Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/dc894491-cb1a-31a7-a6e7-9d111f61fa31.roa
File:                     dc894491-cb1a-31a7-a6e7-9d111f61fa31.roa (raw, json)
Hash identifier:          nPVLcolt3wMghpeGaenbFV8Rr3s1OB0YWE7cXGR1qy0=
Subject key identifier:   AF:62:F2:66:C5:10:E8:8B:51:E3:C2:40:E4:B8:16:53:53:F0:EB:AA
Certificate issuer:       /CN=64239825-d3e6-4b1f-a339-f73f2db89ee9
Certificate serial:       010D0C9F4328584B1806C2BE0B55654A4ACBC800
Authority key identifier: 89:8A:BE:E2:5A:C6:20:65:B0:9B:12:9A:09:45:2E:CB:6A:B9:AC:83
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/dc894491-cb1a-31a7-a6e7-9d111f61fa31.roa
Signing time:             Fri 05 Sep 2025 13:00:41 +0000
ROA not before:           Fri 05 Sep 2025 13:00:41 +0000
ROA not after:            Thu 04 Dec 2025 14:00:41 +0000
asID:                     398391
IP address blocks:        64.226.130.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/64239825-d3e6-4b1f-a339-f73f2db89ee9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/64239825-d3e6-4b1f-a339-f73f2db89ee9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 17 Sep 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:18:06:c2:be:0b:55:65:4a:4a:cb:c8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64239825-d3e6-4b1f-a339-f73f2db89ee9
        Validity
            Not Before: Sep  5 13:00:41 2025 GMT
            Not After : Dec  4 14:00:41 2025 GMT
        Subject: CN=246aa1c2-2bb9-484b-a40c-ada8325cc549
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:43:ee:7b:51:12:29:04:30:dc:f2:da:a3:7a:
                    64:86:9f:44:46:cb:4b:4d:81:42:4c:be:18:a2:f8:
                    57:44:ff:7b:6d:06:3a:a2:c9:7b:c8:fb:60:8b:49:
                    7e:b3:e4:48:69:3d:ee:6a:8d:13:fb:c9:95:c0:9f:
                    b0:7f:eb:e9:a0:84:75:36:bf:8f:fa:eb:fe:2f:ff:
                    3f:5f:19:df:d0:5b:3b:ba:7d:e3:e6:8c:28:d4:22:
                    6e:58:d4:0c:71:5c:a8:1b:0e:ea:0f:1d:d1:ab:72:
                    d6:9b:38:7e:c6:96:c1:f0:ac:2e:9e:22:45:29:63:
                    52:55:4d:de:f4:0f:fe:96:88:20:45:7e:3c:71:e1:
                    ff:fd:fe:6e:82:21:87:91:90:08:84:c1:17:61:c8:
                    31:25:f0:c9:96:fb:23:a7:68:a4:6c:12:a2:7c:6c:
                    06:d9:96:52:ae:7f:25:ec:07:06:0a:e3:c8:84:e3:
                    9e:cd:5e:e5:35:3a:30:be:42:8e:2f:f0:de:73:da:
                    9d:1f:a4:0e:ea:58:dc:5e:a9:02:c7:56:cb:fc:53:
                    7f:1c:87:5c:51:ef:14:0a:fd:2e:cc:46:87:b9:f9:
                    27:a0:48:6c:92:42:3e:cf:da:ee:23:fb:26:ff:4b:
                    53:06:3f:a4:f9:61:14:21:af:8b:d1:f8:41:66:99:
                    21:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:62:F2:66:C5:10:E8:8B:51:E3:C2:40:E4:B8:16:53:53:F0:EB:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/dc894491-cb1a-31a7-a6e7-9d111f61fa31.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/64239825-d3e6-4b1f-a339-f73f2db89ee9.crl

            X509v3 Authority Key Identifier:
                keyid:89:8A:BE:E2:5A:C6:20:65:B0:9B:12:9A:09:45:2E:CB:6A:B9:AC:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.226.130.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:3f:02:e8:6f:a8:6d:78:f9:a8:03:9a:22:ef:f2:9e:86:ac:
         db:d7:66:7f:de:e4:2d:25:5f:cc:f3:fd:bb:9c:30:52:25:7a:
         f9:a4:4e:6c:4f:8f:62:30:41:64:35:e5:30:c3:64:25:bd:72:
         44:d4:f8:f7:32:09:1b:93:83:b7:c6:93:78:d4:66:b5:d6:2b:
         98:19:b8:b7:26:d4:9d:23:b2:61:4f:2c:2b:aa:1d:6c:a0:4a:
         bc:18:96:5b:da:a4:18:3d:59:d2:2a:d6:e9:e0:fa:f4:b7:25:
         70:52:78:ef:f4:6c:1a:07:4b:22:df:2f:2f:dc:04:9d:6c:bc:
         9d:5a:5d:6e:94:4c:f1:64:de:b3:1a:2b:f9:05:4e:9e:c8:1c:
         7d:ee:37:54:51:c2:3a:05:f4:e9:c3:6b:95:53:a1:af:f7:57:
         81:68:76:c5:4f:00:ef:44:9f:d3:d7:93:89:61:85:a1:cc:72:
         c8:ec:bb:95:2c:ee:ad:a1:b9:89:72:e0:a1:3f:06:8d:55:86:
         c4:1f:6a:45:51:a9:ce:e7:43:d1:fc:01:e3:5d:73:60:02:38:
         28:32:0c:c4:76:bf:86:9c:fb:36:b1:33:de:57:66:0a:a2:2b:
         17:5d:71:59:75:4e:4e:6e:aa:17:40:02:aa:45:eb:1a:ec:37:
         a8:a2:6e:39
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsYBsK+C1VlSkrLyAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjQyMzk4MjUtZDNlNi00YjFmLWEzMzktZjczZjJkYjg5
ZWU5MB4XDTI1MDkwNTEzMDA0MVoXDTI1MTIwNDE0MDA0MVowLzEtMCsGA1UEAxMk
MjQ2YWExYzItMmJiOS00ODRiLWE0MGMtYWRhODMyNWNjNTQ5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvEPue1ESKQQw3PLao3pkhp9ERstLTYFCTL4Y
ovhXRP97bQY6osl7yPtgi0l+s+RIaT3uao0T+8mVwJ+wf+vpoIR1Nr+P+uv+L/8/
Xxnf0Fs7un3j5owo1CJuWNQMcVyoGw7qDx3Rq3LWmzh+xpbB8KwuniJFKWNSVU3e
9A/+loggRX48ceH//f5ugiGHkZAIhMEXYcgxJfDJlvsjp2ikbBKifGwG2ZZSrn8l
7AcGCuPIhOOezV7lNTowvkKOL/Dec9qdH6QO6ljcXqkCx1bL/FN/HIdcUe8UCv0u
zEaHufknoEhskkI+z9ruI/sm/0tTBj+k+WEUIa+L0fhBZpkhCwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFK9i8mbFEOiLUePCQOS4FlNT8OuqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC82NDIz
OTgyNS1kM2U2LTRiMWYtYTMzOS1mNzNmMmRiODllZTkvZGM4OTQ0OTEtY2IxYS0z
MWE3LWE2ZTctOWQxMTFmNjFmYTMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNjQyMzk4MjUtZDNlNi00YjFmLWEz
MzktZjczZjJkYjg5ZWU5LzY0MjM5ODI1LWQzZTYtNGIxZi1hMzM5LWY3M2YyZGI4
OWVlOS5jcmwwHwYDVR0jBBgwFoAUiYq+4lrGIGWwmxKaCUUuy2q5rIMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC82NDIzOTgyNS1kM2U2LTRiMWYtYTMzOS1mNzNm
MmRiODllZTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQOKCMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIE/AuhvqG14+agDmiLv8p6GrNvXZn/e5C0lX8zz/bucMFIlevmkTmxP
j2IwQWQ15TDDZCW9ckTU+PcyCRuTg7fGk3jUZrXWK5gZuLcm1J0jsmFPLCuqHWyg
SrwYllvapBg9WdIq1ung+vS3JXBSeO/0bBoHSyLfLy/cBJ1svJ1aXW6UTPFk3rMa
K/kFTp7IHH3uN1RRwjoF9OnDa5VToa/3V4FodsVPAO9En9PXk4lhhaHMcsjsu5Us
7q2huYly4KE/Bo1VhsQfakVRqc7nQ9H8AeNdc2ACOCgyDMR2v4ac+zaxM95XZgqi
KxddcVl1Tk5uqhdAAqpF6xrsN6iibjk=
-----END CERTIFICATE-----
Generated at Mon Sep 15 20:11:49 2025 by rpki-client