Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344/085e9d42-44d8-3892-8903-2e982e72e9cd.roa
File:                     085e9d42-44d8-3892-8903-2e982e72e9cd.roa (raw, json)
Hash identifier:          BppwSwD73CnY4bcgGckbwlZfTwmQu3aCnuZTihkA448=
Subject key identifier:   DC:9E:B3:E4:84:72:46:3F:CA:9F:27:E6:A5:27:19:52:E8:E5:74:C0
Certificate issuer:       /CN=937a6fc8-35c3-4151-aa2e-2513420f9344
Certificate serial:       010D0C9F4328584E7BCA285FA004565065E90760
Authority key identifier: 6A:1F:E6:4E:1D:16:39:6D:86:6E:99:3B:A8:64:29:AE:C3:4E:FC:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344/085e9d42-44d8-3892-8903-2e982e72e9cd.roa
Signing time:             Mon 13 Jul 2026 09:00:12 +0000
ROA not before:           Mon 13 Jul 2026 09:00:12 +0000
ROA not after:            Sun 11 Oct 2026 09:00:12 +0000
asID:                     13720
IP address blocks:        64.37.191.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344/937a6fc8-35c3-4151-aa2e-2513420f9344.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344/937a6fc8-35c3-4151-aa2e-2513420f9344.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:7b:ca:28:5f:a0:04:56:50:65:e9:07:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=937a6fc8-35c3-4151-aa2e-2513420f9344
        Validity
            Not Before: Jul 13 09:00:12 2026 GMT
            Not After : Oct 11 09:00:12 2026 GMT
        Subject: CN=4bcc6e07-52e9-4332-9997-1fb6566ee5b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:af:23:a7:6e:09:43:a9:e5:ae:0f:19:b4:17:
                    19:d2:df:d4:5e:c4:5c:bf:51:3b:54:c0:0d:a3:3c:
                    07:ef:37:ed:20:cc:d8:da:da:86:67:0f:fd:71:2f:
                    1b:0c:e4:2c:23:7d:42:ee:7b:e9:ae:04:5d:c6:2c:
                    b8:3c:5f:33:59:15:08:bd:52:9f:14:32:fb:71:1d:
                    c4:b5:ad:05:55:e0:ac:ca:9c:f1:ee:28:d0:b7:ad:
                    fa:01:f6:40:49:c3:f1:25:ab:6b:cf:d2:5f:68:a1:
                    1f:7d:71:f0:88:46:4a:ec:cd:6f:49:e5:cb:35:79:
                    25:93:27:b4:c9:08:df:d9:06:4e:b7:a0:00:93:51:
                    e0:8a:17:e9:98:92:80:7c:b0:bd:e8:79:1d:04:ef:
                    41:83:c3:02:c4:18:9f:cc:4b:62:6b:e5:ee:a1:1b:
                    c0:2a:15:31:0f:45:cd:34:35:62:cc:94:94:6c:6c:
                    68:6c:a2:2d:ee:53:70:61:b3:4c:10:64:8e:ff:8a:
                    5a:af:0b:46:18:5b:b8:7a:47:98:9d:1c:cf:27:2c:
                    9f:70:49:9a:6d:63:7d:62:82:6a:24:59:54:e9:5d:
                    d4:28:e4:7a:e5:6d:02:72:31:66:0e:58:01:36:b7:
                    f8:92:28:b8:23:80:f2:d2:b7:23:04:e9:51:06:9d:
                    56:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:9E:B3:E4:84:72:46:3F:CA:9F:27:E6:A5:27:19:52:E8:E5:74:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344/085e9d42-44d8-3892-8903-2e982e72e9cd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344/937a6fc8-35c3-4151-aa2e-2513420f9344.crl

            X509v3 Authority Key Identifier:
                keyid:6A:1F:E6:4E:1D:16:39:6D:86:6E:99:3B:A8:64:29:AE:C3:4E:FC:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.37.191.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:34:15:23:5b:2d:cf:dc:3d:43:89:0f:e8:61:ca:cd:fb:87:
         ec:8d:10:bb:e1:44:8c:13:94:14:7d:43:78:a8:e5:75:83:4f:
         49:b5:98:56:ff:71:bb:79:ac:a5:a0:e0:a3:2e:55:a6:42:a9:
         19:0b:ac:fa:51:8a:32:e3:c3:d9:e1:7c:81:a9:81:34:10:e3:
         61:4b:6d:cc:94:5d:f0:65:7c:22:1b:c8:09:bb:42:f9:15:18:
         00:6e:45:74:7e:01:28:4f:d6:f2:bd:8b:a8:4a:75:7f:ea:e1:
         72:cc:36:36:fe:c2:14:ab:1c:11:07:91:93:e3:44:3f:1d:d9:
         b0:e0:45:a4:40:71:97:0a:28:0a:a5:5b:12:3a:bb:02:8c:26:
         bb:48:4f:4e:3e:d6:3b:a5:62:ce:c7:9d:3e:cb:02:aa:40:66:
         4d:59:21:94:cf:53:a7:62:68:75:b9:6a:98:17:24:7a:9f:c1:
         ab:b9:0d:c2:4b:03:cd:21:0a:d4:ee:19:16:46:28:31:f2:9e:
         ad:a0:92:df:e6:ed:32:07:e7:4f:a2:e9:87:5e:0e:d0:03:49:
         89:81:51:27:e5:4e:21:fa:ad:91:d7:b3:b8:a3:d2:d7:40:de:
         74:17:54:a1:57:98:93:2c:09:63:93:6e:87:f1:d7:10:46:3e:
         7a:1f:a6:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:23:12 2026 by rpki-client