Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/3a630baa-a308-3edf-82c8-85361cf7f752.roa
File:                     3a630baa-a308-3edf-82c8-85361cf7f752.roa (raw, json)
Hash identifier:          B/gWA42amGjFayt/ZxAWpAbov9jERg21E5LPdVbYeNQ=
Subject key identifier:   09:37:FB:99:D8:BD:E4:FE:9F:69:E3:9C:28:C9:12:53:4E:F7:97:BB
Certificate issuer:       /CN=64239825-d3e6-4b1f-a339-f73f2db89ee9
Certificate serial:       010D0C9F4328584A74B5E11674307463F8A664E0
Authority key identifier: 89:8A:BE:E2:5A:C6:20:65:B0:9B:12:9A:09:45:2E:CB:6A:B9:AC:83
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/3a630baa-a308-3edf-82c8-85361cf7f752.roa
Signing time:             Wed 09 Jul 2025 01:00:49 +0000
ROA not before:           Wed 09 Jul 2025 01:00:49 +0000
ROA not after:            Tue 07 Oct 2025 01:00:49 +0000
asID:                     398391
IP address blocks:        64.226.140.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/64239825-d3e6-4b1f-a339-f73f2db89ee9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/64239825-d3e6-4b1f-a339-f73f2db89ee9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 04 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:74:b5:e1:16:74:30:74:63:f8:a6:64:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64239825-d3e6-4b1f-a339-f73f2db89ee9
        Validity
            Not Before: Jul  9 01:00:49 2025 GMT
            Not After : Oct  7 01:00:49 2025 GMT
        Subject: CN=403df57e-147a-447a-abb0-4300e671046e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:0e:33:31:6a:b5:d8:3d:db:6d:22:c4:6a:80:
                    b1:f2:fd:98:0b:6b:41:ac:27:ca:c0:48:3c:35:2f:
                    4b:d8:03:e6:0c:43:e8:97:91:31:b5:f4:80:e2:61:
                    45:11:db:6e:10:66:1f:70:ae:80:37:2d:1f:35:94:
                    eb:0c:6c:7b:5d:fc:99:5c:e5:ea:37:bc:60:2f:ee:
                    28:2e:dd:2b:29:05:cd:f1:63:2c:2e:41:54:2a:22:
                    4b:b1:3a:3c:bc:c9:f4:73:7d:31:6b:b4:b9:be:04:
                    d8:6c:d8:65:1a:86:c0:85:29:21:7d:2d:34:4d:78:
                    75:0c:d3:f2:f4:d4:f9:e4:20:36:8f:cd:12:79:5e:
                    5f:2e:98:7f:70:14:6d:6c:24:21:90:71:10:05:7b:
                    c1:b4:b5:90:98:bc:f4:84:3e:36:85:2a:f6:1b:0a:
                    7a:58:2a:98:e0:d6:65:0b:10:12:dc:af:66:c2:bd:
                    4a:a0:6d:11:0a:46:1f:b2:2b:fb:e1:47:01:a9:53:
                    be:9a:ea:d7:be:30:bb:1e:7e:02:c2:23:47:7a:a6:
                    6a:04:b0:ae:d0:2c:0e:8a:0c:ac:a8:ba:3e:73:13:
                    55:a6:7d:80:48:06:a7:8d:1f:df:c5:cd:84:c0:d5:
                    b2:67:12:81:3a:d3:46:ab:39:d2:5c:d6:61:df:89:
                    2d:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:37:FB:99:D8:BD:E4:FE:9F:69:E3:9C:28:C9:12:53:4E:F7:97:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/3a630baa-a308-3edf-82c8-85361cf7f752.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/64239825-d3e6-4b1f-a339-f73f2db89ee9.crl

            X509v3 Authority Key Identifier:
                keyid:89:8A:BE:E2:5A:C6:20:65:B0:9B:12:9A:09:45:2E:CB:6A:B9:AC:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.226.140.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:54:7c:24:77:85:f9:e6:3c:99:75:3b:3f:42:30:09:b4:3a:
         fa:01:e4:7c:88:ea:75:37:c1:c5:53:d9:d1:25:42:80:b8:15:
         56:19:c6:bd:71:71:9b:f9:cb:34:a1:8e:5c:4a:9d:76:2c:2a:
         8f:6e:24:77:45:6a:92:6f:c6:9c:1d:ff:28:83:f7:1c:a9:fa:
         4f:33:14:04:f4:58:a4:10:3f:e5:02:6f:c2:40:f9:4d:e3:77:
         8d:e5:59:8d:57:41:3b:03:49:c7:c9:a2:0e:53:29:21:c1:6a:
         b7:23:ad:56:4e:21:c8:26:19:b9:66:6a:d0:aa:9e:fe:4c:9c:
         06:e6:f9:78:03:79:ab:43:95:11:87:13:fb:4b:bd:55:71:6e:
         8c:84:28:63:5e:95:84:ff:aa:d1:b8:15:99:ba:f5:76:cd:68:
         b0:dd:a2:b1:38:1f:31:1c:0a:09:65:f3:40:44:c3:d3:19:d6:
         05:e1:61:f3:0b:3d:98:86:c1:f0:d7:53:cf:3e:59:20:8f:23:
         6d:ca:70:0b:8b:fb:67:2c:75:7b:7c:bc:eb:32:00:3c:a6:73:
         2f:ad:58:1b:ed:d9:2a:04:ca:d7:86:f4:99:cf:7a:7c:69:ec:
         70:5e:31:fe:85:6d:e6:d2:1a:ac:45:30:85:b5:2a:53:bb:27:
         cb:bf:e5:a0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp0teEWdDB0Y/imZOAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjQyMzk4MjUtZDNlNi00YjFmLWEzMzktZjczZjJkYjg5
ZWU5MB4XDTI1MDcwOTAxMDA0OVoXDTI1MTAwNzAxMDA0OVowLzEtMCsGA1UEAxMk
NDAzZGY1N2UtMTQ3YS00NDdhLWFiYjAtNDMwMGU2NzEwNDZlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAow4zMWq12D3bbSLEaoCx8v2YC2tBrCfKwEg8
NS9L2APmDEPol5ExtfSA4mFFEdtuEGYfcK6ANy0fNZTrDGx7XfyZXOXqN7xgL+4o
Lt0rKQXN8WMsLkFUKiJLsTo8vMn0c30xa7S5vgTYbNhlGobAhSkhfS00TXh1DNPy
9NT55CA2j80SeV5fLph/cBRtbCQhkHEQBXvBtLWQmLz0hD42hSr2Gwp6WCqY4NZl
CxAS3K9mwr1KoG0RCkYfsiv74UcBqVO+murXvjC7Hn4CwiNHeqZqBLCu0CwOigys
qLo+cxNVpn2ASAanjR/fxc2EwNWyZxKBOtNGqznSXNZh34kt0QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAk3+5nYveT+n2njnCjJElNO95e7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC82NDIz
OTgyNS1kM2U2LTRiMWYtYTMzOS1mNzNmMmRiODllZTkvM2E2MzBiYWEtYTMwOC0z
ZWRmLTgyYzgtODUzNjFjZjdmNzUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNjQyMzk4MjUtZDNlNi00YjFmLWEz
MzktZjczZjJkYjg5ZWU5LzY0MjM5ODI1LWQzZTYtNGIxZi1hMzM5LWY3M2YyZGI4
OWVlOS5jcmwwHwYDVR0jBBgwFoAUiYq+4lrGIGWwmxKaCUUuy2q5rIMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC82NDIzOTgyNS1kM2U2LTRiMWYtYTMzOS1mNzNm
MmRiODllZTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQOKMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACZUfCR3hfnmPJl1Oz9CMAm0OvoB5HyI6nU3wcVT2dElQoC4FVYZxr1x
cZv5yzShjlxKnXYsKo9uJHdFapJvxpwd/yiD9xyp+k8zFAT0WKQQP+UCb8JA+U3j
d43lWY1XQTsDScfJog5TKSHBarcjrVZOIcgmGblmatCqnv5MnAbm+XgDeatDlRGH
E/tLvVVxboyEKGNelYT/qtG4FZm69XbNaLDdorE4HzEcCgll80BEw9MZ1gXhYfML
PZiGwfDXU88+WSCPI23KcAuL+2csdXt8vOsyADymcy+tWBvt2SoEyteG9JnPenxp
7HBeMf6FbebSGqxFMIW1KlO7J8u/5aA=
-----END CERTIFICATE-----
Generated at Fri Aug 1 18:12:37 2025 by rpki-client