Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/af86fe52-5b77-46b6-9502-51ccccf3a755/4c146698-99de-3bf6-915e-d2a6ca46429b.roa
File:                     4c146698-99de-3bf6-915e-d2a6ca46429b.roa (raw, json)
Hash identifier:          Pt7cWBr+Rb+IQTijSsREV+c90bYz5xFkymOA48oLMyY=
Subject key identifier:   7F:92:60:C0:04:49:5E:57:C7:7F:E6:EF:28:77:A0:EE:DF:0D:6C:D3
Certificate issuer:       /CN=af86fe52-5b77-46b6-9502-51ccccf3a755
Certificate serial:       010D0C9F43285848100A91D0213943BAE5E568E0
Authority key identifier: A4:29:D8:75:BC:BD:E9:F2:23:77:D7:27:2F:CD:86:45:68:FD:62:FA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/af86fe52-5b77-46b6-9502-51ccccf3a755.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/af86fe52-5b77-46b6-9502-51ccccf3a755/4c146698-99de-3bf6-915e-d2a6ca46429b.roa
Signing time:             Sun 01 Dec 2024 14:00:51 +0000
ROA not before:           Sun 01 Dec 2024 14:00:51 +0000
ROA not after:            Sat 01 Mar 2025 14:00:51 +0000
asID:                     22794
IP address blocks:        131.226.128.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/af86fe52-5b77-46b6-9502-51ccccf3a755/af86fe52-5b77-46b6-9502-51ccccf3a755.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/af86fe52-5b77-46b6-9502-51ccccf3a755/af86fe52-5b77-46b6-9502-51ccccf3a755.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/af86fe52-5b77-46b6-9502-51ccccf3a755.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:10:0a:91:d0:21:39:43:ba:e5:e5:68:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=af86fe52-5b77-46b6-9502-51ccccf3a755
        Validity
            Not Before: Dec  1 14:00:51 2024 GMT
            Not After : Mar  1 14:00:51 2025 GMT
        Subject: CN=56f6a488-eaa8-423c-844f-275d9ea17436
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:4f:1d:1f:7d:bb:29:c7:3c:5e:ec:42:d6:87:
                    c5:a6:38:46:4d:75:b0:88:fc:2b:e8:16:21:5a:75:
                    97:a3:3c:60:de:79:5a:2d:30:11:62:60:06:3f:99:
                    ad:38:94:28:63:a7:8e:92:75:8a:f1:95:8b:10:5e:
                    0b:d3:eb:65:52:50:fa:c2:e9:68:1b:06:81:27:4e:
                    86:27:b5:c2:65:3b:b1:88:72:99:4b:63:aa:71:51:
                    9d:57:13:ae:d3:ec:82:21:85:77:83:7f:11:75:d1:
                    33:70:88:53:17:ea:f9:d2:1a:f6:b5:b6:0f:7f:b6:
                    54:6b:de:0c:c5:e5:03:c5:e7:a8:0f:f2:82:0d:71:
                    d7:48:59:62:af:b4:65:23:e4:be:a8:54:a2:4e:ed:
                    40:6a:76:40:65:59:06:dc:e1:6d:42:f7:5b:44:da:
                    f9:61:f5:c0:9d:07:26:52:bd:d7:1c:62:0e:54:50:
                    ec:b9:9d:77:d4:06:9f:c4:10:18:b7:8d:76:d0:29:
                    e1:03:38:9c:d3:30:af:6c:e3:17:cc:0c:a5:39:9b:
                    97:46:83:f7:50:25:9b:aa:9b:35:5a:80:b5:ea:7e:
                    48:95:3b:23:b1:b2:74:b7:a1:6c:fb:1f:0e:42:4e:
                    33:c1:12:0d:70:e7:9d:94:31:e2:7b:c6:d6:76:88:
                    dc:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:92:60:C0:04:49:5E:57:C7:7F:E6:EF:28:77:A0:EE:DF:0D:6C:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/af86fe52-5b77-46b6-9502-51ccccf3a755/4c146698-99de-3bf6-915e-d2a6ca46429b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/af86fe52-5b77-46b6-9502-51ccccf3a755/af86fe52-5b77-46b6-9502-51ccccf3a755.crl

            X509v3 Authority Key Identifier:
                keyid:A4:29:D8:75:BC:BD:E9:F2:23:77:D7:27:2F:CD:86:45:68:FD:62:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/af86fe52-5b77-46b6-9502-51ccccf3a755.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.226.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:22:6d:9b:c8:77:d6:0b:fd:81:25:75:75:22:a0:1a:97:ad:
         96:d9:cc:ea:2c:e4:b5:12:67:ac:b9:9a:dd:4d:76:81:3c:fd:
         d9:5d:62:b5:d2:72:9b:67:6d:9a:10:ec:87:f8:3b:0f:5c:cf:
         12:89:ea:fe:17:1b:4c:f3:92:e6:a9:a3:01:de:85:c8:3e:78:
         d3:98:c9:c9:f6:48:1b:bd:3b:1d:ff:89:25:70:5e:9f:4b:2b:
         9f:eb:9d:1d:c0:c8:e9:12:0e:e0:39:0d:e4:18:a3:9b:e3:dd:
         ef:82:88:17:65:0b:06:22:2f:33:fe:1d:17:42:8b:44:0d:0a:
         a7:9e:79:7b:f1:a1:84:64:71:4a:99:9f:e3:2b:d6:8f:ec:66:
         93:41:0f:11:a6:ec:ef:17:6d:31:45:3f:ee:cf:1a:f9:6e:6c:
         6b:92:aa:c8:50:89:c5:6d:6c:3d:7b:35:5b:d4:48:f3:1b:e0:
         09:c4:d3:e2:72:60:6a:ec:45:a3:0c:28:58:e0:a9:7a:e0:ed:
         40:82:0d:e8:8f:43:2b:4e:43:8d:cc:0a:0e:d2:af:61:45:8e:
         ab:c3:7c:60:62:a9:5f:cb:48:ea:9f:c6:80:1f:38:f0:cd:6b:
         0d:a3:08:6c:7c:e1:84:5b:25:9b:b8:ec:3c:c3:99:6f:0f:ca:
         68:51:07:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:06:36 2025 by rpki-client