1:3a:d3:bf:7f:1d:a6:d9:
                    a2:45:31:99:31:e6:b1:80:43:9e:e7:bb:89:53:a7:
                    7d:98:60:35:63:2e:ba:c9:21:87:5b:eb:6a:fd:c4:
                    87:6f:5d:fc:59:02:6d:91:5a:bd:95:4a:5d:59:f0:
                    4a:fa:18:3a:08:15:af:32:a6:8e:06:ff:39:39:72:
                    a8:a6:e0:d1:18:a7:65:de:34:6c:10:50:65:9b:2b:
                    3e:7a:10:3a:0f:99:d3:ae:26:87:bc:74:bd:e8:dd:
                    4c:fa:e8:3f:14:45:da:86:39:ed:1f:49:bb:ed:90:
                    11:76:83:a5:c4:8b:9b:e7:97:55:b8:5b:62:3d:9f:
                    19:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:A7:08:A5:4D:D4:0B:B9:C9:56:35:A6:4C:08:F0:8D:6E:21:B4:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/bb2bc32d-cc6b-3226-bbeb-caa3e9feba3a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl

            X509v3 Authority Key Identifier:
                keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.153.92.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:7c:9d:40:8c:97:b4:a2:0c:40:be:66:55:c1:58:47:e6:53:
         64:ec:41:ce:bc:70:b3:8b:fe:f4:23:a4:cd:54:5e:7e:53:4e:
         49:e0:9b:16:25:eb:35:4b:81:51:a1:00:4a:f9:94:70:ae:69:
         a7:22:0c:b8:7b:6f:1e:69:8c:27:6e:1e:87:2d:d5:95:6a:6f:
         95:0b:75:34:2d:f2:14:70:3f:47:7d:95:c6:c6:64:4d:01:4e:
         6f:2f:47:44:fd:0b:0e:9a:a8:1a:2d:f3:00:7d:72:ee:b4:d3:
         27:bc:06:38:54:e2:72:50:69:ce:91:be:08:f2:a3:5f:2d:cc:
         cf:ef:e5:ac:95:b5:8c:50:e6:93:05:58:37:47:56:72:f1:86:
         70:04:bc:47:ec:8c:33:bd:45:66:79:7c:ff:1f:73:9b:fb:30:
         9c:46:9e:eb:81:81:b2:be:37:6a:48:f4:2f:3c:44:44:57:b4:
         cd:4c:e9:40:cf:50:14:33:2b:2d:03:6d:33:9f:4a:56:b1:25:
         94:1a:dd:74:de:c7:0b:b5:c6:b7:1a:bf:60:81:5c:24:0d:66:
         61:d6:c7:f6:a5:89:2e:34:08:62:01:2c:3a:3d:78:3c:d0:82:
         33:df:96:1e:28:b2:4b:c4:0e:d2:c3:ab:1e:2d:2a:c5:61:6d:
         85:6c:2f:1c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWN01C+xYlfhyUaoAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh
N2Q5MB4XDTI0MDQxNTEzMDAzNVoXDTI0MDcxNDEzMDAzNVowLzEtMCsGA1UEAxMk
OTVlNTkwZjQtNTZhMi00OTcxLWFlZWItZGI2ZTUxNzc2NDdjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy88JymNzVzj+Fs1f8lri5i3JzdOMTLfYN2PJ
mUnFAkH5pj1WqS2wkW+yHZK7zpU8k4EJ0urhcS2Zk44ic2gJB6PHxQEyzskdrC1q
TLkbY84Tbw37RX+yTRAW1PoDlRoYMNMywnSr2LBkIuYk3FiCHiETNmGxX1d/SNYm
Z/Jp4TrTv38dptmiRTGZMeaxgEOe57uJU6d9mGA1Yy66ySGHW+tq/cSHb138WQJt
kVq9lUpdWfBK+hg6CBWvMqaOBv85OXKopuDRGKdl3jRsEFBlmys+ehA6D5nTriaH
vHS96N1M+ug/FEXahjntH0m77ZARdoOlxIub55dVuFtiPZ8Z5wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFN2nCKVN1Au5yVY1pkwI8I1uIbSdMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw
ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvYmIyYmMzMmQtY2M2Yi0z
MjI2LWJiZWItY2FhM2U5ZmViYTNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1
ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh
YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2
ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg5lcMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAh8nUCMl7SiDEC+ZlXBWEfmU2TsQc68cLOL/vQjpM1UXn5TTkngmxYl
6zVLgVGhAEr5lHCuaaciDLh7bx5pjCduHoct1ZVqb5ULdTQt8hRwP0d9lcbGZE0B
Tm8vR0T9Cw6aqBot8wB9cu600ye8BjhU4nJQac6Rvgjyo18tzM/v5ayVtYxQ5pMF
WDdHVnLxhnAEvEfsjDO9RWZ5fP8fc5v7MJxGnuuBgbK+N2pI9C88RERXtM1M6UDP
UBQzKy0DbTOfSlaxJZQa3XTexwu1xrcav2CBXCQNZmHWx/aliS40CGIBLDo9eDzQ
gjPflh4oskvEDtLDqx4tKsVhbYVsLxw=
-----END CERTIFICATE-----
Generated at Sun Apr 28 03:26:33 2024 by rpki-client on console-ams.rpki-client.org