Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/3a630baa-a308-3edf-82c8-85361cf7f752.roa
File:                     3a630baa-a308-3edf-82c8-85361cf7f752.roa (raw, json)
Hash identifier:          mHrsBCFILtGtcgGAuJCM9GDe6srUBRk+qgG3c9BXpNc=
Subject key identifier:   CA:9F:7E:BB:17:F5:FA:7C:7D:8C:FE:79:F1:1C:BA:8A:62:74:5E:35
Certificate issuer:       /CN=64239825-d3e6-4b1f-a339-f73f2db89ee9
Certificate serial:       010D0C9F43285849955F25A32645FC8835B8C4F0
Authority key identifier: 89:8A:BE:E2:5A:C6:20:65:B0:9B:12:9A:09:45:2E:CB:6A:B9:AC:83
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/3a630baa-a308-3edf-82c8-85361cf7f752.roa
Signing time:             Sun 20 Apr 2025 01:00:47 +0000
ROA not before:           Sun 20 Apr 2025 01:00:47 +0000
ROA not after:            Sat 19 Jul 2025 01:00:47 +0000
asID:                     398391
IP address blocks:        64.226.140.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/64239825-d3e6-4b1f-a339-f73f2db89ee9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/64239825-d3e6-4b1f-a339-f73f2db89ee9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:95:5f:25:a3:26:45:fc:88:35:b8:c4:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64239825-d3e6-4b1f-a339-f73f2db89ee9
        Validity
            Not Before: Apr 20 01:00:47 2025 GMT
            Not After : Jul 19 01:00:47 2025 GMT
        Subject: CN=65627416-ba94-4731-9055-2b331102dd2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:84:45:ff:bc:a6:6a:a5:51:cd:78:c4:af:15:
                    d1:d9:d4:75:f3:31:0a:a8:15:56:5e:13:00:b3:5c:
                    ee:d5:7a:1d:6c:ed:ca:c4:9c:ca:4e:77:fd:ca:51:
                    b6:1c:33:a4:82:3c:72:a1:69:a3:34:7a:63:ce:1b:
                    0c:fd:b2:39:00:87:5e:a8:0c:63:1c:25:37:1f:9f:
                    8b:25:47:45:68:92:a2:c6:75:e6:ed:65:c4:7d:b7:
                    69:52:74:77:21:c2:1d:89:d1:2b:35:6b:08:ac:08:
                    04:4d:56:67:65:bb:16:fc:42:a2:49:c0:38:b9:0f:
                    a4:a4:c4:93:f3:d7:3c:8c:b0:5c:dc:db:58:09:f1:
                    75:49:1a:14:ff:27:4c:bd:8c:83:2c:b7:02:75:a1:
                    f8:97:77:12:d2:1f:bd:e0:af:a0:c4:9c:e6:52:61:
                    4f:9c:af:c7:b4:b0:83:8f:9f:e9:c2:9a:08:21:a7:
                    d2:41:5a:c1:bc:31:77:b4:7c:51:c7:92:31:9b:48:
                    ca:2a:d6:c1:55:93:f3:97:3d:b5:b1:a2:84:cb:61:
                    c5:02:23:82:87:a3:5b:af:ea:21:af:9b:1d:c7:06:
                    bc:bb:7b:94:4a:40:03:3a:70:81:a8:d8:ba:cd:0c:
                    57:11:d1:a7:0d:6e:66:b5:2e:c9:84:e9:ee:07:77:
                    be:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:9F:7E:BB:17:F5:FA:7C:7D:8C:FE:79:F1:1C:BA:8A:62:74:5E:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/3a630baa-a308-3edf-82c8-85361cf7f752.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/64239825-d3e6-4b1f-a339-f73f2db89ee9.crl

            X509v3 Authority Key Identifier:
                keyid:89:8A:BE:E2:5A:C6:20:65:B0:9B:12:9A:09:45:2E:CB:6A:B9:AC:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.226.140.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:6c:fa:f0:33:bd:8e:35:7b:53:d1:a5:b8:cf:b3:83:d1:24:
         ac:19:3b:47:4f:15:79:12:d2:00:59:43:b0:c5:4a:f6:60:87:
         4b:e9:e0:0e:31:79:4f:51:54:96:ae:93:5d:43:87:2d:04:13:
         c5:6b:3b:80:42:60:4a:70:c0:f2:81:15:82:be:e1:4b:c5:0e:
         7d:d8:0a:4d:df:b2:61:35:1b:53:16:d0:00:02:88:cc:77:64:
         04:ff:55:e6:56:44:b4:08:ee:18:45:99:80:7e:c2:96:7c:31:
         61:4a:85:87:7d:6c:20:64:7b:1e:e1:1c:57:36:cd:9c:c8:6c:
         5e:0d:2d:0c:9e:ec:56:a7:2a:5f:ed:9f:0b:10:dd:14:94:71:
         ba:c0:e0:1b:d7:12:bc:bf:2f:c5:af:f9:04:1d:4b:a2:46:d7:
         8f:8f:14:fa:a2:e5:b1:72:08:6f:9d:10:8d:05:cd:b5:8d:88:
         b2:61:43:87:56:e0:11:bf:78:98:fe:db:7a:18:6e:c5:f5:96:
         40:d5:45:f7:74:69:36:2d:04:59:e8:e5:d4:cf:ea:d7:fd:e1:
         4b:69:4c:5b:c1:50:9a:8b:7f:04:99:87:b8:7c:ba:51:41:79:
         79:80:eb:b9:d9:c7:c2:dc:5b:f2:c1:37:c5:3d:09:14:ae:dd:
         ad:09:06:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 15:16:34 2025 by rpki-client