Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/e3488355-5e85-3172-9bbe-d2e6da67a3f7.roa
File:                     e3488355-5e85-3172-9bbe-d2e6da67a3f7.roa (raw, json)
Hash identifier:          KnfOOoa9/lVXZJRbAhQW40BJC1U1Vp45IEvnY99seB8=
Subject key identifier:   CB:26:DA:FC:B5:A2:43:C4:44:60:C8:C4:C6:AE:9E:8A:86:56:AB:FF
Certificate issuer:       /CN=64239825-d3e6-4b1f-a339-f73f2db89ee9
Certificate serial:       010D0C9F432858485E35AB5397860F65AC8C5D80
Authority key identifier: 89:8A:BE:E2:5A:C6:20:65:B0:9B:12:9A:09:45:2E:CB:6A:B9:AC:83
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/e3488355-5e85-3172-9bbe-d2e6da67a3f7.roa
Signing time:             Sun 29 Dec 2024 14:00:53 +0000
ROA not before:           Sun 29 Dec 2024 14:00:53 +0000
ROA not after:            Sat 29 Mar 2025 13:00:53 +0000
asID:                     398391
IP address blocks:        64.226.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/64239825-d3e6-4b1f-a339-f73f2db89ee9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/64239825-d3e6-4b1f-a339-f73f2db89ee9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:5e:35:ab:53:97:86:0f:65:ac:8c:5d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64239825-d3e6-4b1f-a339-f73f2db89ee9
        Validity
            Not Before: Dec 29 14:00:53 2024 GMT
            Not After : Mar 29 13:00:53 2025 GMT
        Subject: CN=2c54b1f5-df93-42bb-a424-564aa6ffda91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:94:de:67:65:c7:c0:0d:5e:bc:4f:a5:f5:93:
                    c1:8b:41:29:c4:b4:93:47:49:70:d2:6c:d3:14:60:
                    f0:05:69:e2:2b:0d:7a:54:18:6f:bc:95:04:90:c1:
                    de:09:17:91:f4:ae:af:fc:8e:83:86:68:02:8d:89:
                    84:8d:aa:30:17:02:42:63:26:50:6b:e2:59:0f:b0:
                    61:d3:7b:57:bc:1b:40:b1:b2:af:ed:75:f6:61:0a:
                    50:d8:d8:c8:64:7e:6f:fe:e0:a4:e3:31:3d:33:fe:
                    6c:4a:81:b4:7d:f6:a8:42:62:76:71:f3:2e:de:cc:
                    62:37:ad:de:d0:bb:1d:73:ad:0e:72:59:63:e1:fe:
                    a7:b5:71:39:4a:37:24:11:c6:a7:19:29:4d:9b:1d:
                    f3:29:f8:7b:da:fa:2e:ea:17:76:ee:19:18:69:f5:
                    4c:f7:0b:ee:13:8b:2c:00:a1:a1:d5:73:e5:e2:c6:
                    82:d7:ba:38:1e:ed:95:9d:32:7a:fb:d0:c0:4f:c5:
                    84:e6:b7:b7:9e:c4:be:fd:a4:dd:63:79:02:bc:f3:
                    26:6b:e9:51:21:2f:73:f3:35:85:ec:24:47:9b:0b:
                    2f:95:aa:0e:0e:47:c6:b1:c9:b6:16:14:5c:f5:11:
                    5b:a6:ca:83:db:2c:9e:4d:3b:bf:5b:ce:9e:6a:b2:
                    6a:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:26:DA:FC:B5:A2:43:C4:44:60:C8:C4:C6:AE:9E:8A:86:56:AB:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/e3488355-5e85-3172-9bbe-d2e6da67a3f7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/64239825-d3e6-4b1f-a339-f73f2db89ee9.crl

            X509v3 Authority Key Identifier:
                keyid:89:8A:BE:E2:5A:C6:20:65:B0:9B:12:9A:09:45:2E:CB:6A:B9:AC:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.226.128.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:dc:70:5c:4f:90:61:ca:c7:48:19:9d:82:4e:46:98:b5:af:
         ab:17:a5:c2:b2:6f:a1:74:46:55:eb:ac:aa:9d:02:c2:6f:30:
         2f:70:a6:f9:fa:38:0e:8c:9b:81:84:4d:2b:71:66:8a:e7:da:
         0e:6a:89:1f:b8:9b:61:3d:1a:47:7d:b3:c5:ab:a4:9f:0f:7a:
         e9:73:58:73:59:f7:d9:33:b9:d8:4b:5f:f9:25:12:f2:c9:55:
         48:0d:80:40:bb:74:65:a7:14:55:91:ec:de:0d:12:16:5d:d2:
         d6:d5:f4:1a:30:b0:56:49:42:af:ba:83:4a:89:14:09:89:88:
         b6:58:f0:9c:d7:18:cf:57:78:96:12:8c:e9:71:7d:3d:d6:e2:
         4b:76:98:f1:a7:67:13:57:ac:b6:74:f2:84:f5:82:23:17:ae:
         0f:d5:e6:0b:32:2c:bd:12:34:6a:fb:2e:2d:cb:1a:2b:6f:e6:
         60:07:97:14:cf:d6:a0:61:95:de:33:88:40:3b:6b:60:09:02:
         80:0e:2e:0f:ec:c0:c2:a7:35:62:29:ce:f5:78:11:cb:e7:2f:
         ae:57:28:a4:3c:81:f2:ff:f5:9b:9f:9b:04:6b:e1:7d:67:72:
         7d:14:52:bd:c2:f9:fe:11:f7:ba:f4:da:3b:d7:66:ad:06:16:
         7a:6f:c1:d4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEheNatTl4YPZayMXYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjQyMzk4MjUtZDNlNi00YjFmLWEzMzktZjczZjJkYjg5
ZWU5MB4XDTI0MTIyOTE0MDA1M1oXDTI1MDMyOTEzMDA1M1owLzEtMCsGA1UEAxMk
MmM1NGIxZjUtZGY5My00MmJiLWE0MjQtNTY0YWE2ZmZkYTkxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnJTeZ2XHwA1evE+l9ZPBi0EpxLSTR0lw0mzT
FGDwBWniKw16VBhvvJUEkMHeCReR9K6v/I6DhmgCjYmEjaowFwJCYyZQa+JZD7Bh
03tXvBtAsbKv7XX2YQpQ2NjIZH5v/uCk4zE9M/5sSoG0ffaoQmJ2cfMu3sxiN63e
0Lsdc60Ocllj4f6ntXE5SjckEcanGSlNmx3zKfh72vou6hd27hkYafVM9wvuE4ss
AKGh1XPl4saC17o4Hu2VnTJ6+9DAT8WE5re3nsS+/aTdY3kCvPMma+lRIS9z8zWF
7CRHmwsvlaoODkfGscm2FhRc9RFbpsqD2yyeTTu/W86earJqsQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMsm2vy1okPERGDIxMaunoqGVqv/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC82NDIz
OTgyNS1kM2U2LTRiMWYtYTMzOS1mNzNmMmRiODllZTkvZTM0ODgzNTUtNWU4NS0z
MTcyLTliYmUtZDJlNmRhNjdhM2Y3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNjQyMzk4MjUtZDNlNi00YjFmLWEz
MzktZjczZjJkYjg5ZWU5LzY0MjM5ODI1LWQzZTYtNGIxZi1hMzM5LWY3M2YyZGI4
OWVlOS5jcmwwHwYDVR0jBBgwFoAUiYq+4lrGIGWwmxKaCUUuy2q5rIMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC82NDIzOTgyNS1kM2U2LTRiMWYtYTMzOS1mNzNm
MmRiODllZTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQOKAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAH7ccFxPkGHKx0gZnYJORpi1r6sXpcKyb6F0RlXrrKqdAsJvMC9wpvn6
OA6Mm4GETStxZorn2g5qiR+4m2E9Gkd9s8WrpJ8PeulzWHNZ99kzudhLX/klEvLJ
VUgNgEC7dGWnFFWR7N4NEhZd0tbV9BowsFZJQq+6g0qJFAmJiLZY8JzXGM9XeJYS
jOlxfT3W4kt2mPGnZxNXrLZ08oT1giMXrg/V5gsyLL0SNGr7Li3LGitv5mAHlxTP
1qBhld4ziEA7a2AJAoAOLg/swMKnNWIpzvV4EcvnL65XKKQ8gfL/9ZufmwRr4X1n
cn0UUr3C+f4R97r02jvXZq0GFnpvwdQ=
-----END CERTIFICATE-----
Generated at Fri Mar 14 11:21:45 2025 by rpki-client