Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/742bad72-ac72-3371-b1fc-2ed2369b58ff.roa
File:                     742bad72-ac72-3371-b1fc-2ed2369b58ff.roa (raw, json)
Hash identifier:          OW50po01i1xBI449Q2khIcyNiqHwe7PX+UvRgtkGU7o=
Subject key identifier:   57:46:A3:5D:98:18:11:D6:A3:D1:70:D0:27:E4:3C:15:F3:54:FA:C8
Certificate issuer:       /CN=64239825-d3e6-4b1f-a339-f73f2db89ee9
Certificate serial:       010D0C9F4328584762D64DC711C9DABE5CE495C0
Authority key identifier: 89:8A:BE:E2:5A:C6:20:65:B0:9B:12:9A:09:45:2E:CB:6A:B9:AC:83
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/742bad72-ac72-3371-b1fc-2ed2369b58ff.roa
Signing time:             Mon 30 Sep 2024 13:00:42 +0000
ROA not before:           Mon 30 Sep 2024 13:00:42 +0000
ROA not after:            Sun 29 Dec 2024 14:00:42 +0000
asID:                     398391
IP address blocks:        131.226.42.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/64239825-d3e6-4b1f-a339-f73f2db89ee9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/64239825-d3e6-4b1f-a339-f73f2db89ee9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:62:d6:4d:c7:11:c9:da:be:5c:e4:95:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64239825-d3e6-4b1f-a339-f73f2db89ee9
        Validity
            Not Before: Sep 30 13:00:42 2024 GMT
            Not After : Dec 29 14:00:42 2024 GMT
        Subject: CN=b34a20b7-2c92-4e4c-ba75-d2b7ddd0d680
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:26:76:0b:52:8c:d8:ed:f2:06:22:e2:19:55:
                    8d:c2:68:6f:7b:84:15:d1:f8:14:3a:16:e9:cd:2d:
                    a1:36:97:b5:c7:d3:86:70:de:51:36:ed:2a:b4:96:
                    5f:f9:27:19:4a:71:7e:21:bb:56:c0:a1:1a:60:a6:
                    c5:b0:a0:6a:ce:33:00:d3:36:a6:62:75:e5:12:3f:
                    65:ec:23:95:fb:77:5c:8e:ca:ff:6f:56:7c:df:d5:
                    12:90:8d:c2:9d:82:b5:bf:9a:ee:b0:e0:dd:24:c2:
                    fc:8e:2c:d3:1c:08:bc:d8:ff:17:80:95:72:5b:66:
                    79:a5:98:a6:a0:18:c1:3a:c9:f7:b0:4e:02:6e:49:
                    08:e6:5e:5c:62:ac:66:4b:94:35:e3:6d:05:4c:08:
                    34:9d:6e:e8:62:e1:d8:30:1b:37:2f:94:f5:fb:67:
                    23:61:92:85:d3:f8:7d:c6:86:bf:8e:16:f1:b9:53:
                    65:69:f6:f7:eb:23:b5:47:52:7a:d0:43:8e:4c:33:
                    7c:21:3d:04:42:c5:13:d9:9c:b1:c7:0d:f7:ea:f9:
                    5a:83:8e:15:37:8a:87:d7:36:83:54:98:74:fb:4a:
                    17:e5:fc:a2:e8:0e:96:95:e6:0a:26:68:e8:41:4f:
                    ac:f3:9a:68:4c:7e:47:f1:8d:2a:73:ec:85:1d:1b:
                    39:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:46:A3:5D:98:18:11:D6:A3:D1:70:D0:27:E4:3C:15:F3:54:FA:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/742bad72-ac72-3371-b1fc-2ed2369b58ff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/64239825-d3e6-4b1f-a339-f73f2db89ee9.crl

            X509v3 Authority Key Identifier:
                keyid:89:8A:BE:E2:5A:C6:20:65:B0:9B:12:9A:09:45:2E:CB:6A:B9:AC:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.226.42.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:18:39:77:f5:76:b4:65:75:ca:ea:09:05:6b:68:da:53:e7:
         97:f3:a6:20:3f:7a:a1:8c:62:e3:1d:0c:0a:43:fa:6d:18:80:
         17:f9:09:19:83:5f:9d:57:51:9f:85:66:6b:5c:b3:be:f6:fb:
         35:fa:99:e3:30:94:37:d5:50:01:63:2b:b5:55:df:27:f1:75:
         10:04:4a:70:27:90:f2:d2:7a:38:bf:6d:38:cf:80:3f:f8:11:
         8e:65:97:9d:9e:42:53:8c:2a:44:28:07:cf:42:ca:1d:58:1a:
         d2:96:17:09:a7:7c:df:9a:e9:b8:d6:eb:80:0b:40:b2:f6:41:
         bd:ba:8e:e2:d3:51:6a:14:28:ee:36:47:8e:47:6f:21:99:32:
         1f:5b:3f:2a:e1:3d:5b:58:34:4c:28:f4:1c:7a:58:a2:13:e9:
         b1:c2:43:e3:97:a9:ec:6e:c8:6a:da:fe:2a:dc:9b:b0:ad:bc:
         50:a4:0f:69:43:f9:5b:64:6b:1a:62:60:83:54:ec:be:95:8e:
         b0:60:41:74:12:ee:28:1a:1a:d5:1e:11:ec:9c:0e:98:e3:e9:
         bb:ab:46:34:01:5c:2d:d4:0f:e6:17:20:45:03:0a:a5:91:3a:
         92:2b:bb:a0:bf:e5:77:dc:95:3f:b9:68:ba:fe:e6:76:28:09:
         d4:75:aa:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:46:17 2024 by rpki-client on console-ams.rpki-client.org