Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/5061b76e-778c-3b56-b778-1a97e31bf308.roa
File:                     5061b76e-778c-3b56-b778-1a97e31bf308.roa (raw, json)
Hash identifier:          7n5xLL17aYGrxQaQajkFC+Oo46kcf0jmt96NzpLB0nU=
Subject key identifier:   61:9A:79:44:C7:26:D6:A6:F9:D8:28:94:C1:E3:32:CB:45:5F:C6:60
Certificate issuer:       /CN=64239825-d3e6-4b1f-a339-f73f2db89ee9
Certificate serial:       010D0C9F43285849A1EF6CE8E4BE31C0E6B3C100
Authority key identifier: 89:8A:BE:E2:5A:C6:20:65:B0:9B:12:9A:09:45:2E:CB:6A:B9:AC:83
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/5061b76e-778c-3b56-b778-1a97e31bf308.roa
Signing time:             Thu 24 Apr 2025 13:01:00 +0000
ROA not before:           Thu 24 Apr 2025 13:01:00 +0000
ROA not after:            Wed 23 Jul 2025 13:01:00 +0000
asID:                     398391
IP address blocks:        131.226.39.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/64239825-d3e6-4b1f-a339-f73f2db89ee9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/64239825-d3e6-4b1f-a339-f73f2db89ee9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a1:ef:6c:e8:e4:be:31:c0:e6:b3:c1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64239825-d3e6-4b1f-a339-f73f2db89ee9
        Validity
            Not Before: Apr 24 13:01:00 2025 GMT
            Not After : Jul 23 13:01:00 2025 GMT
        Subject: CN=996704f7-1177-426c-8e90-79a79e418b80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:aa:70:d4:00:97:55:96:7e:fc:fe:27:7a:f3:
                    57:a0:4b:0b:d4:aa:55:83:63:49:fa:0e:7c:b5:78:
                    cd:aa:ff:ac:a8:7b:05:c0:e2:f2:38:20:e7:65:fe:
                    a5:71:74:8a:32:3f:d5:f6:34:b8:07:b6:7e:c2:29:
                    f2:b4:d8:03:9f:c1:94:e9:34:85:6c:6a:8f:c1:1f:
                    ec:ec:e6:f8:d0:36:91:29:d2:ac:f7:00:69:c3:43:
                    c2:5f:72:72:16:ad:e6:74:27:ea:58:0c:54:0f:f5:
                    04:ee:b5:f8:dc:86:31:aa:f7:a9:1b:fa:25:29:a4:
                    7f:65:54:86:9b:01:14:7b:1b:5e:dc:8f:22:49:d5:
                    3e:41:e0:19:cb:b6:62:ea:62:56:a6:ef:4a:ce:96:
                    65:ab:33:a5:9a:7f:0a:7f:3c:2e:92:0f:73:f7:ed:
                    70:6e:5b:bb:ff:a9:2e:59:13:c8:e7:19:b9:ea:ed:
                    d4:8b:b9:e9:bc:fd:93:96:50:a0:25:2b:27:8a:b8:
                    a5:de:0e:28:97:e3:1f:54:23:b2:22:c6:f8:35:76:
                    3c:cb:89:2d:24:4a:56:b4:46:92:84:4f:14:fb:6c:
                    d4:e5:d5:0d:af:e4:2e:77:90:fc:97:7a:db:82:a0:
                    bc:0d:02:f9:36:92:05:02:5f:10:d7:9f:09:f7:0d:
                    29:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:9A:79:44:C7:26:D6:A6:F9:D8:28:94:C1:E3:32:CB:45:5F:C6:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/5061b76e-778c-3b56-b778-1a97e31bf308.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/64239825-d3e6-4b1f-a339-f73f2db89ee9.crl

            X509v3 Authority Key Identifier:
                keyid:89:8A:BE:E2:5A:C6:20:65:B0:9B:12:9A:09:45:2E:CB:6A:B9:AC:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.226.39.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:61:a2:00:c3:cb:fb:aa:6e:7e:7d:c0:3d:7b:c2:84:bf:9e:
         9b:98:9e:41:cd:4f:16:4b:47:cd:c1:7e:db:90:df:d3:13:03:
         d4:89:d7:6d:22:03:db:77:11:f8:6f:86:37:85:42:c9:cc:63:
         0e:81:67:0e:f1:a6:a7:e8:23:c9:c1:80:12:9a:f3:ee:b6:cc:
         3c:4d:29:ef:ea:92:e6:60:85:f9:f4:9e:57:c1:46:c2:48:a9:
         0c:93:65:3f:e0:8b:ec:3f:56:5f:7f:1b:e8:36:85:e3:55:9f:
         42:48:81:eb:be:65:37:2b:1c:e5:bd:b5:e0:95:cb:f3:9b:17:
         b2:bb:a5:dd:22:b6:94:e0:71:9c:80:6d:de:08:cf:99:15:1f:
         d3:45:da:a6:9c:0a:0d:e2:16:1e:f1:88:65:21:bb:f1:ca:47:
         d6:bc:ea:8b:a2:28:a2:6d:61:0d:25:f8:61:49:86:50:9b:1a:
         a5:31:99:cf:66:65:42:e5:a1:16:87:10:f7:1a:ee:ff:e9:0b:
         92:8a:d0:97:1f:6c:4d:ce:06:60:72:e6:68:10:dc:b1:56:63:
         41:ce:2c:bb:74:76:6b:4b:ac:09:f1:ff:3f:15:9e:e1:b2:16:
         4d:b6:b1:68:bd:99:09:6d:24:a8:c0:62:f1:1d:6c:32:b9:5c:
         6e:ac:1b:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 13:06:44 2025 by rpki-client