Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/4db4586b-e2bb-3bc0-a751-372986c4f9f1.roa
File:                     4db4586b-e2bb-3bc0-a751-372986c4f9f1.roa (raw, json)
Hash identifier:          b7PByoTSNf8/Bu5O3xCuldzV7h4fp8G1C1CBfE1REog=
Subject key identifier:   4C:9B:D2:77:BE:30:2C:1D:01:3D:CC:2C:2C:60:B6:FF:32:0F:2F:45
Certificate issuer:       /CN=64239825-d3e6-4b1f-a339-f73f2db89ee9
Certificate serial:       010D0C9F4328584A374AC4404074A686ABCB1400
Authority key identifier: 89:8A:BE:E2:5A:C6:20:65:B0:9B:12:9A:09:45:2E:CB:6A:B9:AC:83
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/4db4586b-e2bb-3bc0-a751-372986c4f9f1.roa
Signing time:             Tue 17 Jun 2025 01:00:48 +0000
ROA not before:           Tue 17 Jun 2025 01:00:48 +0000
ROA not after:            Mon 15 Sep 2025 01:00:48 +0000
asID:                     398391
IP address blocks:        64.226.131.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/64239825-d3e6-4b1f-a339-f73f2db89ee9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/64239825-d3e6-4b1f-a339-f73f2db89ee9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:37:4a:c4:40:40:74:a6:86:ab:cb:14:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64239825-d3e6-4b1f-a339-f73f2db89ee9
        Validity
            Not Before: Jun 17 01:00:48 2025 GMT
            Not After : Sep 15 01:00:48 2025 GMT
        Subject: CN=2a01a85d-7662-4e6c-913b-68024d59340c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:55:0c:b5:49:c2:6a:c9:77:74:9e:3f:61:10:
                    82:fd:9c:a8:d7:63:2b:47:6d:cc:67:5a:f3:b5:a9:
                    a3:15:f6:d5:36:63:bb:74:17:b1:9d:98:e1:c8:f6:
                    bc:69:fd:de:92:f8:08:82:1c:a6:db:ce:a4:8f:58:
                    a6:6a:c2:98:de:9b:14:07:b1:77:21:d7:68:58:bc:
                    64:ef:03:0e:53:87:08:41:6c:f4:cc:09:ac:16:1f:
                    d2:7e:2e:9b:58:ea:f1:b0:33:71:3d:20:72:68:97:
                    9e:8a:38:18:32:bd:ee:46:1a:a5:fc:48:2a:c3:e1:
                    a6:5f:68:6d:77:a6:78:a5:9a:c3:60:ab:10:d5:63:
                    79:c4:66:52:f0:f2:84:8c:5d:40:4c:50:18:43:b6:
                    f0:8d:0a:32:b1:9d:b0:c6:03:33:be:e1:25:eb:6e:
                    a8:9e:9a:e3:12:3e:54:54:8e:04:00:1a:4d:f2:2e:
                    77:8f:8a:76:c7:bb:49:a9:86:a0:26:be:70:a1:a2:
                    23:19:4d:96:49:ff:8a:34:d8:9c:d8:fe:48:8b:e1:
                    ca:b8:24:59:b8:72:67:d0:e9:e3:e2:9a:1c:f8:cd:
                    0e:62:ee:42:0b:58:76:d9:04:a1:c7:a1:b3:8c:bf:
                    61:c4:9a:68:d0:49:1b:af:3e:4b:3a:0f:07:b8:25:
                    10:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:9B:D2:77:BE:30:2C:1D:01:3D:CC:2C:2C:60:B6:FF:32:0F:2F:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/4db4586b-e2bb-3bc0-a751-372986c4f9f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/64239825-d3e6-4b1f-a339-f73f2db89ee9.crl

            X509v3 Authority Key Identifier:
                keyid:89:8A:BE:E2:5A:C6:20:65:B0:9B:12:9A:09:45:2E:CB:6A:B9:AC:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.226.131.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:e0:8e:6d:e4:5e:00:b5:0f:1e:dd:73:21:c2:2b:26:e7:97:
         ca:8a:18:21:10:66:9d:68:83:58:ec:db:69:6c:61:24:b4:6c:
         ce:7d:29:2b:70:4e:66:b9:71:cd:71:be:e8:91:20:21:17:af:
         33:dd:0f:5f:65:e1:55:2e:de:47:c6:71:ed:93:6a:21:72:5a:
         71:b9:99:89:4d:f2:04:b8:45:13:f4:83:56:be:3a:dc:3c:d8:
         5f:b6:49:9f:fe:81:a9:3a:83:95:6a:d9:e8:9e:6d:4d:fe:40:
         8b:eb:c6:b5:98:cd:dc:b4:1b:2a:0a:90:a0:25:7f:28:12:d1:
         19:a2:6b:dd:5a:0e:39:9b:db:9d:bb:0e:84:d7:15:33:4a:b7:
         8b:d1:20:7c:ba:0f:ec:a6:0d:d9:13:57:3a:17:6b:da:de:f7:
         1a:c3:a5:32:5b:9a:5b:c2:b8:17:d8:81:da:ce:76:f6:04:07:
         62:9b:fd:a6:13:6e:43:14:1d:36:aa:a1:98:cd:f5:d1:87:07:
         16:d0:43:a1:a4:05:7d:c4:90:b9:5f:2d:cc:63:ee:c4:24:8e:
         00:92:46:11:19:57:11:fd:85:1e:7f:29:b3:ab:29:13:21:46:
         f8:8f:9a:a4:20:d6:78:40:4b:23:fd:04:8f:96:bd:17:a0:4c:
         90:48:47:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 16:21:47 2025 by rpki-client