Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/3de088e7-8a5d-3351-9aa7-60417e18fde0.roa
File:                     3de088e7-8a5d-3351-9aa7-60417e18fde0.roa (raw, json)
Hash identifier:          S0E37otSUwxLrVs67KO2CEQDrFXdDv+x/aFjTAPqV4E=
Subject key identifier:   0D:84:B3:56:D5:1B:D1:5B:C9:69:B9:4E:94:F3:43:FD:4D:88:EA:E2
Certificate issuer:       /CN=64239825-d3e6-4b1f-a339-f73f2db89ee9
Certificate serial:       010D0C9F4328584589A32764841111521C581780
Authority key identifier: 89:8A:BE:E2:5A:C6:20:65:B0:9B:12:9A:09:45:2E:CB:6A:B9:AC:83
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/3de088e7-8a5d-3351-9aa7-60417e18fde0.roa
Signing time:             Sun 14 Apr 2024 01:00:24 +0000
ROA not before:           Sun 14 Apr 2024 01:00:24 +0000
ROA not after:            Sat 13 Jul 2024 01:00:24 +0000
asID:                     20473
IP address blocks:        131.226.41.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/64239825-d3e6-4b1f-a339-f73f2db89ee9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/64239825-d3e6-4b1f-a339-f73f2db89ee9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:89:a3:27:64:84:11:11:52:1c:58:17:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64239825-d3e6-4b1f-a339-f73f2db89ee9
        Validity
            Not Before: Apr 14 01:00:24 2024 GMT
            Not After : Jul 13 01:00:24 2024 GMT
        Subject: CN=17f4b406-5e73-4584-9117-3b8baf1da038
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:36:ee:e2:b3:a5:95:82:1c:f0:2f:18:a8:88:
                    33:92:f3:3c:35:71:c7:af:84:2e:eb:f9:12:50:30:
                    87:bb:91:f8:d1:6a:cf:fe:14:35:19:94:c1:fb:8c:
                    10:91:09:d0:95:d7:49:05:0d:f3:1e:d7:fa:fc:a0:
                    94:9b:79:8f:cc:ba:0b:34:5a:a7:00:97:08:10:f1:
                    2f:b3:3b:6a:82:c3:45:5b:2a:e2:d9:7e:61:50:f9:
                    34:6f:34:23:26:e2:d6:5f:1e:69:e9:ee:7d:52:66:
                    83:24:f1:d9:c9:45:f4:68:32:00:e1:ee:c4:67:4e:
                    e5:c9:82:a0:7e:c9:75:4d:e8:6e:01:23:8d:6e:ef:
                    31:7a:e4:90:4d:f9:98:55:6f:00:68:2f:b1:7b:98:
                    4f:b4:a1:3f:7a:ad:e0:c5:17:75:5e:09:b4:63:66:
                    d0:bb:20:5c:1b:28:df:d3:26:f4:89:6c:69:74:be:
                    c9:93:bc:ad:bf:f2:68:68:f0:9c:51:fb:1a:b7:47:
                    6d:09:a3:a3:ad:2a:87:44:5a:34:83:e4:7d:e9:96:
                    be:d4:e7:76:61:14:1d:db:dd:27:44:2b:12:a4:4f:
                    f7:e5:ee:4e:45:ff:0a:20:4e:b0:8f:0e:55:bf:74:
                    b1:07:79:3f:aa:75:62:50:75:33:e6:b4:2c:c1:e2:
                    45:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:84:B3:56:D5:1B:D1:5B:C9:69:B9:4E:94:F3:43:FD:4D:88:EA:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/3de088e7-8a5d-3351-9aa7-60417e18fde0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/64239825-d3e6-4b1f-a339-f73f2db89ee9.crl

            X509v3 Authority Key Identifier:
                keyid:89:8A:BE:E2:5A:C6:20:65:B0:9B:12:9A:09:45:2E:CB:6A:B9:AC:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.226.41.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:0b:fe:b8:3b:d4:5b:41:ad:51:df:4d:00:62:2a:40:93:61:
         7c:c7:9d:fc:4a:69:18:90:6c:5b:35:6a:ef:81:d3:4c:06:96:
         46:a1:47:2a:af:6d:b9:7e:af:b2:45:d3:1a:b3:34:ac:eb:d2:
         21:7f:7d:7f:52:0a:43:31:07:35:dd:44:a1:fe:30:89:2c:7f:
         d5:63:68:68:cd:73:27:4e:be:d4:81:9c:fc:e4:02:7a:09:36:
         56:aa:e4:31:b7:97:51:b8:2a:b4:ed:81:3c:ec:7c:37:d2:27:
         f1:31:45:26:8b:a8:da:a9:59:dc:cb:5d:5b:53:9a:bd:51:3d:
         6b:28:f9:2e:00:8c:05:54:91:b2:eb:0f:29:bd:a3:db:d1:43:
         5f:87:59:c3:f9:1d:21:ae:82:f0:bc:42:16:02:eb:49:67:a5:
         f7:f8:c7:44:39:4b:78:4b:08:fe:7f:59:c9:52:61:c4:dc:aa:
         95:c8:6f:cb:81:d3:df:63:1c:18:91:4e:1e:4e:08:96:83:ee:
         2c:01:59:b3:83:73:66:36:d7:dd:31:83:d5:e1:13:86:60:72:
         02:9d:96:1e:dc:78:6b:55:11:b4:69:bb:6c:54:37:f7:2d:13:
         eb:d0:ba:b7:28:2d:df:7d:42:72:00:35:c2:9d:98:d2:98:9a:
         83:7a:a5:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 15:16:00 2024 by rpki-client on console-ams.rpki-client.org