Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/d4a3ee80-454b-3dac-89eb-2ef8923e1c48.roa
File:                     d4a3ee80-454b-3dac-89eb-2ef8923e1c48.roa (raw, json)
Hash identifier:          eVbDCIewoR5DrrNzNcfCphptAaBQrs/I0mkUP7aZz/s=
Subject key identifier:   C5:0C:E0:6C:94:72:B4:91:6A:91:83:3E:8E:B7:15:25:F0:F0:0A:90
Certificate issuer:       /CN=64239825-d3e6-4b1f-a339-f73f2db89ee9
Certificate serial:       010D0C9F4328584900214A68FEA59C3BEB800280
Authority key identifier: 89:8A:BE:E2:5A:C6:20:65:B0:9B:12:9A:09:45:2E:CB:6A:B9:AC:83
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/d4a3ee80-454b-3dac-89eb-2ef8923e1c48.roa
Signing time:             Tue 25 Feb 2025 14:00:52 +0000
ROA not before:           Tue 25 Feb 2025 14:00:52 +0000
ROA not after:            Mon 26 May 2025 13:00:52 +0000
asID:                     398391
IP address blocks:        131.226.36.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/64239825-d3e6-4b1f-a339-f73f2db89ee9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/64239825-d3e6-4b1f-a339-f73f2db89ee9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:00:21:4a:68:fe:a5:9c:3b:eb:80:02:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64239825-d3e6-4b1f-a339-f73f2db89ee9
        Validity
            Not Before: Feb 25 14:00:52 2025 GMT
            Not After : May 26 13:00:52 2025 GMT
        Subject: CN=1e1eb29e-845a-4b88-9811-72c1fdf083ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:15:4c:b5:a6:81:83:47:ff:fa:0f:d1:21:1a:
                    48:53:bc:bf:c2:0f:97:3b:b7:d6:ff:9c:5d:93:31:
                    dd:41:40:68:80:a8:61:b1:92:18:80:30:8e:49:48:
                    32:d4:41:18:de:ea:25:30:a5:b2:2f:5b:2f:a1:7b:
                    1d:9a:d5:f6:bd:5b:f4:21:8e:fe:a5:ff:82:b1:87:
                    bb:a9:73:d7:8f:fa:d6:28:5a:8c:30:2f:0b:b0:01:
                    f4:88:c1:18:e2:07:77:ff:14:28:24:db:49:6a:ac:
                    13:7a:c0:2f:f6:0a:56:aa:a4:fd:e4:1c:2c:2e:21:
                    3a:ef:9d:47:39:e2:30:09:ed:e4:df:a9:1c:de:ee:
                    e2:dc:a6:1e:8a:a3:e3:6c:f6:ff:27:51:a9:b5:72:
                    cf:80:68:84:98:d2:fc:f9:91:84:46:96:44:94:d4:
                    f0:19:74:94:17:7a:ab:f1:48:57:e4:15:30:d4:b9:
                    36:2a:12:82:86:a6:11:72:28:99:82:ce:68:6d:f4:
                    2b:43:70:93:36:5b:72:a4:76:f9:c3:77:de:e6:15:
                    ed:7e:0a:3c:76:5e:72:fb:aa:38:e9:b3:97:30:9d:
                    12:0d:2f:cb:93:5d:59:99:40:fb:40:26:62:a5:c7:
                    b8:c0:78:97:e0:93:eb:a0:16:11:57:3d:06:87:c0:
                    b7:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:0C:E0:6C:94:72:B4:91:6A:91:83:3E:8E:B7:15:25:F0:F0:0A:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/d4a3ee80-454b-3dac-89eb-2ef8923e1c48.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/64239825-d3e6-4b1f-a339-f73f2db89ee9.crl

            X509v3 Authority Key Identifier:
                keyid:89:8A:BE:E2:5A:C6:20:65:B0:9B:12:9A:09:45:2E:CB:6A:B9:AC:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.226.36.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:db:c8:f7:9b:a6:05:40:4c:28:bc:a4:20:f7:9b:c3:a8:1d:
         05:d2:bd:04:87:38:f9:c2:8c:e2:5d:9f:62:f1:8b:ce:2f:57:
         bc:d4:f7:07:5b:53:07:2e:62:4d:cc:0a:2c:cb:7c:38:cd:e6:
         ce:29:fd:e1:fe:f1:71:47:e3:11:23:9e:45:42:4f:d6:f6:6a:
         60:c1:75:d8:e2:5c:d5:cd:83:5e:78:4c:ba:0a:44:f6:8c:e5:
         51:92:0c:f2:08:eb:50:5b:25:dc:2b:9d:95:89:05:28:4d:9d:
         40:46:8b:f3:14:35:2a:f8:00:ac:f5:02:72:00:ec:3f:35:bc:
         06:20:12:a5:be:9b:0d:84:96:fb:a2:b8:58:f9:1d:d0:d6:e9:
         b9:37:f0:8e:5a:f7:9f:42:6c:52:59:99:e7:79:f0:6c:ac:bb:
         37:bc:eb:00:63:b9:c5:d1:49:52:d9:48:b3:28:c0:6d:2d:64:
         c7:4e:31:98:71:d1:fc:4c:59:e1:25:2f:d9:dc:4e:46:99:04:
         5e:52:a5:e6:44:ff:b9:db:3a:eb:1b:25:b7:a8:22:c4:ad:62:
         6b:5c:36:42:5b:c3:19:4b:04:85:aa:e6:c1:59:49:3b:33:bd:
         d6:2c:1b:42:be:9b:3d:47:c1:ff:a1:e3:c3:af:0a:ae:ad:b4:
         87:ca:46:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 08:36:03 2025 by rpki-client