Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/a8b72230-432f-3d72-b574-cb7625866045.roa
File:                     a8b72230-432f-3d72-b574-cb7625866045.roa (raw, json)
Hash identifier:          LYICreLe/1Q6miwsWC0Ki9quq5L2j6hjm4wZgc/yH10=
Subject key identifier:   B5:40:2D:43:64:D9:DF:7D:3F:2A:30:93:0D:EE:A6:34:03:16:F5:BA
Certificate issuer:       /CN=64239825-d3e6-4b1f-a339-f73f2db89ee9
Certificate serial:       010D0C9F4328584769D0D03738A2295BE1FF2200
Authority key identifier: 89:8A:BE:E2:5A:C6:20:65:B0:9B:12:9A:09:45:2E:CB:6A:B9:AC:83
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/a8b72230-432f-3d72-b574-cb7625866045.roa
Signing time:             Thu 03 Oct 2024 01:00:31 +0000
ROA not before:           Thu 03 Oct 2024 01:00:31 +0000
ROA not after:            Wed 01 Jan 2025 02:00:31 +0000
asID:                     398391
IP address blocks:        131.226.44.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/64239825-d3e6-4b1f-a339-f73f2db89ee9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/64239825-d3e6-4b1f-a339-f73f2db89ee9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:69:d0:d0:37:38:a2:29:5b:e1:ff:22:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64239825-d3e6-4b1f-a339-f73f2db89ee9
        Validity
            Not Before: Oct  3 01:00:31 2024 GMT
            Not After : Jan  1 02:00:31 2025 GMT
        Subject: CN=f3875f7d-564e-42f8-a05e-486c1972b372
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:e2:3d:5f:d0:a5:ac:70:d2:d2:90:25:15:64:
                    1e:7d:25:89:d1:bc:95:16:f4:71:f6:e2:b3:a2:25:
                    bd:fd:95:f3:55:e3:c5:19:27:8d:99:35:82:24:e8:
                    5b:56:87:88:b2:25:bb:d4:0a:84:bd:d8:95:06:cb:
                    a3:ed:16:2a:d8:5d:78:ba:74:78:b3:01:fd:43:65:
                    ff:f3:83:35:8e:32:ad:2c:da:18:9e:ac:6c:e1:06:
                    16:10:ec:e1:7d:06:18:8e:92:ff:36:40:17:08:99:
                    63:c1:d4:bf:43:c7:a6:c3:ea:cd:38:a7:72:f4:58:
                    cc:b1:7c:1c:33:40:6f:ba:ae:ea:c2:9f:d7:f7:2e:
                    05:f1:25:d1:f3:f6:ac:47:fd:3d:10:3e:9b:bb:5d:
                    cb:a1:7e:73:8d:6d:b2:84:4e:51:45:a1:dc:1d:bb:
                    2e:11:5a:6a:0a:ce:76:0c:28:4c:42:7b:13:de:af:
                    ff:83:09:e5:17:53:74:dc:a5:97:ce:84:7d:11:d3:
                    8c:cf:01:98:b7:e2:d5:56:22:d1:cd:a6:a9:27:8f:
                    83:11:76:52:03:06:e5:e3:f5:b2:e1:ab:ed:09:8a:
                    8f:14:82:57:dc:56:69:f4:2c:24:51:16:d7:e7:c8:
                    ad:f2:25:0a:84:4f:13:29:65:81:fe:8f:83:d4:04:
                    f2:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:40:2D:43:64:D9:DF:7D:3F:2A:30:93:0D:EE:A6:34:03:16:F5:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/a8b72230-432f-3d72-b574-cb7625866045.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/64239825-d3e6-4b1f-a339-f73f2db89ee9.crl

            X509v3 Authority Key Identifier:
                keyid:89:8A:BE:E2:5A:C6:20:65:B0:9B:12:9A:09:45:2E:CB:6A:B9:AC:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.226.44.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:6a:78:09:8a:69:a2:5e:8b:37:4b:6e:71:fa:41:46:db:b5:
         9a:79:27:2b:37:85:4b:69:a6:ac:6d:6e:69:75:fe:9b:a5:c2:
         22:b7:7f:03:cb:24:0a:9c:a9:1e:82:92:b2:f3:3b:6b:da:29:
         89:08:06:bb:22:f8:47:13:1a:b1:be:95:a8:d5:85:68:ef:0e:
         18:95:5c:05:14:81:ce:1c:46:2f:24:19:0d:cb:aa:96:f2:74:
         55:4e:c9:66:a4:5c:b0:5b:10:2d:1b:ec:03:d8:91:3d:64:d8:
         21:87:c4:8c:0b:8c:91:c1:67:73:4e:1b:59:da:63:84:59:24:
         4b:ea:3e:c7:c4:d0:d5:48:8c:35:2b:ef:2f:81:7c:24:2e:68:
         8a:dd:88:f8:70:d6:81:76:82:27:61:cc:04:63:fa:8a:4b:2f:
         ef:23:8d:80:49:8b:83:d4:1d:91:ac:39:18:f0:e4:92:2a:f4:
         e0:7b:51:52:8e:3d:f1:c1:8a:0a:d0:39:0e:07:ec:a0:51:3d:
         bc:f0:a9:05:51:bb:7a:4c:b9:1f:84:4b:3f:34:c2:e8:aa:28:
         78:46:4a:8f:bc:56:e9:3b:56:78:5e:6a:a7:a3:6d:32:30:aa:
         b8:76:b3:0c:fb:6b:f8:ae:4e:b2:44:f0:65:dd:7a:1d:b1:24:
         03:c1:6e:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 16:06:35 2024 by rpki-client on console-ams.rpki-client.org