Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/f26924a7-3907-31ca-928b-e3ff0f341667.roa
File:                     f26924a7-3907-31ca-928b-e3ff0f341667.roa (raw, json)
Hash identifier:          gckrQbZC5iC4anwrAaKal38UGLRQz57SJWIuqgR3YnY=
Subject key identifier:   C6:9A:BA:41:C5:40:2F:22:81:1B:98:F6:66:E1:74:12:6B:37:E7:94
Certificate issuer:       /CN=a340834d-d728-405c-95f1-caa6810aa7d9
Certificate serial:       010D0C9F432858458F387E857A2295692493D040
Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/f26924a7-3907-31ca-928b-e3ff0f341667.roa
Signing time:             Tue 16 Apr 2024 01:00:26 +0000
ROA not before:           Tue 16 Apr 2024 01:00:26 +0000
ROA not after:            Mon 15 Jul 2024 01:00:26 +0000
asID:                     19437
IP address blocks:        131.153.168.0/21 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:8f:38:7e:85:7a:22:95:69:24:93:d0:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9
        Validity
            Not Before: Apr 16 01:00:26 2024 GMT
            Not After : Jul 15 01:00:26 2024 GMT
        Subject: CN=2cc17d3b-721a-4350-a0e4-1ca4f2569315
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:9f:77:63:10:0d:53:68:b4:d9:42:5a:e6:f4:
                    40:48:35:0c:d3:f6:c1:5a:5d:7f:3c:43:1c:ee:f6:
                    8e:59:b4:fe:70:d0:23:a4:04:6d:02:b1:7b:c2:c0:
                    a2:32:50:8f:69:8c:48:a9:d9:0d:9c:a3:4c:42:1e:
                    64:b7:70:b8:fe:05:61:fd:33:6f:ec:9c:f8:3c:6d:
                    d0:ae:b2:e2:db:f8:36:80:9a:21:d1:f9:3d:f6:17:
                    66:80:c3:e8:9f:3a:3c:4a:60:c3:a9:54:1f:7a:20:
                    44:fa:94:20:82:2d:48:d7:67:3c:28:89:85:e2:dc:
                    14:d7:07:b0:db:bc:21:f7:69:79:fa:12:28:b3:e2:
                    ea:61:9b:cb:35:9f:61:23:06:f2:b0:0c:91:1d:e7:
                    37:49:4b:48:54:af:69:78:2a:c1:98:65:ad:d7:ff:
                    e0:e4:f2:41:2a:24:8e:d9:7d:21:50:d1:e9:2b:4e:
                    3b:82:31:b9:61:c9:6d:14:49:b1:cd:07:de:25:f1:
                    b2:6a:42:fb:e0:be:98:8b:fc:5b:d3:77:b2:9b:a2:
                    3d:4a:f9:b9:f5:dd:b0:40:d0:88:4d:5c:5b:0d:63:
                    a4:be:c5:75:84:e9:e3:8e:7d:24:73:d0:04:75:09:
                    13:96:5e:81:e1:54:2d:4f:c1:d1:e2:86:00:b9:b3:
                    6c:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:9A:BA:41:C5:40:2F:22:81:1B:98:F6:66:E1:74:12:6B:37:E7:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/f26924a7-3907-31ca-928b-e3ff0f341667.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl

            X509v3 Authority Key Identifier:
                keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.153.168.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:5b:0d:23:ee:e2:2e:0b:fe:1b:1e:03:85:88:9d:c9:a2:aa:
         c3:33:bd:f3:d1:e9:7f:2d:47:07:48:a0:45:8e:1b:5b:33:4f:
         e8:f4:ed:73:fd:dd:f4:0d:93:50:6c:e7:8a:14:98:4c:1e:65:
         9b:bd:6f:ad:8b:0d:9b:05:99:e6:e9:de:62:7b:69:8b:27:28:
         62:a9:47:90:c7:cc:57:81:90:ec:39:e2:ee:c2:02:ee:d1:35:
         21:07:3c:70:98:6c:32:b1:6a:c6:7e:29:ea:fb:e9:58:50:0a:
         a8:36:30:7d:3f:3b:f0:38:59:a8:61:80:90:bd:cc:cb:2d:d3:
         c3:51:fb:01:8d:e1:23:f2:92:a2:7e:77:7d:e4:e5:67:ab:db:
         41:18:a0:2c:3b:23:11:92:07:d0:60:10:9b:e3:a3:cb:2d:c8:
         be:6c:b9:29:01:94:a8:aa:4a:44:06:ec:c4:4c:fa:95:c2:bb:
         5e:7c:f6:0b:0c:32:1a:79:ed:93:72:8a:55:19:a1:b4:23:63:
         46:69:56:1d:e9:8f:3f:81:da:d3:b1:c2:e7:13:8d:93:dd:5c:
         d2:5b:a0:96:a0:98:c4:23:1c:e9:d6:d4:15:38:85:01:a7:55:
         ec:a2:96:39:ae:0d:56:79:c4:39:9b:ed:07:a3:63:01:c4:56:
         49:0a:57:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 21:43:04 2024 by rpki-client on console-ams.rpki-client.org