Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/3937b6de-fd14-3461-ac84-97aa1a98bbdc.roa
File:                     3937b6de-fd14-3461-ac84-97aa1a98bbdc.roa (raw, json)
Hash identifier:          B6rzvxJfVqrEGDwRYNYw3ymTyMuZFyVj0KvfzObBqaE=
Subject key identifier:   31:C5:50:F6:23:CF:9D:B6:05:2B:55:F9:B7:DD:24:0D:AE:62:0E:02
Certificate issuer:       /CN=64239825-d3e6-4b1f-a339-f73f2db89ee9
Certificate serial:       010D0C9F43285849C0A4CED2AE82DEF1C54B5800
Authority key identifier: 89:8A:BE:E2:5A:C6:20:65:B0:9B:12:9A:09:45:2E:CB:6A:B9:AC:83
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/3937b6de-fd14-3461-ac84-97aa1a98bbdc.roa
Signing time:             Mon 05 May 2025 13:01:00 +0000
ROA not before:           Mon 05 May 2025 13:01:00 +0000
ROA not after:            Sun 03 Aug 2025 13:01:00 +0000
asID:                     398391
IP address blocks:        131.226.37.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/64239825-d3e6-4b1f-a339-f73f2db89ee9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/64239825-d3e6-4b1f-a339-f73f2db89ee9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c0:a4:ce:d2:ae:82:de:f1:c5:4b:58:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64239825-d3e6-4b1f-a339-f73f2db89ee9
        Validity
            Not Before: May  5 13:01:00 2025 GMT
            Not After : Aug  3 13:01:00 2025 GMT
        Subject: CN=f8d77985-bf98-4ff1-a7a7-f5838e6b9134
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:fe:88:ec:1d:c1:d8:cb:dc:68:4f:fc:a3:6e:
                    4c:2d:d3:90:e3:d2:c6:07:3e:02:4e:af:aa:eb:c0:
                    b2:82:b3:c3:7f:1f:da:c4:52:eb:da:59:d2:f8:10:
                    17:c4:97:61:3d:e9:47:50:37:12:4d:f2:86:51:4b:
                    d1:0b:b2:d0:60:bc:61:63:e2:94:e6:d2:7c:52:3b:
                    b5:71:6a:f2:05:5f:d3:ef:6a:2d:b1:81:e5:d9:0b:
                    84:34:bc:e0:d9:29:df:33:19:61:9c:5d:d6:c6:e3:
                    df:8d:10:fc:54:6c:e3:ba:71:a8:53:f5:24:1c:8d:
                    2b:10:69:42:e4:2e:11:8c:e6:77:ae:13:60:b7:fa:
                    08:3b:e6:cc:01:4b:5b:dc:43:83:d2:64:fc:dd:b2:
                    d1:98:6a:63:3a:54:f6:40:2b:d3:b5:00:4f:c9:92:
                    3d:88:a5:b3:c9:cd:4e:43:c0:ba:d4:1b:8e:c4:a5:
                    31:b4:47:12:94:0b:9d:43:00:19:64:db:f8:d0:1c:
                    64:30:e7:db:2a:55:7f:7e:39:44:44:ae:dc:97:d4:
                    67:f6:e1:e5:2b:09:93:0a:e0:89:e5:07:77:75:c2:
                    25:16:da:2e:7c:12:4c:dc:77:d8:89:96:82:ca:a8:
                    07:51:80:ae:e5:38:cc:1c:29:05:d4:54:29:36:42:
                    89:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:C5:50:F6:23:CF:9D:B6:05:2B:55:F9:B7:DD:24:0D:AE:62:0E:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/3937b6de-fd14-3461-ac84-97aa1a98bbdc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/64239825-d3e6-4b1f-a339-f73f2db89ee9.crl

            X509v3 Authority Key Identifier:
                keyid:89:8A:BE:E2:5A:C6:20:65:B0:9B:12:9A:09:45:2E:CB:6A:B9:AC:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.226.37.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:ac:b4:92:29:94:88:21:28:9a:45:a2:4f:9b:5f:ac:09:58:
         54:d1:e6:29:cd:27:1f:cf:7f:22:8f:ad:c7:62:85:7b:b6:d4:
         f1:fe:56:fd:2c:6d:ab:52:f1:c5:07:2f:3e:33:e3:70:71:8e:
         3d:cb:9b:2d:1e:61:3a:78:9c:ed:46:97:a9:c2:cf:ec:9b:90:
         47:4e:e2:01:c6:ff:96:48:d5:3f:42:ec:bd:5d:b8:2e:86:34:
         07:27:bd:74:f4:81:e0:cb:6e:a9:35:96:e4:a1:89:84:16:d7:
         89:7a:71:88:7b:85:30:c0:98:66:ad:aa:3a:c3:76:10:68:9f:
         91:e1:a9:31:cb:e0:77:bf:79:c0:7e:49:f9:d1:db:bc:a5:13:
         52:be:7e:2d:2a:fd:59:b2:91:1f:6c:38:e9:cd:2d:49:0c:67:
         a1:8a:4c:6a:a8:4e:18:7a:90:03:9c:1a:47:1c:15:de:c9:bd:
         c2:fc:80:21:c8:78:37:47:47:b1:9c:b4:22:96:0d:aa:60:b3:
         32:bb:b4:2f:fb:96:9b:10:f1:9a:e2:93:65:5e:d2:29:f8:67:
         5f:3b:ec:8a:f9:fc:53:4b:c5:80:4d:d7:55:ec:2f:e1:82:d3:
         62:a5:52:a6:1e:09:5a:19:0b:f4:b1:c1:ee:a8:dc:93:39:c9:
         9e:6d:85:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 01:32:34 2025 by rpki-client