Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/3de088e7-8a5d-3351-9aa7-60417e18fde0.roa
File:                     3de088e7-8a5d-3351-9aa7-60417e18fde0.roa (raw, json)
Hash identifier:          KH702OdXygAgMWE1OQAZ0HVYq7pWSQb3Wmh5QuQ/Qx8=
Subject key identifier:   43:7B:D8:15:43:1A:4C:9F:B3:69:5E:5A:75:EB:A3:73:BB:25:78:D3
Certificate issuer:       /CN=64239825-d3e6-4b1f-a339-f73f2db89ee9
Certificate serial:       010D0C9F432858474850C16C0EF55571CBA86200
Authority key identifier: 89:8A:BE:E2:5A:C6:20:65:B0:9B:12:9A:09:45:2E:CB:6A:B9:AC:83
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/3de088e7-8a5d-3351-9aa7-60417e18fde0.roa
Signing time:             Sat 21 Sep 2024 01:00:33 +0000
ROA not before:           Sat 21 Sep 2024 01:00:33 +0000
ROA not after:            Fri 20 Dec 2024 02:00:33 +0000
asID:                     20473
IP address blocks:        131.226.41.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/64239825-d3e6-4b1f-a339-f73f2db89ee9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/64239825-d3e6-4b1f-a339-f73f2db89ee9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:48:50:c1:6c:0e:f5:55:71:cb:a8:62:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64239825-d3e6-4b1f-a339-f73f2db89ee9
        Validity
            Not Before: Sep 21 01:00:33 2024 GMT
            Not After : Dec 20 02:00:33 2024 GMT
        Subject: CN=d41636e0-afb2-47b5-820b-81134adfd005
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:da:63:d4:8a:4b:0e:1c:bb:7a:ea:cd:a4:08:
                    25:52:5e:33:99:29:3b:4a:99:ac:11:e5:7a:a4:f1:
                    12:44:86:34:a2:5c:5d:b9:8b:96:36:2c:d2:c6:22:
                    01:b1:82:2e:e2:0e:52:dd:fa:ee:36:71:28:56:e4:
                    c9:9d:68:22:a5:9e:b7:32:3c:51:6f:8a:24:1d:69:
                    14:38:45:52:e3:2c:b9:cb:94:70:66:6b:fb:e3:f5:
                    26:42:41:10:f1:d8:d6:90:54:de:d7:f6:1d:7a:25:
                    7d:7b:fe:50:11:89:2f:fc:e8:4e:a6:49:ba:49:b0:
                    9d:5f:e8:08:5b:0a:f0:a8:59:0d:02:16:32:b6:7f:
                    e0:5d:af:0e:2b:7b:5d:95:77:a2:ed:ad:83:2a:88:
                    06:14:53:ad:53:02:2d:7c:0a:4d:e9:74:3f:98:e8:
                    49:6b:8e:aa:b2:c0:20:10:52:c1:ef:00:5b:cf:08:
                    6d:a0:d0:aa:0a:40:6c:69:ec:68:15:fb:27:6a:bb:
                    e7:e8:7c:67:16:54:c1:ab:d8:bf:30:24:3a:90:63:
                    98:95:b4:38:d7:fb:92:3f:8c:90:38:31:6d:03:ff:
                    21:32:8d:4d:50:a2:36:28:1b:86:e4:b5:72:84:9f:
                    5c:ac:ee:b7:29:24:6e:62:8c:b6:ce:9f:9b:53:55:
                    6e:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:7B:D8:15:43:1A:4C:9F:B3:69:5E:5A:75:EB:A3:73:BB:25:78:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/3de088e7-8a5d-3351-9aa7-60417e18fde0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/64239825-d3e6-4b1f-a339-f73f2db89ee9.crl

            X509v3 Authority Key Identifier:
                keyid:89:8A:BE:E2:5A:C6:20:65:B0:9B:12:9A:09:45:2E:CB:6A:B9:AC:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.226.41.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:4e:59:48:0f:cf:4b:4b:89:71:93:8c:a9:6e:2b:74:25:c2:
         d8:b6:49:08:96:cf:32:9e:94:da:c7:bc:51:b1:31:58:40:ac:
         aa:da:77:f6:b9:e0:11:e2:b5:0b:71:bd:0c:fe:79:18:af:d4:
         46:f9:58:8d:3d:82:40:c1:41:cf:a7:48:0d:78:8b:52:3d:23:
         a4:5e:45:61:0d:f8:97:58:10:65:93:74:5d:b9:d8:44:43:81:
         2e:5e:ef:1e:09:84:8c:cd:79:ca:44:4b:b9:6a:97:55:92:e7:
         b0:9a:f1:ec:1d:58:b0:f6:8d:38:22:4b:25:ee:3b:20:b7:f1:
         8e:9f:3b:a1:a1:c9:b2:30:43:f9:b7:d3:db:65:39:d7:0a:dd:
         4d:21:3e:35:bc:58:9b:4b:4d:1a:55:0c:e1:5f:ca:27:e5:15:
         9e:17:ac:ae:fb:0a:a6:80:d3:49:b2:89:b8:88:dc:28:11:24:
         9c:2a:24:0b:48:a3:81:16:c2:0b:8f:a1:44:8b:15:df:04:6f:
         02:70:65:20:bd:96:50:d7:0e:8d:8f:6b:29:ae:c5:3e:60:66:
         13:d8:4e:03:2b:2f:ae:ad:d7:ed:8e:76:d4:e8:1a:70:55:39:
         0f:c7:b9:2c:84:e7:f8:2f:8b:87:7f:4a:40:50:c6:0f:a1:24:
         1d:a8:bc:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:46:17 2024 by rpki-client on console-ams.rpki-client.org