Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344/532c4ae7-7fd2-3579-932f-4a78fd50c1b5.roa
File:                     532c4ae7-7fd2-3579-932f-4a78fd50c1b5.roa (raw, json)
Hash identifier:          9LbsxKzQ93cxBM7ye9U50UrPR+eoH0bBVo0mJYjWu88=
Subject key identifier:   EB:BA:1D:06:D4:F7:3B:55:76:45:C4:91:AA:AA:0E:15:5B:05:08:FF
Certificate issuer:       /CN=937a6fc8-35c3-4151-aa2e-2513420f9344
Certificate serial:       010D0C9F4328584CDDCCF58AF7DBD6605245C940
Authority key identifier: 6A:1F:E6:4E:1D:16:39:6D:86:6E:99:3B:A8:64:29:AE:C3:4E:FC:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344/532c4ae7-7fd2-3579-932f-4a78fd50c1b5.roa
Signing time:             Sun 15 Feb 2026 02:00:32 +0000
ROA not before:           Sun 15 Feb 2026 02:00:32 +0000
ROA not after:            Sat 16 May 2026 01:00:32 +0000
asID:                     13720
IP address blocks:        64.37.142.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344/937a6fc8-35c3-4151-aa2e-2513420f9344.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344/937a6fc8-35c3-4151-aa2e-2513420f9344.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 02 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:dd:cc:f5:8a:f7:db:d6:60:52:45:c9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=937a6fc8-35c3-4151-aa2e-2513420f9344
        Validity
            Not Before: Feb 15 02:00:32 2026 GMT
            Not After : May 16 01:00:32 2026 GMT
        Subject: CN=ae21effd-f9c6-4106-aa21-84f35f9f1ace
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:de:b4:12:e3:bb:b4:16:e3:0b:8b:12:30:d5:
                    ae:e5:e5:c0:ca:4d:80:12:1a:ff:21:34:e2:59:53:
                    64:21:7a:0b:3c:8e:12:61:4a:fe:c9:58:48:81:10:
                    5b:86:c1:c8:4d:03:a0:47:86:85:d3:06:c7:0e:02:
                    6e:f0:2c:f0:01:81:84:6b:bd:bc:b0:27:ad:b5:34:
                    87:62:4b:c3:9d:1b:0a:6c:44:42:74:36:49:9e:de:
                    9a:c0:94:94:26:ea:42:97:cc:97:5c:64:fe:b7:22:
                    c0:60:bc:f9:4e:dd:9e:97:64:50:59:28:ce:bd:e4:
                    62:75:62:0f:c3:1f:7a:f4:2b:6c:64:f7:51:63:6e:
                    f7:6f:ee:62:41:87:78:5a:c1:c4:0f:48:20:3f:d5:
                    1d:45:e6:49:d1:cb:c8:db:81:b1:aa:f6:37:bc:bf:
                    93:c7:79:dd:fb:96:ff:fa:90:88:d8:22:c8:e2:88:
                    49:1d:67:2c:b6:8b:4a:a6:9b:47:e4:5b:16:66:18:
                    99:06:35:a6:25:85:69:30:28:88:c6:d9:77:8b:9d:
                    32:03:c3:45:ea:18:1b:28:fc:61:18:ff:a2:73:16:
                    21:df:3c:12:73:92:7a:de:89:d2:10:89:60:9a:24:
                    49:c2:a0:2c:ea:d4:92:43:4f:c0:b1:e3:54:a5:de:
                    49:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:BA:1D:06:D4:F7:3B:55:76:45:C4:91:AA:AA:0E:15:5B:05:08:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344/532c4ae7-7fd2-3579-932f-4a78fd50c1b5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344/937a6fc8-35c3-4151-aa2e-2513420f9344.crl

            X509v3 Authority Key Identifier:
                keyid:6A:1F:E6:4E:1D:16:39:6D:86:6E:99:3B:A8:64:29:AE:C3:4E:FC:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.37.142.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:76:1f:0f:1f:eb:cc:7d:cd:e1:41:30:06:7b:bf:51:56:c2:
         65:e6:e0:e6:dd:00:9d:8b:08:59:db:f7:b3:21:2e:7f:92:0a:
         71:40:00:e8:38:93:4c:3b:b7:4d:0f:78:9f:36:70:a4:40:ea:
         6f:10:68:d8:c4:c6:c1:1f:3c:5a:16:9c:0a:1a:f9:ac:81:bf:
         03:7f:69:02:59:be:ba:fb:b7:42:02:44:60:de:3c:19:4c:2f:
         5d:89:04:c6:a8:10:fa:9b:83:5c:b3:16:0e:85:f6:fd:d9:bd:
         6d:e5:67:5c:0c:c0:03:0b:b5:3e:6a:d4:8b:08:a1:6a:6a:c2:
         fd:d1:06:d8:50:bc:e9:e6:b5:49:39:a7:2a:fe:5d:1f:f9:5c:
         63:3e:bc:58:c1:62:4f:e3:20:7c:54:15:06:1d:7a:05:b3:02:
         3b:98:33:6c:ab:35:bc:88:5f:d7:c9:91:8c:b0:aa:2c:43:32:
         74:3d:90:00:0a:a3:7d:f2:2e:17:4c:23:12:1d:bf:9f:9c:8a:
         ef:83:93:87:12:0f:d5:5e:64:68:39:34:8f:58:bd:66:f3:61:
         ee:7c:35:af:4d:36:65:41:2b:d6:ba:86:32:a2:7a:c2:55:b7:
         28:b9:94:dc:17:3e:7f:52:4b:3c:ae:91:86:61:d1:a5:ab:bb:
         87:e2:26:be
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzdzPWK99vWYFJFyUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTM3YTZmYzgtMzVjMy00MTUxLWFhMmUtMjUxMzQyMGY5
MzQ0MB4XDTI2MDIxNTAyMDAzMloXDTI2MDUxNjAxMDAzMlowLzEtMCsGA1UEAxMk
YWUyMWVmZmQtZjljNi00MTA2LWFhMjEtODRmMzVmOWYxYWNlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk960EuO7tBbjC4sSMNWu5eXAyk2AEhr/ITTi
WVNkIXoLPI4SYUr+yVhIgRBbhsHITQOgR4aF0wbHDgJu8CzwAYGEa728sCettTSH
YkvDnRsKbERCdDZJnt6awJSUJupCl8yXXGT+tyLAYLz5Tt2el2RQWSjOveRidWIP
wx969CtsZPdRY273b+5iQYd4WsHED0ggP9UdReZJ0cvI24GxqvY3vL+Tx3nd+5b/
+pCI2CLI4ohJHWcstotKpptH5FsWZhiZBjWmJYVpMCiIxtl3i50yA8NF6hgbKPxh
GP+icxYh3zwSc5J63onSEIlgmiRJwqAs6tSSQ0/AseNUpd5JeQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOu6HQbU9ztVdkXEkaqqDhVbBQj/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85Mzdh
NmZjOC0zNWMzLTQxNTEtYWEyZS0yNTEzNDIwZjkzNDQvNTMyYzRhZTctN2ZkMi0z
NTc5LTkzMmYtNGE3OGZkNTBjMWI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTM3YTZmYzgtMzVjMy00MTUxLWFh
MmUtMjUxMzQyMGY5MzQ0LzkzN2E2ZmM4LTM1YzMtNDE1MS1hYTJlLTI1MTM0MjBm
OTM0NC5jcmwwHwYDVR0jBBgwFoAUah/mTh0WOW2Gbpk7qGQprsNO/HgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MzdhNmZjOC0zNWMzLTQxNTEtYWEyZS0yNTEz
NDIwZjkzNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQCWOMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAd2Hw8f68x9zeFBMAZ7v1FWwmXm4ObdAJ2LCFnb97MhLn+SCnFAAOg4
k0w7t00PeJ82cKRA6m8QaNjExsEfPFoWnAoa+ayBvwN/aQJZvrr7t0ICRGDePBlM
L12JBMaoEPqbg1yzFg6F9v3ZvW3lZ1wMwAMLtT5q1IsIoWpqwv3RBthQvOnmtUk5
pyr+XR/5XGM+vFjBYk/jIHxUFQYdegWzAjuYM2yrNbyIX9fJkYywqixDMnQ9kAAK
o33yLhdMIxIdv5+ciu+Dk4cSD9VeZGg5NI9YvWbzYe58Na9NNmVBK9a6hjKiesJV
tyi5lNwXPn9SSzyukYZh0aWru4fiJr4=
-----END CERTIFICATE-----
Generated at Sun Mar 1 21:08:08 2026 by rpki-client