Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/3a630baa-a308-3edf-82c8-85361cf7f752.roa
File:                     3a630baa-a308-3edf-82c8-85361cf7f752.roa (raw, json)
Hash identifier:          gfvAgLEURKxGhDMWBuFT3M7O/STX+yhKYYPrk0WbSxY=
Subject key identifier:   6F:F0:FB:A4:43:D9:A7:7B:2A:7B:5A:96:88:59:2C:A1:09:2E:32:B1
Certificate issuer:       /CN=64239825-d3e6-4b1f-a339-f73f2db89ee9
Certificate serial:       010D0C9F4328584B5571E2D46A2C15D5F2672300
Authority key identifier: 89:8A:BE:E2:5A:C6:20:65:B0:9B:12:9A:09:45:2E:CB:6A:B9:AC:83
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/3a630baa-a308-3edf-82c8-85361cf7f752.roa
Signing time:             Sat 27 Sep 2025 13:00:41 +0000
ROA not before:           Sat 27 Sep 2025 13:00:41 +0000
ROA not after:            Fri 26 Dec 2025 14:00:41 +0000
asID:                     398391
IP address blocks:        64.226.140.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/64239825-d3e6-4b1f-a339-f73f2db89ee9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/64239825-d3e6-4b1f-a339-f73f2db89ee9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:55:71:e2:d4:6a:2c:15:d5:f2:67:23:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64239825-d3e6-4b1f-a339-f73f2db89ee9
        Validity
            Not Before: Sep 27 13:00:41 2025 GMT
            Not After : Dec 26 14:00:41 2025 GMT
        Subject: CN=9bc80db0-7454-4882-8267-8196bf21d0bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:af:36:9a:e6:06:64:b5:01:a7:c3:12:bc:99:
                    c1:3c:52:b8:77:6c:30:e8:b6:89:49:99:a7:e1:76:
                    17:4f:84:7f:48:a1:23:6f:a5:ed:f0:c5:c1:57:3d:
                    6c:18:ca:cc:88:a5:5e:69:c4:88:e7:ca:d9:12:ee:
                    d2:2f:d5:20:3f:f4:9c:45:15:5b:14:1e:0a:08:21:
                    66:89:02:da:18:55:dd:92:8c:06:e6:f9:a9:70:5b:
                    7f:e8:ce:70:34:80:8a:39:7a:d7:e1:aa:a2:24:11:
                    23:6e:f5:b9:97:8a:8c:ec:9b:a8:2c:f6:35:56:41:
                    52:9d:db:ec:c6:f8:a8:37:4a:43:4b:c5:41:b6:15:
                    db:43:b3:d3:11:ce:1e:83:6c:01:c9:32:50:d9:0b:
                    f7:e3:b5:c5:c9:dd:a7:c1:3c:7c:24:22:42:16:3e:
                    5b:62:1d:f4:a9:e1:8d:15:91:1a:61:e5:16:a9:bb:
                    2b:be:89:17:1e:d2:4c:49:d9:bb:d0:92:94:82:b3:
                    8c:34:4f:ed:59:e4:6b:02:41:32:7e:a9:01:14:a2:
                    28:87:1a:04:99:0b:da:f9:05:fb:da:96:64:6c:c4:
                    45:0b:d9:cc:49:ba:b1:e5:65:ed:16:0b:d6:93:03:
                    d5:c7:64:2f:62:9c:8b:b8:5c:98:86:6a:48:ee:1e:
                    5b:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:F0:FB:A4:43:D9:A7:7B:2A:7B:5A:96:88:59:2C:A1:09:2E:32:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/3a630baa-a308-3edf-82c8-85361cf7f752.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/64239825-d3e6-4b1f-a339-f73f2db89ee9.crl

            X509v3 Authority Key Identifier:
                keyid:89:8A:BE:E2:5A:C6:20:65:B0:9B:12:9A:09:45:2E:CB:6A:B9:AC:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.226.140.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:d7:53:07:42:61:22:34:f3:be:6e:f4:9b:51:bf:aa:c0:cb:
         df:e0:8d:21:0b:0e:0a:03:09:f4:5d:3f:43:79:18:14:f8:96:
         de:5a:db:84:0c:60:72:a1:6c:04:20:ce:b4:0b:10:1f:ac:7b:
         6f:2d:75:e5:43:e0:f1:6f:f9:03:09:e2:14:81:c6:a8:8c:08:
         95:f6:16:22:ae:90:6b:16:4a:b1:76:94:0b:f6:ec:3d:6b:24:
         ff:fc:90:24:37:7c:03:ae:3f:5c:f8:9d:f3:aa:ac:5a:fa:47:
         aa:da:93:30:e2:2f:b5:b5:fd:16:b4:15:51:85:ae:a9:49:95:
         40:18:6a:b5:d4:e0:af:95:22:ad:6a:03:0b:25:2a:b5:68:46:
         6b:bd:ad:67:79:0e:93:52:98:f5:25:36:19:e2:9d:2a:23:7f:
         94:56:56:ac:45:3f:47:a8:a4:92:ee:b9:3f:59:c9:a4:6e:1a:
         3a:b4:50:b2:42:19:ce:63:ed:49:ab:1f:20:ca:cf:f8:72:15:
         e2:9f:85:04:1c:dd:fa:0a:d5:9c:05:55:b6:44:a7:da:5a:e1:
         53:4a:3c:e1:96:0b:fb:d6:3b:79:17:d1:eb:0f:a8:ec:06:50:
         e8:8f:85:2e:c8:19:33:85:94:c5:bc:f8:f0:8f:c8:2c:22:f8:
         c8:5f:17:39
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtVceLUaiwV1fJnIwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjQyMzk4MjUtZDNlNi00YjFmLWEzMzktZjczZjJkYjg5
ZWU5MB4XDTI1MDkyNzEzMDA0MVoXDTI1MTIyNjE0MDA0MVowLzEtMCsGA1UEAxMk
OWJjODBkYjAtNzQ1NC00ODgyLTgyNjctODE5NmJmMjFkMGJkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvK82muYGZLUBp8MSvJnBPFK4d2ww6LaJSZmn
4XYXT4R/SKEjb6Xt8MXBVz1sGMrMiKVeacSI58rZEu7SL9UgP/ScRRVbFB4KCCFm
iQLaGFXdkowG5vmpcFt/6M5wNICKOXrX4aqiJBEjbvW5l4qM7JuoLPY1VkFSndvs
xvioN0pDS8VBthXbQ7PTEc4eg2wByTJQ2Qv347XFyd2nwTx8JCJCFj5bYh30qeGN
FZEaYeUWqbsrvokXHtJMSdm70JKUgrOMNE/tWeRrAkEyfqkBFKIohxoEmQva+QX7
2pZkbMRFC9nMSbqx5WXtFgvWkwPVx2QvYpyLuFyYhmpI7h5bbwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFG/w+6RD2ad7KntalohZLKEJLjKxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC82NDIz
OTgyNS1kM2U2LTRiMWYtYTMzOS1mNzNmMmRiODllZTkvM2E2MzBiYWEtYTMwOC0z
ZWRmLTgyYzgtODUzNjFjZjdmNzUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNjQyMzk4MjUtZDNlNi00YjFmLWEz
MzktZjczZjJkYjg5ZWU5LzY0MjM5ODI1LWQzZTYtNGIxZi1hMzM5LWY3M2YyZGI4
OWVlOS5jcmwwHwYDVR0jBBgwFoAUiYq+4lrGIGWwmxKaCUUuy2q5rIMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC82NDIzOTgyNS1kM2U2LTRiMWYtYTMzOS1mNzNm
MmRiODllZTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQOKMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGXXUwdCYSI0875u9JtRv6rAy9/gjSELDgoDCfRdP0N5GBT4lt5a24QM
YHKhbAQgzrQLEB+se28tdeVD4PFv+QMJ4hSBxqiMCJX2FiKukGsWSrF2lAv27D1r
JP/8kCQ3fAOuP1z4nfOqrFr6R6rakzDiL7W1/Ra0FVGFrqlJlUAYarXU4K+VIq1q
AwslKrVoRmu9rWd5DpNSmPUlNhninSojf5RWVqxFP0eopJLuuT9ZyaRuGjq0ULJC
Gc5j7UmrHyDKz/hyFeKfhQQc3foK1ZwFVbZEp9pa4VNKPOGWC/vWO3kX0esPqOwG
UOiPhS7IGTOFlMW8+PCPyCwi+MhfFzk=
-----END CERTIFICATE-----
Generated at Mon Oct 20 07:04:54 2025 by rpki-client