Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/d02cf829-905f-3577-a5a3-0e869b38d4bc.roa
File:                     d02cf829-905f-3577-a5a3-0e869b38d4bc.roa (raw, json)
Hash identifier:          eRMs7AMKpAspRLxlUDro4hz7ea8XcSRwTf5BS3YIPL8=
Subject key identifier:   34:77:F9:BD:7D:FE:E5:B1:DA:70:57:9E:A7:E0:80:B6:D4:EE:E7:5D
Certificate issuer:       /CN=64239825-d3e6-4b1f-a339-f73f2db89ee9
Certificate serial:       010D0C9F4328584ACCA6929BCE0E9BC87FE21100
Authority key identifier: 89:8A:BE:E2:5A:C6:20:65:B0:9B:12:9A:09:45:2E:CB:6A:B9:AC:83
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/d02cf829-905f-3577-a5a3-0e869b38d4bc.roa
Signing time:             Sat 09 Aug 2025 13:00:41 +0000
ROA not before:           Sat 09 Aug 2025 13:00:41 +0000
ROA not after:            Fri 07 Nov 2025 14:00:41 +0000
asID:                     398391
IP address blocks:        64.227.193.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/64239825-d3e6-4b1f-a339-f73f2db89ee9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/64239825-d3e6-4b1f-a339-f73f2db89ee9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 12 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:cc:a6:92:9b:ce:0e:9b:c8:7f:e2:11:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64239825-d3e6-4b1f-a339-f73f2db89ee9
        Validity
            Not Before: Aug  9 13:00:41 2025 GMT
            Not After : Nov  7 14:00:41 2025 GMT
        Subject: CN=15f39f06-c506-4bfa-9b04-72f878617826
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:7a:72:29:93:c2:ab:31:bf:22:dd:ee:e4:3c:
                    7b:27:90:86:3c:1c:45:e4:1f:c4:91:79:5e:1d:3a:
                    3e:95:2b:25:c0:40:7a:f6:8a:92:bc:e5:01:99:07:
                    cc:28:27:25:c4:2e:04:e8:99:f8:83:f5:c4:a5:41:
                    09:30:5d:d2:41:de:03:d3:95:d9:14:98:92:a1:40:
                    87:c1:05:30:26:bd:e3:27:80:07:fc:d5:94:24:de:
                    d0:5b:0b:c9:18:cd:de:20:a7:54:b9:3c:a3:d9:d5:
                    26:04:e3:0d:74:82:f4:25:05:68:37:d6:8f:f0:a5:
                    d3:88:cd:44:0b:e7:ca:a7:dd:dc:36:d4:91:9c:96:
                    3f:94:6d:a8:49:7a:d8:89:de:33:54:af:6b:d5:87:
                    34:bc:3f:6a:01:81:64:a6:89:e3:56:09:d3:6d:88:
                    6e:eb:2b:3a:b1:f1:5d:6c:d9:9b:51:db:53:ac:b7:
                    02:56:50:5a:94:eb:81:ab:eb:6e:5a:dc:a5:be:36:
                    e7:14:1d:c8:29:2c:20:7d:be:94:98:b1:4f:22:b9:
                    be:34:4e:12:76:40:7c:d2:8c:70:94:49:4a:50:c2:
                    6d:cc:a6:2c:3e:7f:3a:c9:60:6e:c6:5e:b0:f6:98:
                    5b:8b:bd:3b:9a:d8:86:81:f0:76:85:fb:d5:d4:d9:
                    b8:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:77:F9:BD:7D:FE:E5:B1:DA:70:57:9E:A7:E0:80:B6:D4:EE:E7:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/d02cf829-905f-3577-a5a3-0e869b38d4bc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/64239825-d3e6-4b1f-a339-f73f2db89ee9.crl

            X509v3 Authority Key Identifier:
                keyid:89:8A:BE:E2:5A:C6:20:65:B0:9B:12:9A:09:45:2E:CB:6A:B9:AC:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.227.193.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:0c:ca:09:fa:fc:72:47:4f:2e:39:37:bb:80:42:a0:fd:ed:
         82:79:1f:de:ab:c1:da:f0:b3:ab:a0:f8:ba:8a:0c:9f:91:f4:
         0f:9f:08:e5:48:bb:41:d5:a1:ca:83:a6:8f:e9:69:7d:c8:7b:
         5d:cb:27:0d:5e:82:8c:a7:bc:23:fb:eb:16:e5:09:05:6e:8c:
         90:84:65:7a:55:94:9c:62:74:ff:36:92:d7:34:73:5f:ba:64:
         3a:58:22:f5:d7:10:94:16:8f:d0:9b:21:12:5d:da:10:69:b4:
         8d:cf:a4:81:64:19:28:b9:10:83:c0:d8:7e:58:25:46:21:17:
         0d:ad:5b:12:20:df:35:32:53:2d:15:0d:f2:42:55:aa:51:e3:
         92:38:ee:ee:b0:58:f2:ee:5e:45:21:01:d8:13:57:a0:4f:8a:
         f0:ce:c9:c3:46:01:e1:0e:1e:a0:88:0d:90:12:5a:c4:b3:af:
         32:86:67:ec:ea:ec:4c:7f:95:db:21:1b:bf:0b:99:63:60:9c:
         0d:68:17:a2:1a:8f:aa:b6:ee:17:a9:a3:22:68:f6:ca:ae:bf:
         f6:87:89:30:cb:cb:01:30:8d:92:ab:7f:0c:bb:a8:63:d7:16:
         23:4a:13:75:4c:4f:ab:2e:65:f7:3e:fa:87:af:e1:cf:f7:de:
         79:3c:9f:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 22:35:18 2025 by rpki-client