Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/d90a7b31-7c73-310b-b211-c82fd8c16393.roa
File:                     d90a7b31-7c73-310b-b211-c82fd8c16393.roa (raw, json)
Hash identifier:          u7DXz3WOU/n6MZy6cPmtXghGmEeap0FX5mZxJLKo74Y=
Subject key identifier:   1C:A7:EE:8E:99:5E:3B:CB:26:C2:9D:A2:97:17:18:31:40:A8:F0:52
Certificate issuer:       /CN=64239825-d3e6-4b1f-a339-f73f2db89ee9
Certificate serial:       010D0C9F43285849244E78AADDB63F6391539010
Authority key identifier: 89:8A:BE:E2:5A:C6:20:65:B0:9B:12:9A:09:45:2E:CB:6A:B9:AC:83
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/d90a7b31-7c73-310b-b211-c82fd8c16393.roa
Signing time:             Mon 10 Mar 2025 13:00:52 +0000
ROA not before:           Mon 10 Mar 2025 13:00:52 +0000
ROA not after:            Sun 08 Jun 2025 13:00:52 +0000
asID:                     398391
IP address blocks:        131.226.43.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/64239825-d3e6-4b1f-a339-f73f2db89ee9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/64239825-d3e6-4b1f-a339-f73f2db89ee9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:24:4e:78:aa:dd:b6:3f:63:91:53:90:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64239825-d3e6-4b1f-a339-f73f2db89ee9
        Validity
            Not Before: Mar 10 13:00:52 2025 GMT
            Not After : Jun  8 13:00:52 2025 GMT
        Subject: CN=e8b92cce-b9b3-49b3-b2f2-599a14f0d10c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:bc:db:04:ef:f2:c9:3b:09:44:48:e7:00:71:
                    a7:09:0d:de:5c:b2:a1:45:b2:80:bb:f0:78:08:c7:
                    90:d5:4f:06:1f:9f:a1:f5:b5:8b:06:40:c4:31:67:
                    8e:b8:fc:6a:c1:66:4d:9c:bf:ff:c7:2c:4f:81:36:
                    93:08:02:4e:cc:2a:6f:5a:25:9f:33:1b:48:96:5b:
                    27:b2:a3:32:ac:a3:b0:47:d5:ef:dc:36:8f:3e:5b:
                    24:06:81:99:d2:a2:b9:f0:84:72:0c:d9:95:c9:d7:
                    90:b5:e1:f1:4b:69:34:69:58:95:e9:de:c6:48:9b:
                    f9:e1:47:08:fe:55:96:4b:68:f6:23:89:6b:e5:ae:
                    a1:87:4d:8b:51:b6:61:97:bd:8b:84:cd:e9:30:19:
                    44:71:c7:a2:49:1a:ea:33:09:ce:96:06:19:ca:ea:
                    63:de:56:e1:b9:66:5c:bc:a6:68:c3:47:52:65:1a:
                    ac:83:4c:78:e4:bc:dd:b2:2f:9a:be:31:7f:7a:d7:
                    85:fc:76:3f:47:e7:f4:8b:bd:f1:95:ec:60:d2:46:
                    ff:19:23:2f:0c:a0:f2:96:6c:3b:92:31:3e:64:4b:
                    c9:a4:6f:8b:8f:b7:d8:33:ac:2e:e7:cc:21:25:a7:
                    4c:dd:4f:e4:4e:b2:64:90:4a:bf:65:2b:a2:87:60:
                    8b:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:A7:EE:8E:99:5E:3B:CB:26:C2:9D:A2:97:17:18:31:40:A8:F0:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/d90a7b31-7c73-310b-b211-c82fd8c16393.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/64239825-d3e6-4b1f-a339-f73f2db89ee9.crl

            X509v3 Authority Key Identifier:
                keyid:89:8A:BE:E2:5A:C6:20:65:B0:9B:12:9A:09:45:2E:CB:6A:B9:AC:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.226.43.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:88:c9:78:8b:3a:d0:83:74:17:3a:57:30:82:0f:b3:f8:87:
         07:15:b6:16:2d:91:b5:c2:07:a8:a2:db:80:92:54:89:8e:fa:
         31:a4:ad:71:7d:5d:f5:19:7e:ec:4c:28:32:ae:ee:54:19:22:
         ca:f9:d3:d1:05:65:6d:7e:8f:e7:bb:ba:2e:50:a6:66:33:0f:
         c2:68:90:2e:05:31:fa:56:e0:0b:0d:35:95:9a:7a:44:ff:fb:
         a2:4f:c2:f7:83:5d:99:e1:da:75:a7:64:00:a2:ad:b8:84:92:
         02:fb:da:33:89:3c:b9:ae:a0:93:6a:a7:94:5f:43:10:65:85:
         98:c0:cc:4f:0f:ea:93:d5:99:7c:0a:3f:91:d5:e5:f1:e0:7e:
         bd:18:c3:e1:2d:b6:83:a5:f2:a8:7a:9b:3d:67:02:63:bc:d1:
         f8:cc:6e:a7:38:d2:3d:a0:07:b1:30:bb:eb:54:0f:d6:48:a0:
         86:3b:c6:89:6a:ef:c6:d1:3e:44:71:17:8c:0e:6d:23:87:f7:
         c6:81:b6:15:4b:50:9c:45:58:d6:a5:71:2f:e5:a7:d9:68:40:
         cf:8a:47:f1:c8:67:49:c6:2e:d3:3a:07:4a:d3:43:6d:15:54:
         7e:04:5e:5e:b3:1e:63:07:9b:38:0b:0f:84:64:c6:4d:6e:0c:
         0d:fb:06:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 10:28:32 2025 by rpki-client