Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344/5df22d90-5434-39ee-941b-af6b3939d358.roa
File:                     5df22d90-5434-39ee-941b-af6b3939d358.roa (raw, json)
Hash identifier:          NhzZfeTGFa+Y5L/rqUNG3/4OJCoyFdL5cJG1RuPexCc=
Subject key identifier:   07:FE:17:05:08:7E:93:9F:60:1C:AA:73:0E:26:55:EE:42:2D:4B:40
Certificate issuer:       /CN=937a6fc8-35c3-4151-aa2e-2513420f9344
Certificate serial:       010D0C9F4328584E9EAFEA5848F95EBD2C732400
Authority key identifier: 6A:1F:E6:4E:1D:16:39:6D:86:6E:99:3B:A8:64:29:AE:C3:4E:FC:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344/5df22d90-5434-39ee-941b-af6b3939d358.roa
Signing time:             Sat 25 Jul 2026 21:00:12 +0000
ROA not before:           Sat 25 Jul 2026 21:00:12 +0000
ROA not after:            Fri 23 Oct 2026 21:00:12 +0000
asID:                     13720
IP address blocks:        64.37.149.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344/937a6fc8-35c3-4151-aa2e-2513420f9344.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344/937a6fc8-35c3-4151-aa2e-2513420f9344.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9e:af:ea:58:48:f9:5e:bd:2c:73:24:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=937a6fc8-35c3-4151-aa2e-2513420f9344
        Validity
            Not Before: Jul 25 21:00:12 2026 GMT
            Not After : Oct 23 21:00:12 2026 GMT
        Subject: CN=bc635081-b1b9-4045-9dbd-ec98abd66e85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:bb:90:e6:38:52:a3:d1:57:da:63:13:a9:9e:
                    51:cb:ef:08:f1:ae:a7:29:5b:b5:ee:4b:db:2e:58:
                    08:04:a0:84:b6:02:81:76:59:e9:f9:e0:da:fc:c0:
                    6a:e2:20:2d:b1:52:16:14:4c:da:6a:05:f0:2a:c3:
                    8a:52:44:86:a1:31:d7:ac:3b:01:85:ed:44:2f:67:
                    d0:8c:44:87:40:23:63:c5:73:c7:fc:0e:ee:72:15:
                    a7:94:90:fe:c0:e8:ef:f6:7f:0b:8e:72:7b:74:0e:
                    7c:9c:13:45:e0:b0:08:82:6c:bf:b7:95:5b:4e:8e:
                    73:fc:58:9f:21:74:68:ed:53:42:40:5f:de:82:fc:
                    0d:27:ae:96:cb:28:95:24:3e:b5:2a:46:e6:b4:af:
                    4e:25:e0:bc:71:50:2b:ca:0a:ef:70:cb:58:c0:15:
                    e8:49:2c:be:8c:26:5e:52:e0:36:ea:7d:16:26:6f:
                    1f:d8:a7:7f:74:a6:aa:7a:98:ed:59:a8:e1:30:3c:
                    a5:7e:3e:ef:b9:bc:5a:6b:4f:88:46:f1:a1:0f:f3:
                    ba:1f:4c:c6:1a:b2:a7:92:68:02:e5:e9:9e:5d:f4:
                    bd:d0:63:fc:2e:fc:1b:58:fa:46:31:52:0d:6c:34:
                    0b:80:83:41:c6:54:0a:6a:8d:ff:a2:06:ac:1b:9d:
                    5b:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:FE:17:05:08:7E:93:9F:60:1C:AA:73:0E:26:55:EE:42:2D:4B:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344/5df22d90-5434-39ee-941b-af6b3939d358.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344/937a6fc8-35c3-4151-aa2e-2513420f9344.crl

            X509v3 Authority Key Identifier:
                keyid:6A:1F:E6:4E:1D:16:39:6D:86:6E:99:3B:A8:64:29:AE:C3:4E:FC:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.37.149.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:94:a1:a6:54:83:eb:79:9b:cd:4c:bb:64:06:c6:d5:51:49:
         0c:43:cf:90:35:7e:3b:e9:af:86:7c:04:cf:3a:7a:72:e5:91:
         10:43:74:b8:ab:fa:6e:fc:e2:d5:23:1e:05:00:00:21:bc:dc:
         7f:8d:aa:94:50:c3:d5:9b:94:48:10:22:84:26:25:dd:23:fc:
         c4:3f:d0:79:5f:8d:99:1a:28:18:4e:bd:70:62:51:bf:da:a8:
         cc:d9:23:e1:c5:6e:0b:16:06:6c:f9:3a:1f:53:38:d3:37:82:
         62:e0:02:4c:2b:f7:e4:ed:82:dd:06:9a:12:f3:f8:44:ea:98:
         8a:02:6c:3a:86:72:fa:9e:84:42:3e:27:26:c3:8e:78:8e:ff:
         a9:a9:a0:a3:bb:e3:d9:4e:40:7c:4b:c5:95:8a:3f:6e:0d:d7:
         bd:6a:56:a1:5f:b4:9f:1d:f1:15:ef:64:8e:20:b5:87:2d:d1:
         0d:78:81:7d:64:2e:1a:66:de:bc:a8:27:9c:6c:6f:6b:8e:89:
         ea:4a:71:c9:38:fe:d6:df:1c:10:15:18:8b:59:ff:5a:1b:85:
         ac:97:c4:f8:dc:3e:1a:32:99:75:72:7c:3b:51:2f:2a:27:be:
         77:9a:99:b0:11:de:83:f9:8d:4a:fe:0f:67:54:51:d5:d6:0f:
         2d:21:4a:93
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6er+pYSPlevSxzJAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTM3YTZmYzgtMzVjMy00MTUxLWFhMmUtMjUxMzQyMGY5
MzQ0MB4XDTI2MDcyNTIxMDAxMloXDTI2MTAyMzIxMDAxMlowLzEtMCsGA1UEAxMk
YmM2MzUwODEtYjFiOS00MDQ1LTlkYmQtZWM5OGFiZDY2ZTg1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgruQ5jhSo9FX2mMTqZ5Ry+8I8a6nKVu17kvb
LlgIBKCEtgKBdlnp+eDa/MBq4iAtsVIWFEzaagXwKsOKUkSGoTHXrDsBhe1EL2fQ
jESHQCNjxXPH/A7uchWnlJD+wOjv9n8LjnJ7dA58nBNF4LAIgmy/t5VbTo5z/Fif
IXRo7VNCQF/egvwNJ66WyyiVJD61KkbmtK9OJeC8cVArygrvcMtYwBXoSSy+jCZe
UuA26n0WJm8f2Kd/dKaqepjtWajhMDylfj7vubxaa0+IRvGhD/O6H0zGGrKnkmgC
5emeXfS90GP8LvwbWPpGMVINbDQLgINBxlQKao3/ogasG51b2wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAf+FwUIfpOfYByqcw4mVe5CLUtAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85Mzdh
NmZjOC0zNWMzLTQxNTEtYWEyZS0yNTEzNDIwZjkzNDQvNWRmMjJkOTAtNTQzNC0z
OWVlLTk0MWItYWY2YjM5MzlkMzU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTM3YTZmYzgtMzVjMy00MTUxLWFh
MmUtMjUxMzQyMGY5MzQ0LzkzN2E2ZmM4LTM1YzMtNDE1MS1hYTJlLTI1MTM0MjBm
OTM0NC5jcmwwHwYDVR0jBBgwFoAUah/mTh0WOW2Gbpk7qGQprsNO/HgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MzdhNmZjOC0zNWMzLTQxNTEtYWEyZS0yNTEz
NDIwZjkzNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQCWVMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADaUoaZUg+t5m81Mu2QGxtVRSQxDz5A1fjvpr4Z8BM86enLlkRBDdLir
+m784tUjHgUAACG83H+NqpRQw9WblEgQIoQmJd0j/MQ/0HlfjZkaKBhOvXBiUb/a
qMzZI+HFbgsWBmz5Oh9TONM3gmLgAkwr9+Ttgt0GmhLz+ETqmIoCbDqGcvqehEI+
JybDjniO/6mpoKO749lOQHxLxZWKP24N171qVqFftJ8d8RXvZI4gtYct0Q14gX1k
Lhpm3ryoJ5xsb2uOiepKcck4/tbfHBAVGItZ/1obhayXxPjcPhoymXVyfDtRLyon
vneambAR3oP5jUr+D2dUUdXWDy0hSpM=
-----END CERTIFICATE-----
Generated at Wed Jul 29 09:53:24 2026 by rpki-client