Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/121574f4-e8e8-38cf-8b9e-3220f0bfad79.roa
File:                     121574f4-e8e8-38cf-8b9e-3220f0bfad79.roa (raw, json)
Hash identifier:          JxdQnksIfVK30GokQ+jjW2AGmgvA6yV71kavL3/iA8c=
Subject key identifier:   C6:F9:D6:4A:FB:7B:99:D9:A2:95:EB:78:3D:A4:B7:EE:05:FF:B3:3D
Certificate issuer:       /CN=64239825-d3e6-4b1f-a339-f73f2db89ee9
Certificate serial:       010D0C9F43285844D71525672FE11F61D19A9BC0
Authority key identifier: 89:8A:BE:E2:5A:C6:20:65:B0:9B:12:9A:09:45:2E:CB:6A:B9:AC:83
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/121574f4-e8e8-38cf-8b9e-3220f0bfad79.roa
Signing time:             Sat 10 Feb 2024 02:00:26 +0000
ROA not before:           Sat 10 Feb 2024 02:00:26 +0000
ROA not after:            Fri 10 May 2024 01:00:26 +0000
asID:                     398391
IP address blocks:        131.226.45.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/64239825-d3e6-4b1f-a339-f73f2db89ee9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/64239825-d3e6-4b1f-a339-f73f2db89ee9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Apr 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:d7:15:25:67:2f:e1:1f:61:d1:9a:9b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64239825-d3e6-4b1f-a339-f73f2db89ee9
        Validity
            Not Before: Feb 10 02:00:26 2024 GMT
            Not After : May 10 01:00:26 2024 GMT
        Subject: CN=698a8b20-4578-45fe-b6da-324711790b2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:3a:83:9c:8c:86:28:6b:a0:9b:49:45:76:b1:
                    c9:2b:6e:7f:21:d9:dc:f6:34:47:4d:df:14:55:75:
                    0f:e3:53:92:22:02:ea:d9:a8:48:1a:36:23:4f:c3:
                    d3:b3:09:b2:76:4f:71:2a:d3:34:fb:d4:d0:ad:7a:
                    cc:99:b6:0c:39:24:3e:63:a4:10:09:b7:e9:71:28:
                    af:11:ab:96:6b:9c:2b:0d:d4:7b:2d:7c:e1:1a:4c:
                    9b:54:7a:7c:19:59:bd:30:fc:18:bc:42:cc:ad:a2:
                    ac:fe:eb:a2:48:06:36:d0:cb:76:bc:50:ab:44:56:
                    d0:52:22:44:51:44:f6:d2:8c:bf:cf:fa:62:e7:f7:
                    d4:76:5f:59:8d:b1:cb:01:34:a2:77:5f:82:99:c2:
                    e5:9a:e3:33:2d:fb:f2:e4:8d:95:a0:95:0a:63:eb:
                    f4:6c:33:3e:e6:a2:7d:44:43:77:6f:bb:47:09:01:
                    d0:1b:20:2d:f4:c7:0e:4e:9d:f4:d0:6a:d5:e7:86:
                    90:d7:c3:be:c2:f6:bd:fa:e8:aa:19:ec:3c:69:2d:
                    91:b2:57:8b:d9:a4:1c:06:d4:c6:12:f0:28:e5:35:
                    d6:62:0b:0e:93:6f:f6:d8:75:b5:45:70:c1:69:2d:
                    68:15:e4:d6:4f:64:e4:68:94:a8:aa:fc:11:d8:13:
                    58:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:F9:D6:4A:FB:7B:99:D9:A2:95:EB:78:3D:A4:B7:EE:05:FF:B3:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/121574f4-e8e8-38cf-8b9e-3220f0bfad79.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/64239825-d3e6-4b1f-a339-f73f2db89ee9.crl

            X509v3 Authority Key Identifier:
                keyid:89:8A:BE:E2:5A:C6:20:65:B0:9B:12:9A:09:45:2E:CB:6A:B9:AC:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.226.45.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:d9:2d:b3:93:16:dc:42:7f:8e:ef:43:d7:c7:aa:17:ba:ea:
         cf:02:97:8b:b4:f2:e6:01:24:56:ee:cf:25:46:ab:9c:95:35:
         21:c7:bf:52:6f:9c:4a:2d:a1:26:51:d3:4b:14:7d:5e:57:f9:
         c7:4d:41:d3:16:ff:c6:22:80:7a:d6:19:78:5e:a8:17:9f:91:
         e4:a2:6c:5f:d2:80:81:a4:4c:77:b3:e6:78:ef:02:60:4d:f7:
         6c:b3:a0:a2:14:9d:d6:2b:76:95:59:d5:6b:a9:f8:86:25:1d:
         0d:18:9e:7a:00:02:14:3a:45:dc:31:4e:ce:ac:38:42:2f:c1:
         13:c8:9c:98:4e:18:b6:14:0b:d6:51:10:c4:77:fe:74:2a:79:
         45:28:2e:94:69:36:7c:99:fa:f4:31:e8:35:82:af:95:ff:d7:
         ee:ac:56:1f:f6:89:6f:1f:94:70:3f:b1:6c:08:d7:f3:ce:25:
         85:a1:93:c6:97:84:eb:f5:2d:17:60:b5:30:d0:11:99:41:3d:
         76:72:3a:20:37:91:c7:28:41:aa:48:6f:de:b3:21:35:3f:52:
         a4:05:4a:29:74:28:00:7e:34:1e:97:88:3c:9b:e5:8e:d0:56:
         d9:d4:7a:0b:21:84:4a:72:02:33:5e:be:7e:36:8f:70:a4:0c:
         90:37:62:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 07:43:43 2024 by rpki-client on console-fra.rpki-client.org