Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344/a5eb301c-0bac-3cb2-a58b-9e2ccb519c69.roa
File:                     a5eb301c-0bac-3cb2-a58b-9e2ccb519c69.roa (raw, json)
Hash identifier:          yeE8vD83RFf2+J6PRBvHYLIcD5T/sqsJc7rt9RIR/uc=
Subject key identifier:   6B:A7:1D:97:13:49:80:1C:70:E4:A8:75:53:C2:57:AD:A4:34:CA:0D
Certificate issuer:       /CN=937a6fc8-35c3-4151-aa2e-2513420f9344
Certificate serial:       010D0C9F4328584A63F5BA0C883C177F1837DA80
Authority key identifier: 6A:1F:E6:4E:1D:16:39:6D:86:6E:99:3B:A8:64:29:AE:C3:4E:FC:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344/a5eb301c-0bac-3cb2-a58b-9e2ccb519c69.roa
Signing time:             Thu 03 Jul 2025 01:00:48 +0000
ROA not before:           Thu 03 Jul 2025 01:00:48 +0000
ROA not after:            Wed 01 Oct 2025 01:00:48 +0000
asID:                     13720
IP address blocks:        64.37.189.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344/937a6fc8-35c3-4151-aa2e-2513420f9344.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344/937a6fc8-35c3-4151-aa2e-2513420f9344.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 12 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:63:f5:ba:0c:88:3c:17:7f:18:37:da:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=937a6fc8-35c3-4151-aa2e-2513420f9344
        Validity
            Not Before: Jul  3 01:00:48 2025 GMT
            Not After : Oct  1 01:00:48 2025 GMT
        Subject: CN=256bbe76-4398-4693-8660-1acc7dc0454b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:5e:c8:3f:a2:27:28:04:b0:3b:e8:7c:f0:e5:
                    75:79:d8:28:e9:c7:13:d2:ed:bd:c8:74:e4:94:9e:
                    93:90:a5:e8:de:59:06:b4:75:b6:d0:c3:8d:64:1f:
                    30:a4:c0:8d:e2:b5:13:11:38:50:44:32:1d:48:5e:
                    e8:14:dd:25:6c:42:9d:24:49:b7:eb:59:c2:4d:18:
                    9f:32:f7:b6:50:2f:b5:82:36:86:42:cb:b5:1f:24:
                    43:25:fe:99:8c:a6:32:2c:72:25:ee:c6:78:c2:40:
                    34:1d:4f:88:63:50:fe:f4:46:7e:97:7f:b3:4c:6b:
                    25:9e:15:5b:73:cb:6d:10:3a:3e:bd:f8:77:69:12:
                    70:a4:3e:fc:f0:7c:ba:c4:0f:0e:7d:53:f5:4f:91:
                    ca:f3:6e:db:9b:d7:a9:e1:db:74:f9:31:b3:72:7d:
                    d9:f8:37:69:48:8c:d4:45:b7:4f:20:10:03:81:bf:
                    4c:69:b4:47:57:c6:d2:8f:cc:1c:c8:4d:13:26:87:
                    dc:64:34:bc:90:b9:b3:82:e2:5f:dc:79:b7:2d:ad:
                    e7:ad:c8:0f:63:9f:d9:75:e5:a1:e0:4c:1f:cb:50:
                    0a:a8:3e:ab:16:5f:8d:d4:52:54:4b:86:64:c7:c6:
                    3d:3c:68:15:bd:5e:b7:df:0d:f1:9d:a4:c7:09:72:
                    cc:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:A7:1D:97:13:49:80:1C:70:E4:A8:75:53:C2:57:AD:A4:34:CA:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344/a5eb301c-0bac-3cb2-a58b-9e2ccb519c69.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344/937a6fc8-35c3-4151-aa2e-2513420f9344.crl

            X509v3 Authority Key Identifier:
                keyid:6A:1F:E6:4E:1D:16:39:6D:86:6E:99:3B:A8:64:29:AE:C3:4E:FC:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.37.189.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:fb:68:24:55:5c:3a:4a:4a:8b:7e:24:29:f2:78:35:0b:52:
         07:b8:d1:2a:62:60:6a:2c:39:dc:43:69:32:c6:60:5c:13:d7:
         26:8b:07:82:35:e4:6c:96:4f:70:8f:85:df:f2:24:bf:96:13:
         de:55:c0:19:ec:5b:ef:d4:af:6e:8e:83:48:94:d2:94:f2:2a:
         6c:5b:1d:1b:80:3e:d2:7d:69:56:4c:46:85:58:52:2e:4a:aa:
         98:d1:b2:8c:90:d7:ca:e5:05:08:d6:bb:2c:d8:3d:33:9e:62:
         60:1f:df:9e:5b:c4:be:85:41:2f:f8:34:ea:fc:87:76:c2:af:
         db:a5:40:f7:e4:c9:50:68:34:d0:83:43:59:77:37:02:d9:99:
         f1:74:3b:e8:d9:99:88:2b:94:9e:b4:14:09:51:f8:2a:3b:d4:
         5c:79:1b:15:6d:83:17:a7:a4:f3:3e:e3:99:77:f8:09:9e:dd:
         7d:00:18:43:02:e5:59:63:c6:9b:96:65:c5:01:16:92:78:a0:
         a1:d3:38:4d:84:67:8c:57:cf:68:b0:fa:e2:14:3d:9d:dc:c7:
         82:33:76:79:55:27:32:03:9a:15:18:5f:3a:3e:5d:81:d2:94:
         47:3b:3a:fc:ed:e5:68:6b:96:e1:d1:ee:d7:83:9d:5a:12:a7:
         99:44:54:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 01:44:55 2025 by rpki-client