Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/d4a3ee80-454b-3dac-89eb-2ef8923e1c48.roa
File:                     d4a3ee80-454b-3dac-89eb-2ef8923e1c48.roa (raw, json)
Hash identifier:          UkELdjW6pB7AvwV9MPegv+EMSSh1AKw/Otpg4RNO1F0=
Subject key identifier:   88:2E:57:32:77:70:1C:27:34:D9:7E:8E:BD:B2:ED:E4:78:67:A0:3D
Certificate issuer:       /CN=64239825-d3e6-4b1f-a339-f73f2db89ee9
Certificate serial:       010D0C9F432858481F6520EAB645BE8CD7438EC0
Authority key identifier: 89:8A:BE:E2:5A:C6:20:65:B0:9B:12:9A:09:45:2E:CB:6A:B9:AC:83
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/d4a3ee80-454b-3dac-89eb-2ef8923e1c48.roa
Signing time:             Sat 07 Dec 2024 02:00:39 +0000
ROA not before:           Sat 07 Dec 2024 02:00:39 +0000
ROA not after:            Fri 07 Mar 2025 02:00:39 +0000
asID:                     398391
IP address blocks:        131.226.36.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/64239825-d3e6-4b1f-a339-f73f2db89ee9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/64239825-d3e6-4b1f-a339-f73f2db89ee9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:1f:65:20:ea:b6:45:be:8c:d7:43:8e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64239825-d3e6-4b1f-a339-f73f2db89ee9
        Validity
            Not Before: Dec  7 02:00:39 2024 GMT
            Not After : Mar  7 02:00:39 2025 GMT
        Subject: CN=7a8f306c-145c-4c1f-b305-cdce9c210061
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ee:ff:0a:2d:fd:59:43:44:9e:e5:dd:33:10:
                    74:84:b3:45:99:09:ae:42:58:a0:a3:ac:a1:24:ca:
                    f0:8b:6e:7e:cf:53:35:77:09:8e:83:5f:5d:bd:91:
                    97:f8:71:7e:c8:41:67:cc:bd:47:d8:9d:a0:f6:31:
                    ed:a5:d8:63:18:0e:ac:4a:6b:53:2c:91:37:3a:62:
                    5e:51:ae:ad:56:3c:e9:2f:e4:ad:6a:20:55:bd:72:
                    f3:90:c3:d6:3e:93:2e:85:42:a7:da:38:9d:ad:6b:
                    ab:4f:29:3b:a4:86:b1:b0:c0:4b:34:39:c4:f2:dc:
                    e4:ba:d5:81:74:0d:6b:a8:92:93:bc:09:82:09:3a:
                    40:24:1e:2b:12:16:71:ef:ba:52:99:e8:94:8e:82:
                    64:f3:d5:75:b5:27:aa:91:fc:67:27:c9:53:18:0f:
                    e0:22:55:54:63:55:15:91:02:7d:3d:fd:44:16:2e:
                    da:a8:c8:f5:84:16:75:4e:0f:2f:79:65:3e:77:cb:
                    1d:2d:51:d9:ff:52:ad:b6:e4:4e:4e:b2:25:84:eb:
                    0b:14:42:4b:a0:3a:b3:c9:63:6e:85:0f:81:93:86:
                    72:98:b3:a8:6e:24:e9:ef:9f:6b:b8:ea:7b:a0:48:
                    16:7d:c9:06:24:ef:cf:cd:f2:00:9c:a1:06:43:72:
                    64:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:2E:57:32:77:70:1C:27:34:D9:7E:8E:BD:B2:ED:E4:78:67:A0:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/d4a3ee80-454b-3dac-89eb-2ef8923e1c48.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/64239825-d3e6-4b1f-a339-f73f2db89ee9.crl

            X509v3 Authority Key Identifier:
                keyid:89:8A:BE:E2:5A:C6:20:65:B0:9B:12:9A:09:45:2E:CB:6A:B9:AC:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.226.36.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:af:6b:99:f6:5a:88:84:77:ca:76:b6:ce:c6:c2:2b:23:5e:
         39:49:8a:58:fa:ce:42:98:de:a7:88:c2:00:b5:35:7c:e8:8d:
         e5:2f:74:de:81:2d:df:83:07:31:38:7e:2e:1b:48:b2:ee:60:
         aa:0a:87:f3:8e:5b:b4:54:7c:49:d6:7d:74:30:07:c1:c4:fa:
         81:30:40:3f:d9:87:0a:04:26:cf:5c:1d:94:f8:74:c3:c2:bb:
         c6:73:c6:54:6e:9f:e2:40:a3:c4:3a:18:7f:ec:a1:45:0e:31:
         1f:c6:c2:fc:a0:73:53:0f:65:b0:76:50:3d:28:61:54:b2:67:
         2a:8d:eb:54:45:84:82:4c:71:5a:3b:93:45:c2:40:65:ec:2e:
         b5:68:fd:0e:2f:ef:cb:1f:66:a6:2f:bc:1b:a4:cc:18:d5:98:
         bf:df:0d:0b:e7:16:a9:ea:10:25:6a:9c:68:6e:4e:61:8d:dc:
         cc:15:04:4c:b7:6a:9a:b0:37:6f:2c:21:ff:5c:17:37:2a:40:
         a7:c8:7f:c3:2b:7a:f3:d3:f9:d4:c9:05:bd:11:de:c0:3f:8b:
         33:c2:10:5a:00:f1:84:d6:55:6e:de:25:24:f9:22:9e:53:8b:
         fe:38:44:10:c6:52:78:79:5b:4c:0b:86:b3:17:91:8c:59:ed:
         95:c7:62:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:18:11 2025 by rpki-client