Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/64a11a0d-f102-30ac-a518-01155f25f2e4.roa
File:                     64a11a0d-f102-30ac-a518-01155f25f2e4.roa (raw, json)
Hash identifier:          bN5CyvxacRncroU4XFe2ESo6cnbdpMEtXk//pJuDB2g=
Subject key identifier:   BB:3E:8A:B5:A5:59:D9:97:EC:1B:2E:47:83:83:3A:E9:E0:AE:69:A3
Certificate issuer:       /CN=64239825-d3e6-4b1f-a339-f73f2db89ee9
Certificate serial:       010D0C9F4328584CCA41EBE11BF07766D6CA5640
Authority key identifier: 89:8A:BE:E2:5A:C6:20:65:B0:9B:12:9A:09:45:2E:CB:6A:B9:AC:83
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/64a11a0d-f102-30ac-a518-01155f25f2e4.roa
Signing time:             Sun 08 Feb 2026 02:00:32 +0000
ROA not before:           Sun 08 Feb 2026 02:00:32 +0000
ROA not after:            Sat 09 May 2026 01:00:32 +0000
asID:                     398391
IP address blocks:        64.227.196.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/64239825-d3e6-4b1f-a339-f73f2db89ee9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/64239825-d3e6-4b1f-a339-f73f2db89ee9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 24 Feb 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ca:41:eb:e1:1b:f0:77:66:d6:ca:56:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64239825-d3e6-4b1f-a339-f73f2db89ee9
        Validity
            Not Before: Feb  8 02:00:32 2026 GMT
            Not After : May  9 01:00:32 2026 GMT
        Subject: CN=e458e012-2e1f-48fe-825f-f7a27dae12cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:31:f1:9b:37:cd:72:d5:86:c8:d1:2d:86:5d:
                    2e:0c:a1:7e:a7:f9:4e:30:f1:a0:9c:03:f8:d2:2d:
                    c2:ac:60:48:35:26:03:a0:45:b9:97:45:53:df:28:
                    d2:38:22:ee:c1:99:93:b4:0f:0f:b0:eb:0e:54:d1:
                    d9:19:92:8d:34:f0:5b:76:aa:7a:36:99:0f:fd:7b:
                    44:6c:7c:73:6f:46:c6:d6:24:60:4e:06:c7:b1:a1:
                    d4:23:df:b3:18:27:40:47:a3:22:fa:b8:3a:38:5a:
                    0c:27:38:bb:7d:43:a6:58:b5:0a:a3:48:2d:89:d4:
                    8f:d2:84:4e:1f:66:54:f7:92:fe:e4:9f:b7:b6:94:
                    ac:40:d9:a6:78:ca:6c:72:a7:87:27:a2:71:ae:0e:
                    bc:28:7b:02:01:15:9c:3f:b9:d9:5d:1f:5a:3e:e2:
                    09:65:0a:62:f0:cb:36:f1:93:c0:c3:63:b1:d6:42:
                    51:64:57:0d:23:b4:b8:fc:15:47:a7:e0:b5:76:6e:
                    f5:1f:8b:dd:c4:c6:01:25:dc:a6:84:f5:af:a0:44:
                    1b:bd:ea:7b:eb:3f:99:d3:a2:71:05:b2:e2:26:5f:
                    c4:ac:a7:b3:2f:9f:e8:6b:28:a7:92:ee:eb:e7:30:
                    7c:fc:63:f7:1d:14:5f:06:ea:72:ca:c0:80:cc:38:
                    49:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:3E:8A:B5:A5:59:D9:97:EC:1B:2E:47:83:83:3A:E9:E0:AE:69:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/64a11a0d-f102-30ac-a518-01155f25f2e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/64239825-d3e6-4b1f-a339-f73f2db89ee9.crl

            X509v3 Authority Key Identifier:
                keyid:89:8A:BE:E2:5A:C6:20:65:B0:9B:12:9A:09:45:2E:CB:6A:B9:AC:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.227.196.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:c0:5f:13:c4:a8:75:51:e6:7d:59:a2:97:27:90:67:d9:da:
         ad:35:1e:10:83:8d:a3:26:8a:8c:19:26:51:bf:85:d3:d2:c5:
         35:57:99:e3:64:9c:d7:58:f5:49:ab:b8:43:13:14:84:ac:54:
         08:fe:0d:b0:2e:1e:aa:35:b2:63:2f:fd:15:a4:e2:20:46:42:
         56:a1:8d:45:2a:2a:82:86:63:2e:d2:ec:2c:c3:67:0e:47:f3:
         ab:b8:fa:74:b2:ab:3e:6b:c1:49:e8:e4:3e:8a:cd:0d:e7:2d:
         db:be:4e:d8:c4:ac:8a:e4:b9:55:45:94:db:ef:55:fa:f9:9c:
         d3:75:79:56:39:bc:11:9f:46:32:37:41:a0:05:f7:cc:27:df:
         e1:0e:be:38:50:a9:61:cf:8f:f5:af:ff:ac:23:54:d3:a7:cd:
         e2:f8:55:40:79:68:f4:d0:df:d2:2b:d4:6a:57:d9:d6:4e:36:
         31:7b:bc:03:6f:34:ed:46:df:de:88:d4:40:c4:61:25:36:66:
         8e:bd:11:9d:af:f8:fa:4b:b4:57:13:aa:8f:db:b3:22:4e:3b:
         4f:e0:41:14:12:7d:0d:8c:22:8f:56:e8:1c:79:a1:9c:f4:d9:
         61:12:8d:11:c8:1f:a2:ae:4f:b6:d0:61:2c:49:62:30:63:b5:
         bd:95:2c:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 01:32:14 2026 by rpki-client