Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/76121c67-c2b1-3363-908d-37816b4d0ce3.roa
File:                     76121c67-c2b1-3363-908d-37816b4d0ce3.roa (raw, json)
Hash identifier:          XjuKDd4G4K7JSFcL+/DyBoJ3kfGkLKpiTZ5q4YNlmEE=
Subject key identifier:   18:43:B9:CA:25:19:EB:3D:86:74:A8:96:20:5D:4C:B0:34:1C:3A:83
Certificate issuer:       /CN=64239825-d3e6-4b1f-a339-f73f2db89ee9
Certificate serial:       010D0C9F4328584525404211D1095BA7C1306180
Authority key identifier: 89:8A:BE:E2:5A:C6:20:65:B0:9B:12:9A:09:45:2E:CB:6A:B9:AC:83
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/76121c67-c2b1-3363-908d-37816b4d0ce3.roa
Signing time:             Sat 09 Mar 2024 02:00:25 +0000
ROA not before:           Sat 09 Mar 2024 02:00:25 +0000
ROA not after:            Fri 07 Jun 2024 01:00:25 +0000
asID:                     398391
IP address blocks:        131.226.33.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/64239825-d3e6-4b1f-a339-f73f2db89ee9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/64239825-d3e6-4b1f-a339-f73f2db89ee9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:25:40:42:11:d1:09:5b:a7:c1:30:61:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64239825-d3e6-4b1f-a339-f73f2db89ee9
        Validity
            Not Before: Mar  9 02:00:25 2024 GMT
            Not After : Jun  7 01:00:25 2024 GMT
        Subject: CN=9f291b3d-9a8a-435e-9667-787286ee60a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:a9:8a:49:d0:9e:a3:d5:58:f3:59:0a:62:16:
                    72:24:4f:35:60:c6:61:97:35:ea:e5:83:27:bc:e7:
                    98:36:b0:a2:fa:f7:3a:46:2d:40:4f:da:b5:e9:69:
                    d3:2b:63:72:b2:ec:f2:2f:0d:ca:a0:48:29:1c:45:
                    ac:d5:eb:91:3b:cc:6a:4a:e4:4b:a0:95:ff:9a:e9:
                    a9:dc:9e:2b:db:89:12:e4:05:fe:66:9f:60:4c:51:
                    2e:f5:79:56:07:7c:d4:6a:27:2c:27:0e:71:b1:49:
                    ec:08:09:26:72:57:71:65:60:19:db:21:17:f5:7c:
                    01:52:c8:df:be:c2:a9:f2:7a:3f:f1:7a:4d:33:12:
                    7f:f2:0a:0a:a1:5b:e4:c0:2c:31:fe:05:ea:e4:54:
                    a3:c2:bf:54:20:39:da:c3:e3:d7:b7:7c:b3:10:f2:
                    41:49:89:2d:dd:74:d9:9a:81:dc:3a:b4:00:f2:aa:
                    62:bc:b8:4e:ce:f6:15:a5:ef:b2:94:c1:c9:c1:ff:
                    e6:81:65:e7:ac:0c:cb:ac:8e:41:2a:e4:18:fd:11:
                    d2:e8:b4:fc:4d:27:4c:82:82:a9:80:26:d9:17:38:
                    f7:1e:d9:b4:e1:a3:d5:ed:01:40:1f:c0:53:34:31:
                    44:67:2a:6a:ec:b4:38:c0:56:23:64:38:dc:18:89:
                    ee:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:43:B9:CA:25:19:EB:3D:86:74:A8:96:20:5D:4C:B0:34:1C:3A:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/76121c67-c2b1-3363-908d-37816b4d0ce3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/64239825-d3e6-4b1f-a339-f73f2db89ee9.crl

            X509v3 Authority Key Identifier:
                keyid:89:8A:BE:E2:5A:C6:20:65:B0:9B:12:9A:09:45:2E:CB:6A:B9:AC:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.226.33.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:0f:e3:da:8d:9a:65:c4:71:e6:f8:13:0e:54:0e:e9:33:d2:
         82:81:96:a7:f7:78:2e:e4:aa:41:1d:37:a6:48:30:15:d6:a0:
         c9:81:32:f7:5e:15:ac:df:6a:a3:21:91:44:eb:96:70:0f:d9:
         27:2f:9d:23:e4:4e:a8:cd:1c:70:a1:97:56:17:93:d9:64:be:
         cd:ad:ed:61:40:89:f1:d1:60:0d:e4:3a:81:7d:37:4e:bd:8d:
         c1:cf:eb:4f:bc:94:d6:31:f9:aa:bc:3a:09:90:8d:d8:9c:22:
         29:7f:88:17:6f:87:28:a4:69:af:fc:ec:9e:0b:37:23:ba:51:
         af:91:c6:cc:0f:97:60:29:b9:a9:53:db:35:36:e5:a0:63:18:
         f7:8a:4f:59:a3:c1:e2:46:77:53:74:9e:ec:30:2d:02:8c:ca:
         3e:cf:e9:01:1b:c8:83:c2:88:10:f7:77:1f:e5:3a:74:9e:40:
         d5:c4:98:25:8d:61:77:79:fc:06:d8:32:2e:0a:a4:30:e6:5f:
         7f:b3:fa:5a:5a:ce:cb:05:64:75:84:12:62:18:55:c5:d9:18:
         8b:16:3f:55:ae:bd:8e:15:0f:34:cc:fc:1c:94:a3:59:93:b0:
         bf:b5:5c:f6:6f:d8:88:7d:e1:2a:9d:65:99:b4:1b:d9:b3:16:
         b1:c0:7b:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 15:32:12 2024 by rpki-client on console-ams.rpki-client.org