Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/6b8157d7-528a-355c-8d23-f69435bf6d41.roa
File:                     6b8157d7-528a-355c-8d23-f69435bf6d41.roa (raw, json)
Hash identifier:          gCZZgmhdBNuVr05cxrTyiN9Sgge/rAanCBI33IcyCec=
Subject key identifier:   05:F3:BE:2A:5D:31:3E:A8:71:20:B9:46:5D:2F:52:2B:0B:A2:3C:04
Certificate issuer:       /CN=64239825-d3e6-4b1f-a339-f73f2db89ee9
Certificate serial:       010D0C9F4328584A0C05616FD0B3CB75194D3930
Authority key identifier: 89:8A:BE:E2:5A:C6:20:65:B0:9B:12:9A:09:45:2E:CB:6A:B9:AC:83
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/6b8157d7-528a-355c-8d23-f69435bf6d41.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     398391
IP address blocks:        64.226.136.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/64239825-d3e6-4b1f-a339-f73f2db89ee9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/64239825-d3e6-4b1f-a339-f73f2db89ee9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:05:61:6f:d0:b3:cb:75:19:4d:39:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64239825-d3e6-4b1f-a339-f73f2db89ee9
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=31364d30-becf-4d99-b1a3-f167d4ea8fa3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:7c:72:ea:3e:c4:5c:34:5e:f1:1d:af:90:0c:
                    03:d7:55:ad:2f:3a:6e:57:c6:e0:aa:97:ec:28:a0:
                    6f:1a:10:e6:8b:e1:b4:59:62:8c:0b:2c:45:eb:1c:
                    57:ad:50:a1:76:c5:8d:a0:1a:60:ca:f9:d6:58:55:
                    dd:7e:c1:6a:17:95:5d:05:57:a2:90:9f:e6:51:04:
                    38:1d:eb:ce:fa:ca:f9:7a:41:07:d4:b0:c7:95:48:
                    e1:b0:ac:50:d5:c3:c1:12:5d:29:2a:6c:d3:53:73:
                    bc:30:28:2e:b7:3b:48:9c:1f:c0:b5:40:8c:48:bc:
                    0b:45:2b:50:cb:29:b1:13:56:2f:bc:18:a1:73:b1:
                    94:b2:e0:29:69:3e:a3:70:b1:17:6b:4c:03:0f:4b:
                    8c:fd:df:c8:56:1e:70:90:01:ee:c2:81:f0:89:18:
                    ea:e6:2d:3d:84:35:de:29:e5:d4:2b:4d:74:48:dc:
                    17:ac:d8:36:66:bb:10:54:8c:a2:99:16:80:02:21:
                    73:7c:7d:31:b2:1f:dc:08:23:89:23:bb:4d:4d:0c:
                    52:a5:b5:1a:a8:ca:d6:a9:35:5b:b3:18:48:52:b3:
                    3b:41:13:2a:58:1e:af:9f:2e:24:02:01:02:26:de:
                    39:16:8c:a5:a9:0d:00:89:31:64:01:44:58:80:48:
                    b8:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:F3:BE:2A:5D:31:3E:A8:71:20:B9:46:5D:2F:52:2B:0B:A2:3C:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/6b8157d7-528a-355c-8d23-f69435bf6d41.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/64239825-d3e6-4b1f-a339-f73f2db89ee9.crl

            X509v3 Authority Key Identifier:
                keyid:89:8A:BE:E2:5A:C6:20:65:B0:9B:12:9A:09:45:2E:CB:6A:B9:AC:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.226.136.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:b7:7f:2b:03:35:9f:a6:64:43:1e:b7:70:e1:7b:b8:b3:00:
         4f:ff:da:1d:e0:85:df:6c:87:77:c0:ce:77:50:bb:22:03:01:
         1d:ba:e9:19:23:34:0c:c8:67:22:48:ee:c8:d8:95:80:e0:be:
         1c:b3:42:30:77:f3:2e:11:c2:93:d6:08:21:6d:f3:ec:60:b6:
         a0:b9:6c:c0:3f:b4:1b:0b:8b:67:dd:7b:ad:4d:0f:85:88:f6:
         14:ae:73:72:a7:44:43:e0:6f:a7:03:22:63:77:67:2b:9e:45:
         f2:f2:e2:95:99:b3:03:09:ac:9a:29:db:23:00:5c:88:0e:c1:
         cd:18:2d:d0:ca:10:00:e5:58:e4:21:1a:c7:09:d2:51:f1:88:
         a9:fd:b5:8e:4f:d8:45:2d:36:e5:44:6b:b5:46:ec:9d:1e:74:
         26:72:ec:25:ae:a2:e8:7f:fb:6b:27:70:68:ed:71:b2:da:66:
         c3:92:f4:d2:91:61:17:85:3c:29:95:75:37:23:ab:af:df:3f:
         18:0d:12:98:4a:57:32:ed:41:5b:15:27:e1:5f:9d:90:50:f8:
         1d:41:24:51:96:b6:f8:8b:53:2f:d2:f3:5b:95:d3:3e:e2:82:
         a7:ff:58:e8:62:45:09:7d:65:fa:83:1a:af:44:6e:d6:15:6d:
         5a:81:ed:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:52:23 2025 by rpki-client