Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/4ccb9949-5a31-35f0-b5e1-438d98f96cbd.roa
File:                     4ccb9949-5a31-35f0-b5e1-438d98f96cbd.roa (raw, json)
Hash identifier:          xW1YnBdrU00+tvY/ySgQq7ZctgDLKUQmieUUyWbbXxo=
Subject key identifier:   39:F3:2B:3A:1B:B9:3F:44:51:FA:DA:A5:73:B3:A8:63:35:39:2B:6F
Certificate issuer:       /CN=64239825-d3e6-4b1f-a339-f73f2db89ee9
Certificate serial:       010D0C9F432858452540450D210F3295E4D48980
Authority key identifier: 89:8A:BE:E2:5A:C6:20:65:B0:9B:12:9A:09:45:2E:CB:6A:B9:AC:83
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/4ccb9949-5a31-35f0-b5e1-438d98f96cbd.roa
Signing time:             Sat 09 Mar 2024 02:00:25 +0000
ROA not before:           Sat 09 Mar 2024 02:00:25 +0000
ROA not after:            Fri 07 Jun 2024 01:00:25 +0000
asID:                     398391
IP address blocks:        131.226.32.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/64239825-d3e6-4b1f-a339-f73f2db89ee9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/64239825-d3e6-4b1f-a339-f73f2db89ee9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:25:40:45:0d:21:0f:32:95:e4:d4:89:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64239825-d3e6-4b1f-a339-f73f2db89ee9
        Validity
            Not Before: Mar  9 02:00:25 2024 GMT
            Not After : Jun  7 01:00:25 2024 GMT
        Subject: CN=c94bfb68-ae5a-48f7-8cff-ceef3116c375
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:f9:8e:f9:26:88:03:ff:41:ac:b8:c8:24:43:
                    cf:f3:30:a3:f8:91:4d:d9:9f:44:d3:52:16:66:5f:
                    2b:37:68:4e:00:22:cc:49:80:78:ad:af:fc:bb:c8:
                    d9:87:0f:35:d3:99:44:12:ec:4f:f3:33:59:99:0f:
                    5c:77:45:bd:e8:a8:8e:32:13:3d:b2:93:73:87:27:
                    8c:51:5a:7b:e6:99:9a:aa:f3:58:a8:df:b3:d8:22:
                    4d:46:1b:07:06:3b:16:68:60:7b:57:32:f5:91:99:
                    9e:e8:17:82:e0:86:c8:f0:02:61:8b:95:6d:c3:25:
                    e4:9e:36:f9:7f:6f:f5:26:91:5c:df:1b:70:9f:62:
                    17:af:fb:75:78:57:67:c8:bd:be:e1:8c:cd:23:0b:
                    66:54:df:d6:b8:d6:00:ed:bf:40:16:09:7a:c4:0e:
                    c7:81:2f:7f:0d:55:ff:73:8b:88:b9:bc:b1:a9:81:
                    e8:1c:fe:4d:10:4d:9b:b7:01:2b:31:08:7c:cb:b7:
                    b2:d2:e1:7e:31:4e:b9:b3:9d:b8:eb:07:3f:5f:ee:
                    fe:a3:61:66:d1:98:d1:a2:fe:02:bc:e4:da:f5:cf:
                    ff:8e:8e:43:2e:1f:aa:9c:a5:04:95:b2:4c:b3:fe:
                    8e:c1:fa:87:f1:1d:5c:dc:43:d7:a3:a3:12:8f:55:
                    4c:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:F3:2B:3A:1B:B9:3F:44:51:FA:DA:A5:73:B3:A8:63:35:39:2B:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/4ccb9949-5a31-35f0-b5e1-438d98f96cbd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/64239825-d3e6-4b1f-a339-f73f2db89ee9.crl

            X509v3 Authority Key Identifier:
                keyid:89:8A:BE:E2:5A:C6:20:65:B0:9B:12:9A:09:45:2E:CB:6A:B9:AC:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.226.32.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:a3:cf:df:00:1b:b9:63:38:06:2b:1b:94:90:37:c2:fb:1a:
         8a:97:ae:03:92:d7:2d:c2:93:b5:c9:f2:58:3f:d3:d5:f1:3e:
         8a:46:0a:f6:39:aa:7a:4c:78:61:74:ff:9a:3a:fd:af:12:23:
         25:34:10:04:59:69:d8:db:6f:8e:4a:a1:f3:13:64:51:06:8c:
         83:ca:91:83:69:97:bc:95:90:5a:38:57:4e:60:53:57:f8:d8:
         81:90:d9:97:c3:e1:d8:ab:3e:db:ce:61:ad:26:d9:86:4a:6d:
         e7:eb:c4:83:0d:ff:c5:d7:ca:a1:90:b1:1d:c9:b1:0a:06:25:
         11:d3:b0:1b:e7:78:d3:e0:f9:73:e1:b0:c8:40:dd:a3:d7:60:
         10:c9:18:d1:d0:89:1c:ef:96:d4:c6:dd:cd:16:a2:e9:40:a1:
         4d:e3:78:b4:43:f4:ac:34:9e:00:c1:bb:a7:7a:17:a7:78:fa:
         b1:7d:07:71:2c:14:68:82:38:c8:e4:4b:47:6d:6d:14:5b:2e:
         40:a5:93:11:73:4e:ec:30:8b:32:66:39:6d:bc:59:68:c0:49:
         92:0d:2e:20:1b:ca:f2:bd:c0:cc:f3:11:72:72:c3:73:21:f7:
         89:78:8e:eb:92:27:9e:29:a4:ae:67:c4:3b:22:8d:e4:95:5a:
         ab:a1:0c:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 15:32:12 2024 by rpki-client on console-ams.rpki-client.org