Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344/81c1e647-742c-3d46-b1e0-c851e4359fd4.roa
File:                     81c1e647-742c-3d46-b1e0-c851e4359fd4.roa (raw, json)
Hash identifier:          CrLyrGTyyZuP64zG2X1Bm8fwNPALNg1Ed9T4EoXrdsY=
Subject key identifier:   4E:CD:8A:52:FE:28:B8:F8:AA:0F:06:80:0F:18:1B:10:8D:BE:75:E7
Certificate issuer:       /CN=937a6fc8-35c3-4151-aa2e-2513420f9344
Certificate serial:       010D0C9F4328584AC8765B4621D9BE0AC8D5CF80
Authority key identifier: 6A:1F:E6:4E:1D:16:39:6D:86:6E:99:3B:A8:64:29:AE:C3:4E:FC:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344/81c1e647-742c-3d46-b1e0-c851e4359fd4.roa
Signing time:             Fri 08 Aug 2025 01:00:33 +0000
ROA not before:           Fri 08 Aug 2025 01:00:33 +0000
ROA not after:            Thu 06 Nov 2025 02:00:33 +0000
asID:                     13720
IP address blocks:        64.37.156.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344/937a6fc8-35c3-4151-aa2e-2513420f9344.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344/937a6fc8-35c3-4151-aa2e-2513420f9344.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 12 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c8:76:5b:46:21:d9:be:0a:c8:d5:cf:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=937a6fc8-35c3-4151-aa2e-2513420f9344
        Validity
            Not Before: Aug  8 01:00:33 2025 GMT
            Not After : Nov  6 02:00:33 2025 GMT
        Subject: CN=e7c386a7-3e2c-4d4e-a8fd-65b802b7a112
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:05:77:81:fd:07:d9:79:b9:88:8f:4e:c0:ef:
                    ef:84:3e:fc:ba:97:e6:06:c8:79:67:a7:3e:1e:58:
                    0b:d1:f6:d3:94:4d:76:f5:4f:f4:e9:38:d3:fe:ec:
                    ec:b0:f6:00:7f:29:0c:05:8d:28:05:9e:df:cf:73:
                    6d:65:3b:c3:de:b9:ae:24:87:0c:10:de:95:88:40:
                    96:f0:2b:ad:9d:e2:88:bb:64:5c:4e:b2:b9:dc:e1:
                    1c:92:7c:bc:b0:b4:8b:b6:98:55:e1:19:95:15:71:
                    af:52:2f:c7:d0:57:1c:17:db:55:e7:08:15:45:d0:
                    e4:e8:6c:27:7b:09:23:ee:20:52:5e:17:e5:54:83:
                    60:fa:cf:e7:f3:f1:ac:a7:f4:16:7c:a4:5f:ad:f0:
                    3e:37:5c:5c:94:4b:c6:1d:16:2e:b5:88:08:00:29:
                    2e:0d:07:40:e8:4c:8f:08:01:28:48:41:c3:94:99:
                    17:50:0f:35:f2:93:e2:bb:88:9b:40:53:61:06:1a:
                    91:41:2e:11:5b:cf:2d:34:5f:cd:67:7c:1d:b0:61:
                    00:bf:f5:10:32:b1:85:74:e3:f0:f9:4f:20:33:de:
                    a0:48:30:47:1c:d6:c6:c5:fb:53:19:95:1d:82:94:
                    2c:6e:b0:8f:25:94:ac:48:f2:43:c2:9f:85:44:d6:
                    f6:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:CD:8A:52:FE:28:B8:F8:AA:0F:06:80:0F:18:1B:10:8D:BE:75:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344/81c1e647-742c-3d46-b1e0-c851e4359fd4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344/937a6fc8-35c3-4151-aa2e-2513420f9344.crl

            X509v3 Authority Key Identifier:
                keyid:6A:1F:E6:4E:1D:16:39:6D:86:6E:99:3B:A8:64:29:AE:C3:4E:FC:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.37.156.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:fa:0a:23:d8:28:53:20:e2:e0:f2:05:75:35:78:f7:38:cd:
         90:cb:89:42:5d:aa:87:fa:2b:84:76:09:62:0e:b0:60:83:84:
         f7:29:05:cb:f0:51:ef:36:a7:d9:62:33:ff:c9:42:a2:9c:9e:
         79:0f:83:18:16:22:82:86:29:c7:97:13:c6:f8:fe:56:62:f5:
         9c:5c:a9:23:be:ec:f0:33:f6:a9:6e:d0:07:32:44:24:89:66:
         6e:28:ca:f0:ee:ca:17:c0:9b:64:02:ee:06:6d:84:a4:06:4a:
         82:e9:84:36:83:b9:03:18:f4:49:36:81:a5:43:29:9d:8b:ae:
         e8:e0:a2:ec:98:ef:68:26:71:29:86:8e:0d:91:9e:65:c5:0b:
         3c:68:00:ab:ed:62:48:c1:7a:55:a9:48:a4:40:d6:e9:30:ad:
         d7:59:8f:da:ba:5a:20:52:4d:67:75:5f:ee:87:03:d2:fc:e9:
         10:75:a9:85:9e:9b:ab:4b:5a:03:75:67:9f:3c:3e:35:6a:e1:
         ee:5f:e6:aa:7f:93:15:0b:c4:4f:14:2c:9b:58:d4:e9:7c:ba:
         8e:03:49:97:11:91:d8:4a:56:d5:7a:f3:e1:32:4d:33:40:8f:
         b4:1d:16:82:40:86:db:69:d4:6b:ad:db:73:d7:1b:2e:5c:68:
         06:16:65:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 07:24:46 2025 by rpki-client