Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/40efeecb-aafe-3165-adeb-d124be4d38e8.roa
File:                     40efeecb-aafe-3165-adeb-d124be4d38e8.roa (raw, json)
Hash identifier:          Qye3Ke16YikRU638x0TRTDucytuy4lheCjqqpLwE9g8=
Subject key identifier:   31:48:AF:E9:1F:98:AC:3F:52:F7:46:2E:8D:13:FE:4A:95:69:D0:74
Certificate issuer:       /CN=64239825-d3e6-4b1f-a339-f73f2db89ee9
Certificate serial:       010D0C9F4328584B56D74D8C3D2C57045B7C91C0
Authority key identifier: 89:8A:BE:E2:5A:C6:20:65:B0:9B:12:9A:09:45:2E:CB:6A:B9:AC:83
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/40efeecb-aafe-3165-adeb-d124be4d38e8.roa
Signing time:             Sun 28 Sep 2025 01:00:33 +0000
ROA not before:           Sun 28 Sep 2025 01:00:33 +0000
ROA not after:            Sat 27 Dec 2025 02:00:33 +0000
asID:                     398391
IP address blocks:        64.227.198.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/64239825-d3e6-4b1f-a339-f73f2db89ee9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/64239825-d3e6-4b1f-a339-f73f2db89ee9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:56:d7:4d:8c:3d:2c:57:04:5b:7c:91:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64239825-d3e6-4b1f-a339-f73f2db89ee9
        Validity
            Not Before: Sep 28 01:00:33 2025 GMT
            Not After : Dec 27 02:00:33 2025 GMT
        Subject: CN=25c75c77-f617-4ed1-84f9-2ad2b8ac5859
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:9d:b4:27:fd:73:70:b0:16:dc:74:07:dd:53:
                    65:2d:0d:2f:bb:b5:ca:32:46:0d:d7:43:4b:5c:0b:
                    8a:1e:a6:dd:23:23:49:f8:4f:56:ea:41:23:63:f1:
                    27:64:25:45:fa:db:6e:88:18:19:f0:c8:a8:a2:32:
                    e3:2e:bf:a4:ed:24:84:9c:28:c0:d3:8a:d1:6f:f1:
                    f9:50:e1:ed:2c:77:c0:5e:65:8c:48:63:e3:60:17:
                    89:65:9a:a5:e6:78:3b:f0:d6:d2:53:fd:86:20:d0:
                    b3:0e:39:f7:35:2f:ad:64:5b:5e:d9:76:43:7d:55:
                    45:11:70:da:d3:85:b7:25:73:0e:95:b7:6e:96:f2:
                    6b:01:cc:ce:59:8c:4e:c0:fb:f1:65:4c:18:81:3d:
                    1c:01:7f:cf:14:6e:6e:d4:ff:ee:cb:3e:bf:74:d6:
                    6e:b3:b3:01:16:e5:d8:8b:89:75:03:e8:9e:1e:f1:
                    18:20:67:2c:c2:6b:9f:45:51:1e:16:74:26:74:58:
                    55:20:03:e3:17:7b:a3:6a:7c:d6:88:0d:eb:f1:7a:
                    d4:88:83:80:15:65:aa:ef:09:6b:ff:47:f0:14:e2:
                    2e:73:8c:82:d5:05:5b:47:c4:34:06:19:75:33:eb:
                    a5:3e:8b:aa:ac:49:59:10:71:e2:0b:84:33:c0:11:
                    b4:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:48:AF:E9:1F:98:AC:3F:52:F7:46:2E:8D:13:FE:4A:95:69:D0:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/40efeecb-aafe-3165-adeb-d124be4d38e8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/64239825-d3e6-4b1f-a339-f73f2db89ee9.crl

            X509v3 Authority Key Identifier:
                keyid:89:8A:BE:E2:5A:C6:20:65:B0:9B:12:9A:09:45:2E:CB:6A:B9:AC:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.227.198.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:f1:75:c1:63:4e:c2:fc:ae:ee:c7:d5:51:84:bb:01:2a:6e:
         34:7d:bb:52:ee:55:60:67:1e:7f:a2:29:34:13:54:5a:66:69:
         a2:b0:bb:82:9a:19:02:5b:42:65:94:d6:b8:d6:bf:cc:e0:ae:
         12:22:24:1e:53:4e:62:08:5f:47:22:d6:63:21:b8:5b:93:d8:
         ea:f9:cb:1d:b3:53:7a:21:ee:30:8b:fc:66:15:99:df:43:d0:
         fe:af:e5:3f:cd:cc:e0:54:eb:78:73:ef:2d:65:4c:7e:f3:c5:
         d6:8a:a2:8b:5e:5e:1a:77:d7:bc:c3:a2:19:95:08:74:86:2f:
         cf:31:c4:92:d5:62:a1:a4:93:40:f8:e5:a6:8f:c9:ff:7e:ec:
         70:d1:0d:03:30:ae:38:f8:2c:8f:20:fc:d7:02:31:79:d8:1a:
         30:8b:3e:fb:04:27:a4:e2:80:bc:81:a1:3c:2f:1f:14:a3:dc:
         34:2c:dc:c7:07:6a:09:22:d8:77:72:0c:4b:5b:2b:3b:e8:51:
         4d:d5:7f:f7:d2:b0:33:7d:65:10:17:3f:9b:10:c1:36:7c:3e:
         57:22:69:c6:d4:74:d9:c7:28:07:b6:58:e0:74:9f:ea:73:59:
         77:00:64:cf:19:0d:a2:e5:c9:37:24:01:c2:1e:1b:06:7b:9b:
         07:ad:80:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 15 20:16:58 2025 by rpki-client