Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344/a52310bc-2905-3c4b-8a75-15bf5b5a61e4.roa
File:                     a52310bc-2905-3c4b-8a75-15bf5b5a61e4.roa (raw, json)
Hash identifier:          KRL/dtb+CEB0Swf/x2oPlcwrra4nyCwGg7LJL8o2SBI=
Subject key identifier:   8F:CA:F3:25:A5:30:0E:D0:44:5C:10:5B:22:7E:61:CB:2E:24:59:14
Certificate issuer:       /CN=937a6fc8-35c3-4151-aa2e-2513420f9344
Certificate serial:       010D0C9F4328584AC8765ACCA8CBFE33B030D2E0
Authority key identifier: 6A:1F:E6:4E:1D:16:39:6D:86:6E:99:3B:A8:64:29:AE:C3:4E:FC:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344/a52310bc-2905-3c4b-8a75-15bf5b5a61e4.roa
Signing time:             Fri 08 Aug 2025 01:00:33 +0000
ROA not before:           Fri 08 Aug 2025 01:00:33 +0000
ROA not after:            Thu 06 Nov 2025 02:00:33 +0000
asID:                     13720
IP address blocks:        64.37.152.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344/937a6fc8-35c3-4151-aa2e-2513420f9344.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344/937a6fc8-35c3-4151-aa2e-2513420f9344.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 12 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c8:76:5a:cc:a8:cb:fe:33:b0:30:d2:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=937a6fc8-35c3-4151-aa2e-2513420f9344
        Validity
            Not Before: Aug  8 01:00:33 2025 GMT
            Not After : Nov  6 02:00:33 2025 GMT
        Subject: CN=877a05cb-f465-4e84-bf1c-52f0f5ee4950
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:21:6e:2e:19:07:d8:a7:96:4c:8a:d8:d8:b4:
                    92:82:e5:f4:59:c0:22:52:48:f6:8b:26:aa:29:03:
                    c5:19:48:a5:e3:9d:a6:9e:fa:ea:be:25:4c:8d:73:
                    30:b1:62:a7:43:a4:c2:76:ab:9a:e5:84:80:d5:95:
                    e1:30:27:e1:50:c7:77:3f:eb:c3:35:fe:77:f9:b9:
                    ed:eb:ba:d5:34:52:c7:82:13:55:3e:30:3b:6f:b1:
                    cb:0c:80:1b:33:13:69:6e:d5:7b:75:e1:3c:c9:c3:
                    41:74:e1:06:2c:2a:c1:6c:bc:de:49:47:f1:97:59:
                    d3:cb:de:1d:07:46:f5:77:f0:dc:7c:c8:51:c6:34:
                    84:7d:c5:5c:7e:f0:b6:6f:97:dd:23:ab:fe:7d:f9:
                    14:65:09:03:3b:c0:08:65:84:de:99:2d:95:40:b2:
                    53:87:65:88:76:60:e4:9a:c2:eb:ed:50:38:30:7f:
                    eb:10:3e:e6:85:c4:48:31:82:fd:cc:7b:02:c4:69:
                    96:fb:d4:ef:ff:2e:26:a3:1e:17:34:2a:aa:3b:5b:
                    9b:d2:bd:4c:64:49:f4:1f:99:a0:d0:25:a5:49:44:
                    ae:9e:4a:f4:df:10:c8:45:94:b5:15:a8:3a:db:13:
                    c4:06:07:e9:f6:17:19:6b:a2:f0:28:69:bb:a4:b7:
                    1f:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:CA:F3:25:A5:30:0E:D0:44:5C:10:5B:22:7E:61:CB:2E:24:59:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344/a52310bc-2905-3c4b-8a75-15bf5b5a61e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344/937a6fc8-35c3-4151-aa2e-2513420f9344.crl

            X509v3 Authority Key Identifier:
                keyid:6A:1F:E6:4E:1D:16:39:6D:86:6E:99:3B:A8:64:29:AE:C3:4E:FC:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.37.152.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:f8:8b:30:c2:c8:6c:fe:cb:ca:74:d4:62:5c:ed:d9:26:84:
         eb:df:0f:4f:5e:bb:ab:e8:69:21:4f:64:ab:2d:39:00:c3:55:
         c3:5a:91:62:ec:82:f1:0a:6c:66:79:10:e2:4f:76:25:38:9f:
         19:b6:43:db:21:fa:d6:23:13:46:a3:66:5e:d8:9e:91:1c:cf:
         fd:59:9b:8e:c0:a9:1b:4c:ed:6e:fb:6d:d6:ab:5a:14:44:86:
         82:0c:7e:d2:cd:d7:7a:83:73:d6:43:cf:39:ee:bd:a5:a6:12:
         07:1f:f0:f0:61:92:eb:53:cf:73:cd:74:0f:53:b9:40:f3:72:
         a9:3b:41:0c:d9:f2:9a:5a:1e:25:6d:6d:a0:85:42:9e:56:78:
         88:7d:8e:b8:6b:0e:be:39:d1:f1:59:3b:4d:0e:4f:09:de:71:
         23:f7:70:72:5d:3b:a8:e5:44:6d:2d:dc:65:ea:70:ce:7f:c1:
         75:80:3c:7e:8b:2c:79:fa:d6:cd:c6:5a:fd:8d:e6:b2:06:4b:
         f5:62:a9:ab:2c:19:11:c8:73:07:2d:75:a9:13:b6:76:c9:58:
         38:17:18:36:68:b0:95:d2:13:1a:bb:b6:9a:a7:77:95:72:ef:
         e9:39:2f:e4:d0:91:30:bb:0f:df:f1:bb:2f:99:82:b0:1f:53:
         4c:8d:a7:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 01:47:03 2025 by rpki-client