Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/3a630baa-a308-3edf-82c8-85361cf7f752.roa
File:                     3a630baa-a308-3edf-82c8-85361cf7f752.roa (raw, json)
Hash identifier:          EXXn0rATztGMe6w1wkFtjb9pjQjnHwEnZ2M0STWNodg=
Subject key identifier:   0F:73:8F:5B:C2:02:74:58:C1:86:82:A3:8C:21:72:AA:80:32:5E:F2
Certificate issuer:       /CN=64239825-d3e6-4b1f-a339-f73f2db89ee9
Certificate serial:       010D0C9F43285848B62620706672C3122E518AA0
Authority key identifier: 89:8A:BE:E2:5A:C6:20:65:B0:9B:12:9A:09:45:2E:CB:6A:B9:AC:83
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/3a630baa-a308-3edf-82c8-85361cf7f752.roa
Signing time:             Thu 30 Jan 2025 02:00:40 +0000
ROA not before:           Thu 30 Jan 2025 02:00:40 +0000
ROA not after:            Wed 30 Apr 2025 01:00:40 +0000
asID:                     398391
IP address blocks:        64.226.140.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/64239825-d3e6-4b1f-a339-f73f2db89ee9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/64239825-d3e6-4b1f-a339-f73f2db89ee9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b6:26:20:70:66:72:c3:12:2e:51:8a:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64239825-d3e6-4b1f-a339-f73f2db89ee9
        Validity
            Not Before: Jan 30 02:00:40 2025 GMT
            Not After : Apr 30 01:00:40 2025 GMT
        Subject: CN=c67b8f0f-8f48-4dc3-aa54-1c3a1842ff5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:f2:9f:1d:97:ef:e0:d6:31:a2:f3:ec:4a:c9:
                    53:b0:7c:2b:8b:2a:b3:85:25:32:bc:6f:2d:5f:71:
                    fd:66:ed:40:95:3d:1a:f6:46:97:15:24:35:93:1f:
                    c0:5a:9c:56:4e:82:fb:fe:5d:88:08:88:27:dc:a4:
                    66:f8:46:b4:1b:dd:25:58:d2:ad:35:7b:83:19:9b:
                    49:38:f3:51:55:7b:1b:61:cf:db:05:70:42:a6:af:
                    31:6e:f8:bf:25:ce:c9:88:6f:ae:e6:80:f2:dc:9a:
                    2b:16:9b:d0:f8:68:ed:1e:94:9c:d1:a8:da:09:ad:
                    16:67:9f:d1:cc:a9:ba:1c:02:41:ec:9a:bf:d0:6a:
                    48:09:ef:0c:d2:6c:f7:42:44:31:81:92:00:b8:a7:
                    da:85:4b:eb:eb:39:32:44:ae:d9:65:67:26:b8:a0:
                    77:bc:a2:1c:18:c3:23:ba:b2:7e:19:ae:9c:2f:b0:
                    9b:a9:f2:f7:fc:68:96:e8:fc:38:7d:cb:d0:cb:98:
                    e3:7c:44:24:d7:4b:21:34:0d:82:a1:00:bf:30:a6:
                    92:38:a5:a7:d4:8f:75:13:34:f4:f0:d2:15:8f:54:
                    97:c1:3d:b2:e7:ca:fb:e4:1f:bc:10:10:56:56:a2:
                    6f:6d:0a:48:b0:15:e2:59:a2:0c:c1:be:d2:fd:19:
                    b4:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:73:8F:5B:C2:02:74:58:C1:86:82:A3:8C:21:72:AA:80:32:5E:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/3a630baa-a308-3edf-82c8-85361cf7f752.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/64239825-d3e6-4b1f-a339-f73f2db89ee9.crl

            X509v3 Authority Key Identifier:
                keyid:89:8A:BE:E2:5A:C6:20:65:B0:9B:12:9A:09:45:2E:CB:6A:B9:AC:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.226.140.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:ad:65:26:f9:98:16:3c:e8:ee:94:4c:d3:e9:06:2c:97:66:
         bb:19:37:53:6c:65:15:c8:a5:97:f2:b7:df:e4:0e:08:df:67:
         37:e3:61:6f:c8:bd:2f:69:c7:d2:71:2c:4b:e9:cd:55:29:a0:
         c9:65:6e:96:14:a5:fb:da:f1:3e:65:f2:be:b9:eb:47:98:af:
         bd:bc:21:4e:6b:01:4f:be:3c:a9:84:e1:2c:79:a5:f9:f7:2e:
         15:ac:ee:a7:e6:1a:78:66:7b:cd:42:1e:27:bd:89:02:1f:31:
         1a:33:15:fa:88:3c:ee:e1:14:36:1b:5c:e9:ce:34:3c:de:17:
         e9:09:a9:57:2e:4f:22:db:71:f4:f3:e4:b2:56:db:35:55:f9:
         13:69:3a:a5:bd:86:b6:73:d7:31:11:13:5c:33:12:d9:9d:97:
         bc:67:ae:c6:7b:48:d3:29:65:12:ec:60:74:d8:dc:4d:5d:e2:
         47:b3:58:5b:65:c1:3b:d4:b7:dd:2e:c5:ad:06:2f:dc:07:a1:
         9c:f4:5b:e2:de:eb:0f:b4:6e:68:95:bc:ca:3f:eb:e5:7e:04:
         5b:30:3a:38:34:dd:da:c5:be:8e:9c:7e:dc:6c:0f:01:9c:10:
         a2:29:c8:cb:af:b2:7d:af:4b:e0:36:f7:67:04:b7:91:20:a7:
         73:5a:77:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:14:00 2025 by rpki-client