Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/c5b2c891-c3a5-33c7-a12a-1cbe328dcf1f.roa
File:                     c5b2c891-c3a5-33c7-a12a-1cbe328dcf1f.roa (raw, json)
Hash identifier:          L9y8jmEqEeHUasjWsjwPvGc6MeUi9d39qAhGpjcdeOU=
Subject key identifier:   B1:14:21:31:8A:11:6D:AC:25:0F:78:3D:38:D8:22:DF:60:C1:D7:1C
Certificate issuer:       /CN=64239825-d3e6-4b1f-a339-f73f2db89ee9
Certificate serial:       010D0C9F4328584AC2E1023C27A874A4FCE106F0
Authority key identifier: 89:8A:BE:E2:5A:C6:20:65:B0:9B:12:9A:09:45:2E:CB:6A:B9:AC:83
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/c5b2c891-c3a5-33c7-a12a-1cbe328dcf1f.roa
Signing time:             Wed 06 Aug 2025 01:00:33 +0000
ROA not before:           Wed 06 Aug 2025 01:00:33 +0000
ROA not after:            Tue 04 Nov 2025 02:00:33 +0000
asID:                     398391
IP address blocks:        64.226.141.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/64239825-d3e6-4b1f-a339-f73f2db89ee9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/64239825-d3e6-4b1f-a339-f73f2db89ee9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 12 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c2:e1:02:3c:27:a8:74:a4:fc:e1:06:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64239825-d3e6-4b1f-a339-f73f2db89ee9
        Validity
            Not Before: Aug  6 01:00:33 2025 GMT
            Not After : Nov  4 02:00:33 2025 GMT
        Subject: CN=27efba34-221e-4f35-9186-212aa1334cb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:12:77:49:5b:ca:bd:92:fe:e5:aa:0a:0d:2f:
                    87:a8:60:0e:9d:d3:08:ea:c4:f2:02:0c:5a:c9:a5:
                    8e:28:81:28:f7:1c:9c:d4:a2:b5:e3:b7:0e:20:7e:
                    83:02:50:7a:f1:34:f5:bb:b2:ba:31:60:0a:b1:53:
                    03:d7:4b:49:28:62:0f:76:6b:97:67:f4:23:5c:d8:
                    5f:e7:56:ec:1d:35:de:9b:8c:e0:11:65:4d:0c:7b:
                    94:a3:0b:52:c5:55:40:48:99:44:86:4e:d3:87:fc:
                    b1:c3:82:bd:94:19:5d:2d:c7:71:22:73:26:8b:43:
                    5b:94:33:b3:f1:b0:a4:72:3c:20:24:1c:54:39:6c:
                    25:d5:13:c5:e6:14:5e:52:a5:f1:77:d9:13:6c:e5:
                    7d:d1:17:ad:5d:01:b1:f9:b0:e3:ae:15:d8:c9:bb:
                    86:73:fa:e2:0e:79:39:14:08:d5:d5:90:47:7b:57:
                    e7:2d:f9:0f:a9:a6:78:11:8f:19:62:88:df:d3:fe:
                    90:75:13:3c:4e:89:ae:db:6d:54:42:ef:68:f2:0f:
                    a4:c2:aa:fa:b3:d9:3e:26:c0:e9:ee:d4:79:16:c5:
                    14:20:aa:d5:96:64:1d:30:2c:0e:d5:13:a9:bb:01:
                    e0:d6:94:52:53:e4:eb:39:bb:d5:5f:3a:54:a6:e4:
                    a5:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:14:21:31:8A:11:6D:AC:25:0F:78:3D:38:D8:22:DF:60:C1:D7:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/c5b2c891-c3a5-33c7-a12a-1cbe328dcf1f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/64239825-d3e6-4b1f-a339-f73f2db89ee9.crl

            X509v3 Authority Key Identifier:
                keyid:89:8A:BE:E2:5A:C6:20:65:B0:9B:12:9A:09:45:2E:CB:6A:B9:AC:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.226.141.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:f9:d4:ea:67:bb:84:83:ad:a5:ff:1d:94:47:21:10:24:87:
         c4:a1:fd:de:79:e6:ea:07:04:2b:9e:d7:a9:07:17:a5:6a:13:
         e4:42:66:08:9d:d4:e9:d4:07:5e:4b:a1:64:ff:87:e3:5a:83:
         05:f0:76:73:a6:a1:fc:71:41:da:4c:aa:da:ad:b6:a5:65:cf:
         23:15:d6:87:1c:a1:c8:4b:d3:ec:33:79:9e:04:3d:dc:e6:73:
         8c:ee:6e:66:d5:21:aa:69:0c:77:17:09:73:ae:78:b3:00:dd:
         9a:d0:89:fd:d7:4a:a1:a4:73:32:3d:c2:19:ce:b8:d9:cf:1e:
         19:16:7e:3f:55:7b:20:01:1b:ba:5f:4a:3c:8f:e1:68:2d:e8:
         90:57:fd:fd:3e:2d:c7:d1:21:c1:0b:28:15:32:85:a1:a2:d1:
         d3:19:26:2b:84:f5:dc:76:ed:91:9b:86:b9:0c:f3:ec:3a:87:
         da:a0:4e:98:c8:6c:1c:d7:70:71:23:1c:1a:33:91:a7:d8:22:
         e2:aa:90:9a:dc:47:e1:d6:19:e2:70:c4:75:4b:55:7e:09:95:
         9b:38:17:4d:96:55:b0:11:c3:e4:db:dd:fc:9f:91:cc:be:bf:
         5c:22:d2:8a:c2:30:93:8a:fd:af:cc:ca:a6:ed:43:01:d2:fa:
         7e:b6:e4:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 20:47:56 2025 by rpki-client