Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/e3488355-5e85-3172-9bbe-d2e6da67a3f7.roa
File:                     e3488355-5e85-3172-9bbe-d2e6da67a3f7.roa (raw, json)
Hash identifier:          pKCbgpZmsif4Atdsl1uocjkYR9O5IAmxHC4Tq0Cw0ks=
Subject key identifier:   B6:69:E5:72:33:B7:AD:8F:AE:99:86:86:F6:E7:51:D7:11:BD:C2:1B
Certificate issuer:       /CN=64239825-d3e6-4b1f-a339-f73f2db89ee9
Certificate serial:       010D0C9F4328584AFEE69CDEAC90E1E1EB152A80
Authority key identifier: 89:8A:BE:E2:5A:C6:20:65:B0:9B:12:9A:09:45:2E:CB:6A:B9:AC:83
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/e3488355-5e85-3172-9bbe-d2e6da67a3f7.roa
Signing time:             Wed 27 Aug 2025 13:00:41 +0000
ROA not before:           Wed 27 Aug 2025 13:00:41 +0000
ROA not after:            Tue 25 Nov 2025 14:00:41 +0000
asID:                     398391
IP address blocks:        64.226.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/64239825-d3e6-4b1f-a339-f73f2db89ee9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/64239825-d3e6-4b1f-a339-f73f2db89ee9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 17 Sep 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:fe:e6:9c:de:ac:90:e1:e1:eb:15:2a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64239825-d3e6-4b1f-a339-f73f2db89ee9
        Validity
            Not Before: Aug 27 13:00:41 2025 GMT
            Not After : Nov 25 14:00:41 2025 GMT
        Subject: CN=202c55d6-427e-4b57-858d-b1e1239bf800
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:e3:a9:fb:83:3e:6a:31:9d:1e:a4:b7:de:e7:
                    4e:ee:af:8a:27:ae:e9:22:9d:32:2b:40:ed:3c:8d:
                    90:d7:65:9a:70:06:2c:06:a8:fd:15:60:0b:d2:59:
                    01:6f:dd:a5:3a:4f:b1:24:cb:5a:ca:7a:c2:1b:c8:
                    55:3c:fd:90:1f:4e:a8:46:65:43:4e:0b:79:0e:a1:
                    01:a4:a2:b9:bc:3b:0e:c2:6e:e7:1c:7e:ab:54:4e:
                    2b:67:b2:c8:d6:b1:f6:14:c2:b7:8d:20:9e:87:2c:
                    18:a8:04:db:8e:66:4c:0c:b2:84:ec:d2:ca:11:89:
                    8a:35:e7:a8:a4:d3:68:73:e7:81:84:79:4c:de:4b:
                    86:05:47:91:1a:ea:c5:59:0e:d6:f7:be:f0:ca:5c:
                    1d:32:d5:cf:15:b1:12:b1:53:0c:ce:e0:f8:f5:4c:
                    f0:da:3b:b2:39:0c:6c:65:ce:31:28:fe:80:ee:1e:
                    21:c1:fd:e0:0f:8c:69:de:8e:f7:0e:f0:56:c9:46:
                    1d:a8:3b:d4:98:43:c1:a4:55:64:ec:2b:36:dd:13:
                    0d:bd:4a:25:e6:1b:c6:17:47:eb:5b:f3:c3:72:df:
                    5e:bc:97:16:de:9a:b3:f3:5f:56:c1:a9:65:9d:3b:
                    29:25:02:31:ca:25:8e:7e:69:e2:ce:40:38:62:96:
                    4a:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:69:E5:72:33:B7:AD:8F:AE:99:86:86:F6:E7:51:D7:11:BD:C2:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/e3488355-5e85-3172-9bbe-d2e6da67a3f7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/64239825-d3e6-4b1f-a339-f73f2db89ee9.crl

            X509v3 Authority Key Identifier:
                keyid:89:8A:BE:E2:5A:C6:20:65:B0:9B:12:9A:09:45:2E:CB:6A:B9:AC:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.226.128.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:03:09:fc:f2:4e:d5:65:86:35:7c:b0:a9:46:00:ca:f8:95:
         c6:6e:a3:24:9f:14:b5:cb:c8:bb:37:af:dd:48:38:1b:2a:d7:
         dd:99:aa:aa:33:e0:55:cc:64:3c:cb:3e:d4:c9:21:ba:88:c2:
         6b:63:e8:5c:55:fc:02:00:04:44:02:7e:1f:d5:8a:fc:16:69:
         a9:be:c7:20:ff:7a:c0:46:94:8c:62:12:4b:e3:2a:f4:01:76:
         04:3f:e1:74:af:18:21:83:13:cf:3a:9a:45:21:91:5d:66:25:
         2e:a7:30:2c:87:45:9b:87:5d:6d:15:48:49:9a:62:eb:b2:58:
         b6:b1:47:f1:b0:c0:65:b4:64:45:51:a9:ee:3f:3f:4a:ae:e4:
         70:3f:76:71:ac:e0:7c:77:a2:9e:1c:ab:0a:02:1e:4d:47:c2:
         94:5e:41:27:97:20:24:5d:8c:69:33:1b:55:cb:7a:45:e3:4a:
         b1:65:ee:48:06:5e:65:38:a5:51:ed:c3:25:3a:9c:91:5c:f9:
         22:60:c3:88:81:b3:2d:59:de:0b:59:43:a7:6e:1e:aa:fa:0e:
         8a:1b:95:27:ad:c9:92:81:fb:49:3a:a9:63:24:75:45:e1:5c:
         3f:89:5e:09:b5:24:fe:f8:8c:63:01:28:8c:cb:0e:45:d3:e3:
         c0:7b:0e:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 15 20:11:49 2025 by rpki-client