Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/41dd7ad1-c378-3b0f-9d3f-6e1407f6fd84.roa
File:                     41dd7ad1-c378-3b0f-9d3f-6e1407f6fd84.roa (raw, json)
Hash identifier:          ZCL1LIuDIPrVS/PKJn1C3svKMiddiDnq/SQ+v9RJiP0=
Subject key identifier:   6E:1B:C3:BB:F8:88:C3:FC:CB:6D:16:F7:F8:B0:7D:1A:6F:3F:2D:9C
Certificate issuer:       /CN=64239825-d3e6-4b1f-a339-f73f2db89ee9
Certificate serial:       010D0C9F4328584B76F2A286B64DFB71F0CDD100
Authority key identifier: 89:8A:BE:E2:5A:C6:20:65:B0:9B:12:9A:09:45:2E:CB:6A:B9:AC:83
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/41dd7ad1-c378-3b0f-9d3f-6e1407f6fd84.roa
Signing time:             Thu 09 Oct 2025 13:00:38 +0000
ROA not before:           Thu 09 Oct 2025 13:00:38 +0000
ROA not after:            Wed 07 Jan 2026 14:00:38 +0000
asID:                     398391
IP address blocks:        64.227.202.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/64239825-d3e6-4b1f-a339-f73f2db89ee9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/64239825-d3e6-4b1f-a339-f73f2db89ee9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:76:f2:a2:86:b6:4d:fb:71:f0:cd:d1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64239825-d3e6-4b1f-a339-f73f2db89ee9
        Validity
            Not Before: Oct  9 13:00:38 2025 GMT
            Not After : Jan  7 14:00:38 2026 GMT
        Subject: CN=75dac1df-4b6d-47c1-b62a-3cc73dd15ac8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:17:f6:c9:9b:b7:6a:da:e7:05:09:03:72:63:
                    68:4a:3a:ac:9e:94:2f:6d:92:98:93:17:83:e6:e6:
                    c3:30:8f:89:19:d6:c1:7e:72:98:ef:5c:ee:0f:24:
                    41:02:86:a7:7f:ef:f3:99:f6:33:5a:14:38:41:96:
                    6f:19:7b:3d:ec:7c:70:c8:e6:9e:74:c0:d4:f0:62:
                    87:d8:2a:23:fd:d2:5d:67:dc:ed:f5:17:f7:0d:47:
                    1f:17:2d:db:51:b8:77:14:46:5c:2e:6c:80:05:a8:
                    77:a5:2e:0e:96:1d:fe:a0:3e:e7:61:21:ab:86:0e:
                    43:e1:a7:ef:84:d0:3c:de:18:37:e6:0d:bb:10:0d:
                    01:e1:0a:a6:8d:fa:b8:05:70:d5:87:56:9f:13:b6:
                    d4:bf:f3:6d:45:53:6e:2d:c0:01:c0:26:af:74:a8:
                    5f:a8:f3:74:ee:d7:dc:d9:b3:9c:94:0f:50:ef:40:
                    43:45:8c:24:2a:7e:cf:2e:e9:38:8f:14:9c:b5:da:
                    0a:c6:82:78:ca:28:a7:c0:65:cd:8e:6b:cf:c1:88:
                    96:ce:4e:35:54:75:9a:11:a9:e4:a1:8e:8d:cd:0d:
                    f8:58:13:16:74:7a:07:d9:cc:f9:01:df:5a:0d:8e:
                    49:ce:de:90:ad:29:76:15:7b:57:99:98:f5:07:8f:
                    3b:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:1B:C3:BB:F8:88:C3:FC:CB:6D:16:F7:F8:B0:7D:1A:6F:3F:2D:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/41dd7ad1-c378-3b0f-9d3f-6e1407f6fd84.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/64239825-d3e6-4b1f-a339-f73f2db89ee9.crl

            X509v3 Authority Key Identifier:
                keyid:89:8A:BE:E2:5A:C6:20:65:B0:9B:12:9A:09:45:2E:CB:6A:B9:AC:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.227.202.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:9e:05:10:64:49:38:d6:a0:18:c5:a9:a7:10:d3:aa:40:cf:
         51:ac:80:48:f6:55:6f:42:62:ee:c3:7a:b0:d9:bd:37:03:cc:
         67:9e:07:64:6f:00:d3:29:bc:a7:a3:12:16:cb:0f:e4:01:55:
         69:12:a0:5b:62:ee:eb:05:ea:2e:5d:aa:b8:fc:c3:f7:0f:ca:
         c8:89:9b:3a:1d:2d:be:ef:81:7e:0c:e4:21:7d:b8:6c:f9:e5:
         e9:ef:6d:0b:70:43:19:ed:38:72:80:6a:82:20:6f:2e:c4:93:
         bc:09:2a:46:59:8e:ec:c2:32:65:87:b7:dc:b5:f9:a9:ee:14:
         c2:8b:c9:2a:80:73:f0:92:58:02:74:f8:4f:73:86:89:63:77:
         2e:36:32:a9:1e:4a:e6:df:5c:b5:fc:ed:bf:ea:d4:b2:09:0b:
         03:9e:cf:5a:57:ff:f5:68:f1:06:a6:bb:ac:bd:30:04:08:3d:
         03:bd:60:0a:77:58:4d:39:cb:3e:41:0a:3a:b5:c2:12:48:39:
         2c:61:57:3e:40:6b:f3:58:f9:b3:0a:67:ab:7b:d6:dc:bf:f0:
         7c:c7:9f:0c:ab:2b:ae:a2:5a:f7:1e:9d:11:7f:a8:4b:67:9b:
         48:fc:a8:85:a1:d6:20:a3:40:59:9e:4f:8c:d7:28:df:c6:fa:
         cb:05:51:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:32:10 2025 by rpki-client