Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/4d14f368-e0b6-34f0-ab6b-d98c005c8da7.roa
File:                     4d14f368-e0b6-34f0-ab6b-d98c005c8da7.roa (raw, json)
Hash identifier:          xZeUJkxPVSLYAySFH6QRmORZN+ZA48ruHtaZvhOc3C8=
Subject key identifier:   08:84:C5:3B:EB:B4:C0:29:C3:D6:76:EF:DB:4F:88:AF:F4:67:E4:23
Certificate issuer:       /CN=64239825-d3e6-4b1f-a339-f73f2db89ee9
Certificate serial:       010D0C9F4328584BAD628B5009CA71177527B7CC
Authority key identifier: 89:8A:BE:E2:5A:C6:20:65:B0:9B:12:9A:09:45:2E:CB:6A:B9:AC:83
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/4d14f368-e0b6-34f0-ab6b-d98c005c8da7.roa
Signing time:             Wed 29 Oct 2025 01:00:31 +0000
ROA not before:           Wed 29 Oct 2025 01:00:31 +0000
ROA not after:            Tue 27 Jan 2026 02:00:31 +0000
asID:                     398391
IP address blocks:        64.227.192.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/64239825-d3e6-4b1f-a339-f73f2db89ee9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/64239825-d3e6-4b1f-a339-f73f2db89ee9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:ad:62:8b:50:09:ca:71:17:75:27:b7:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64239825-d3e6-4b1f-a339-f73f2db89ee9
        Validity
            Not Before: Oct 29 01:00:31 2025 GMT
            Not After : Jan 27 02:00:31 2026 GMT
        Subject: CN=3eb086df-7c31-4170-a34f-ca9fee0bb80a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:ea:cd:80:7b:0f:8c:b6:11:36:f7:1c:22:0e:
                    20:20:a8:62:83:76:fe:c5:f5:dd:83:b2:bc:04:91:
                    83:17:e2:b3:74:7c:3a:de:a6:93:0f:d5:6d:e8:8a:
                    fb:fb:82:fd:9a:84:99:15:09:80:0e:de:c7:a0:3a:
                    50:74:c8:fa:4f:15:34:30:e5:70:17:9b:7f:38:ab:
                    3d:99:87:e1:91:61:e1:61:88:77:45:34:c7:94:34:
                    cf:04:24:0a:ce:de:01:d2:12:54:57:93:2a:23:69:
                    84:79:48:9d:4e:ad:4f:6e:f8:0f:73:79:8b:36:a9:
                    d5:cf:78:b0:22:46:45:f8:c1:c3:17:60:f3:83:60:
                    99:f6:f7:39:20:5c:1d:c2:13:84:7c:86:f2:a0:c6:
                    4d:2f:20:4b:07:72:43:f9:02:d8:96:32:a2:d6:3d:
                    2c:d7:33:8e:b2:bc:0d:ba:35:56:86:7e:68:2c:01:
                    3e:74:aa:3f:2d:dc:3a:6c:f4:3b:77:78:11:0f:61:
                    6f:e3:b1:ab:5a:01:74:92:98:9c:65:d5:83:5a:a5:
                    94:41:b7:cb:04:9b:08:1a:76:74:d4:4d:86:64:c0:
                    cc:2f:29:c1:c6:99:c7:61:8f:66:5f:99:82:fe:b7:
                    64:10:cd:4c:eb:a9:51:4e:2c:4d:a8:bb:95:9e:0f:
                    35:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:84:C5:3B:EB:B4:C0:29:C3:D6:76:EF:DB:4F:88:AF:F4:67:E4:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/4d14f368-e0b6-34f0-ab6b-d98c005c8da7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/64239825-d3e6-4b1f-a339-f73f2db89ee9.crl

            X509v3 Authority Key Identifier:
                keyid:89:8A:BE:E2:5A:C6:20:65:B0:9B:12:9A:09:45:2E:CB:6A:B9:AC:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.227.192.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:93:4e:fd:45:68:9c:4b:db:40:8d:b7:4b:47:8d:af:18:8d:
         0e:51:63:27:39:ec:4c:32:80:b0:a4:3d:3b:2e:61:de:5a:80:
         2f:68:84:9d:70:1c:3c:7d:79:6b:f8:16:c5:85:fc:57:87:09:
         9e:f9:e3:17:88:42:1b:8c:b1:c2:1e:7b:0a:21:1e:00:6d:ee:
         33:20:f8:7b:65:7a:05:61:d0:e8:b9:f6:fa:69:4b:93:12:5f:
         b2:27:fb:03:e5:76:f2:9d:b3:75:4c:d0:b5:6e:df:9c:9a:df:
         f4:03:d4:88:01:b4:6c:5d:d1:18:e5:09:e4:79:4a:0d:5d:68:
         23:86:de:d2:7b:bb:b9:ea:48:fa:f9:1d:a2:02:a2:c9:ee:44:
         a9:37:55:b7:9e:03:9f:ab:f6:7c:75:0c:93:55:00:c8:c5:18:
         08:ee:44:fc:97:9c:97:35:7f:b8:e4:f7:51:b9:10:40:77:01:
         27:4a:62:2a:cd:86:d7:d1:70:59:34:3e:fc:6c:46:e3:7a:b8:
         1d:2b:e0:1a:d5:72:b0:5c:1b:60:0b:8f:b3:f3:31:7f:18:78:
         db:5e:42:00:11:b5:d3:22:93:b1:e7:c5:9c:9d:51:85:e5:62:
         d9:0d:69:f5:53:e0:c1:c7:97:9d:ac:74:91:db:69:0f:d2:93:
         a4:4a:87:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:59:09 2025 by rpki-client