Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/cbc1f567-c14a-38d1-917a-e3f1f193c5f5.roa
File:                     cbc1f567-c14a-38d1-917a-e3f1f193c5f5.roa (raw, json)
Hash identifier:          N2D9sjsQbH0OTQYq+nUaM+qvxAnc5q0aO26oPZEuR9U=
Subject key identifier:   B4:5B:9A:69:E0:0A:E5:C8:C4:60:B1:FA:25:7A:E5:02:B6:9C:89:00
Certificate issuer:       /CN=a340834d-d728-405c-95f1-caa6810aa7d9
Certificate serial:       010D0C9F432858459368BB9DB17059794629FD30
Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/cbc1f567-c14a-38d1-917a-e3f1f193c5f5.roa
Signing time:             Wed 17 Apr 2024 13:00:34 +0000
ROA not before:           Wed 17 Apr 2024 13:00:34 +0000
ROA not after:            Tue 16 Jul 2024 13:00:34 +0000
asID:                     19437
IP address blocks:        131.153.200.0/23 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:93:68:bb:9d:b1:70:59:79:46:29:fd:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9
        Validity
            Not Before: Apr 17 13:00:34 2024 GMT
            Not After : Jul 16 13:00:34 2024 GMT
        Subject: CN=919e7a15-3e59-4553-a00d-51b961e37dc7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:39:c9:fa:95:6e:95:db:1d:b0:5e:8d:86:56:
                    83:8e:4c:55:aa:e8:b7:0b:58:e8:91:39:30:5e:d5:
                    fb:31:f8:95:0d:2d:40:1f:6d:0d:cd:30:f5:58:94:
                    a4:0f:19:11:9e:a5:10:e3:bc:d2:47:63:2c:80:cd:
                    79:22:95:8c:af:0b:ca:0c:d5:b0:54:f3:bf:e8:72:
                    f5:8d:b8:8f:39:86:13:8c:12:9d:2d:f8:cc:c2:c4:
                    49:2c:23:7b:04:b9:bf:2e:fd:8d:ed:f7:b6:a5:24:
                    90:45:db:b0:6e:85:63:0c:b1:3d:a7:1c:81:ba:af:
                    63:c4:fb:01:e5:38:8c:37:01:f3:41:84:50:43:8f:
                    1f:96:80:95:09:3b:a0:a4:8a:6d:0d:70:10:d8:52:
                    61:ae:c6:26:65:99:b2:7d:35:dc:d7:9a:a3:cd:f5:
                    92:10:28:bf:f3:a5:7c:7e:1b:f7:c7:e9:62:4d:40:
                    d8:56:0a:cd:c8:1d:96:b0:c4:9e:0a:f9:30:87:83:
                    37:95:e3:59:c0:3d:3d:09:46:94:47:c9:cc:7f:71:
                    ba:7f:77:88:5e:1f:ac:a0:c1:ac:24:94:b4:e3:6c:
                    08:ae:85:d1:0a:33:19:7c:2b:36:13:90:51:62:42:
                    f5:1b:a0:e9:ab:cc:52:9c:bf:c6:fa:8b:6c:b8:17:
                    78:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:5B:9A:69:E0:0A:E5:C8:C4:60:B1:FA:25:7A:E5:02:B6:9C:89:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/cbc1f567-c14a-38d1-917a-e3f1f193c5f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl

            X509v3 Authority Key Identifier:
                keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.153.200.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:52:db:2b:54:2f:ef:6d:30:f5:36:b1:45:4d:23:f4:91:61:
         b9:b2:99:a5:8b:1e:42:74:eb:a6:19:03:a2:ba:1c:7a:73:47:
         cc:c0:37:28:db:70:9f:d1:87:56:7e:68:d3:9d:7c:39:ac:eb:
         5a:1a:de:79:eb:7b:41:7a:f7:3a:cf:09:6c:99:62:e7:c2:3c:
         f6:e8:59:88:c4:45:98:98:25:86:a7:b6:d7:88:41:bd:f1:91:
         6a:4d:aa:7e:03:f9:fb:f1:21:7c:a7:ba:82:6a:6a:28:bf:fc:
         0f:0f:33:f3:d5:99:cb:5d:99:05:9a:13:9f:fd:fd:fb:2e:57:
         35:55:e3:8d:24:67:11:81:ce:95:ca:5d:d3:83:e6:b8:bc:2b:
         47:43:dc:bd:c6:5b:da:34:22:c5:29:52:ea:be:87:fe:70:7e:
         46:53:9a:92:07:e6:f4:d4:60:e4:bd:d9:9a:52:f1:5d:94:fa:
         74:96:da:7f:0f:91:fc:c9:fb:48:2e:9e:37:3f:f0:6d:6c:5a:
         41:2f:06:ab:c7:65:2c:45:01:70:35:4f:3f:a6:a8:ac:0b:8b:
         9a:4b:40:95:af:62:a2:57:f9:fa:a9:7d:69:0d:24:03:51:90:
         70:b7:ba:f1:3e:7b:f7:67:e7:ff:6e:a2:f2:fa:c6:b2:86:99:
         8b:e2:55:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 03:26:33 2024 by rpki-client on console-ams.rpki-client.org