Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/d498f1ad-6550-3118-8da5-441323aa3937.roa
File:                     d498f1ad-6550-3118-8da5-441323aa3937.roa (raw, json)
Hash identifier:          lG4VF8ZdBNpBQT5iuFFgLX+p76PyRbnb7rRbb/kN/60=
Subject key identifier:   78:E4:11:ED:BA:F2:E6:B7:78:66:B7:8D:79:8C:1A:C2:66:72:CD:FA
Certificate issuer:       /CN=a340834d-d728-405c-95f1-caa6810aa7d9
Certificate serial:       010D0C9F432858458DD34F5A114E249ECD635D80
Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/d498f1ad-6550-3118-8da5-441323aa3937.roa
Signing time:             Mon 15 Apr 2024 13:00:35 +0000
ROA not before:           Mon 15 Apr 2024 13:00:35 +0000
ROA not after:            Sun 14 Jul 2024 13:00:35 +0000
asID:                     20454
IP address blocks:        131.153.37.0/24 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 30 Apr 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:8d:d3:4f:5a:11:4e:24:9e:cd:63:5d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9
        Validity
            Not Before: Apr 15 13:00:35 2024 GMT
            Not After : Jul 14 13:00:35 2024 GMT
        Subject: CN=cdd918db-6077-48ea-800f-6395e5821968
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:93:02:7f:59:ac:76:d4:f2:e3:76:38:55:8c:
                    7b:42:33:5c:94:20:15:bd:8e:d2:dd:a4:ef:55:7c:
                    41:b7:cf:33:a7:1e:87:13:b7:b0:be:5e:ba:5d:dd:
                    7c:ae:57:c5:c6:fc:97:1e:43:1a:77:f3:46:ed:f5:
                    12:c0:a8:bb:58:c8:fa:80:9c:a7:6e:42:72:32:45:
                    10:e5:ae:c3:08:8e:82:ce:11:9a:1d:53:63:05:1b:
                    4f:97:a2:d3:0a:ad:8c:0f:3a:13:4b:76:a6:fd:8a:
                    c7:56:93:28:4d:89:b2:e0:ae:66:10:17:7e:4c:af:
                    44:66:a5:0e:00:d1:ef:7e:08:b9:05:24:d4:55:5f:
                    df:47:22:84:0b:9d:aa:c5:a5:af:4e:7d:57:0b:72:
                    3a:c1:72:39:72:c7:3b:cd:1f:8f:c4:5b:d1:b9:21:
                    70:cd:1a:ba:d7:f8:ed:e9:c4:e7:ad:80:4c:45:5b:
                    51:84:84:dd:ed:db:58:78:ca:4b:ef:fa:4f:6a:cc:
                    d4:31:86:3c:62:34:fb:19:d0:3f:ea:a0:8a:32:6c:
                    db:30:fa:29:17:3e:cd:f2:82:5e:49:f9:8b:cd:87:
                    ad:42:89:53:8d:05:0d:8c:20:ef:fd:d0:79:f2:52:
                    f0:bf:cf:57:11:73:fa:34:4d:8d:bb:42:fe:72:cf:
                    71:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:E4:11:ED:BA:F2:E6:B7:78:66:B7:8D:79:8C:1A:C2:66:72:CD:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/d498f1ad-6550-3118-8da5-441323aa3937.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl

            X509v3 Authority Key Identifier:
                keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.153.37.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:61:b1:dc:7c:14:81:8e:b6:cf:e8:40:5a:3c:09:a8:f3:e7:
         f1:67:7c:9a:b0:0e:b8:f7:4d:66:59:df:43:c2:ad:e7:4e:1e:
         34:f3:e9:c1:4e:25:2d:15:3f:69:57:88:4a:9f:c2:55:70:a2:
         bb:14:3c:0b:6f:fb:fd:db:69:f5:c3:3e:5c:ad:b7:ca:45:6d:
         e6:7d:78:e0:5d:e6:d1:d4:7d:1b:6e:2b:db:3a:1b:74:de:11:
         01:2a:22:7b:cb:07:61:28:82:99:63:f3:1c:08:de:cd:c6:b7:
         1e:51:3f:76:aa:a1:af:b4:49:09:b1:b7:c8:c5:1e:35:55:5f:
         00:90:2e:ca:bb:88:33:cb:48:17:49:5e:f0:9e:cd:67:c7:30:
         b3:6a:85:8b:31:fa:0b:fe:6f:96:a0:15:25:4a:09:92:8b:01:
         d1:2f:39:b0:42:0f:42:55:36:11:71:f3:71:ac:9d:23:ce:2c:
         39:1d:16:d8:78:ef:75:db:7f:d4:b8:07:fc:af:9b:5a:c9:b8:
         71:80:c6:7d:c5:d8:43:64:21:68:3d:f8:5e:41:0c:69:fe:a1:
         c7:f5:79:8a:74:77:3d:ff:3e:62:67:91:80:ec:a5:33:34:86:
         ca:5c:5c:a4:83:54:fe:b4:be:dd:73:13:53:9c:8b:0a:06:f2:
         ac:af:da:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 16:15:40 2024 by rpki-client on console-fra.rpki-client.org