Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/c5b2c891-c3a5-33c7-a12a-1cbe328dcf1f.roa
File:                     c5b2c891-c3a5-33c7-a12a-1cbe328dcf1f.roa (raw, json)
Hash identifier:          vQjttsNNwoYBV0W7VGJKTuWLc7FmE5alAhRfVQNl/0s=
Subject key identifier:   A3:91:DA:2C:EA:16:D9:D2:B3:17:90:78:B9:30:67:C7:DA:5D:BC:3A
Certificate issuer:       /CN=64239825-d3e6-4b1f-a339-f73f2db89ee9
Certificate serial:       010D0C9F43285849E225353664B7759446CBE080
Authority key identifier: 89:8A:BE:E2:5A:C6:20:65:B0:9B:12:9A:09:45:2E:CB:6A:B9:AC:83
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/c5b2c891-c3a5-33c7-a12a-1cbe328dcf1f.roa
Signing time:             Sat 17 May 2025 13:01:02 +0000
ROA not before:           Sat 17 May 2025 13:01:02 +0000
ROA not after:            Fri 15 Aug 2025 13:01:02 +0000
asID:                     398391
IP address blocks:        64.226.141.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/64239825-d3e6-4b1f-a339-f73f2db89ee9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/64239825-d3e6-4b1f-a339-f73f2db89ee9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e2:25:35:36:64:b7:75:94:46:cb:e0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64239825-d3e6-4b1f-a339-f73f2db89ee9
        Validity
            Not Before: May 17 13:01:02 2025 GMT
            Not After : Aug 15 13:01:02 2025 GMT
        Subject: CN=7c6a4a6f-c368-442b-8a6c-8cfe8b8c8724
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:ea:57:4c:88:bd:01:fe:e7:0f:51:d6:8e:80:
                    b8:f8:c1:88:38:7c:62:30:05:09:5f:cc:95:91:41:
                    01:10:b4:f6:cd:f5:cc:a1:30:7d:5b:11:80:78:94:
                    0a:79:c9:41:14:34:65:3d:4b:48:7e:5c:40:2b:0c:
                    16:27:bc:24:74:88:c1:de:1d:08:14:45:71:7b:a9:
                    91:3e:95:25:bc:74:4d:00:9a:cf:0d:ab:e7:cd:f1:
                    f2:14:e0:ac:ed:9d:e0:3c:7a:ca:83:df:21:32:fc:
                    0f:08:1f:00:19:cb:bc:51:f4:23:74:e5:b6:fb:02:
                    52:6d:e0:5d:9a:9a:96:36:9a:0c:82:ac:67:a3:da:
                    bf:ea:93:43:4c:d8:47:b4:ed:b8:54:7d:6d:8b:45:
                    34:c4:85:8b:b6:c2:e8:d2:d1:b3:ff:28:8d:69:51:
                    ed:4b:cd:31:85:ad:54:fa:66:14:84:cc:9c:b6:cb:
                    b1:0a:31:73:9f:36:9b:25:50:ba:8a:c0:a3:cc:e5:
                    25:fe:c9:81:df:6f:f0:35:ca:68:5e:fa:6f:03:24:
                    81:11:da:cd:1c:fa:68:1e:78:9c:14:62:e5:2f:19:
                    c4:ed:b4:9c:6a:23:f3:f4:57:9e:08:35:c0:e8:74:
                    2d:23:71:cd:b1:d6:e5:80:40:88:53:93:af:88:c9:
                    6e:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:91:DA:2C:EA:16:D9:D2:B3:17:90:78:B9:30:67:C7:DA:5D:BC:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/c5b2c891-c3a5-33c7-a12a-1cbe328dcf1f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/64239825-d3e6-4b1f-a339-f73f2db89ee9.crl

            X509v3 Authority Key Identifier:
                keyid:89:8A:BE:E2:5A:C6:20:65:B0:9B:12:9A:09:45:2E:CB:6A:B9:AC:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.226.141.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:2e:f2:fe:bc:3e:4e:b0:fd:e0:43:80:88:8f:da:49:a4:55:
         4c:8c:df:2b:57:42:ca:13:a4:5a:db:31:b6:40:22:01:97:33:
         a2:89:9e:08:fd:64:dc:58:6c:84:e8:88:a6:c0:2d:46:74:e8:
         84:69:6e:e1:da:c7:9c:25:27:27:c7:a5:81:72:a8:e9:fd:93:
         9f:38:f2:9d:41:ce:e5:1f:a4:37:ec:12:30:f8:6d:5f:59:5d:
         0e:15:3e:5d:47:a9:98:d7:7e:0d:ac:ae:bd:66:8a:8a:2e:a2:
         c4:6f:87:65:db:e2:be:f7:8a:87:2f:db:05:c0:62:60:cb:92:
         1c:72:a5:1f:dd:ca:86:fb:da:b7:c2:36:5e:a6:24:56:52:5a:
         fc:ed:1a:b2:2b:fe:ac:a0:f5:82:9d:48:19:04:0b:bd:8c:7e:
         09:63:9a:fd:d3:4a:b0:d0:0c:ba:82:8d:0e:13:7d:91:bd:1f:
         da:b1:fe:96:2a:8d:4d:a3:b0:30:4c:a9:2b:94:98:e3:14:5b:
         cf:6a:89:8e:a5:88:95:ba:e8:c4:23:ba:50:ea:38:b6:ff:9a:
         88:a2:5b:73:14:ba:68:d6:94:43:dd:cd:5a:42:32:0b:0b:09:
         b7:94:8f:56:4c:0e:d0:9c:22:79:99:aa:a4:6e:3f:39:77:b6:
         ea:83:5a:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 05:10:13 2025 by rpki-client