Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344/23aba1c4-6d56-3672-bb4b-9d5adb2ae4bb.roa
File:                     23aba1c4-6d56-3672-bb4b-9d5adb2ae4bb.roa (raw, json)
Hash identifier:          XvsyrRjd3WWzsFrScEO/ES76Ob6oJT150D0scPp0cRQ=
Subject key identifier:   2D:41:FD:40:32:36:58:35:7D:C0:54:A3:6B:60:55:22:67:3D:91:5C
Certificate issuer:       /CN=937a6fc8-35c3-4151-aa2e-2513420f9344
Certificate serial:       010D0C9F4328584DC83042E6C3B77C5C3F019BC0
Authority key identifier: 6A:1F:E6:4E:1D:16:39:6D:86:6E:99:3B:A8:64:29:AE:C3:4E:FC:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344/23aba1c4-6d56-3672-bb4b-9d5adb2ae4bb.roa
Signing time:             Sun 10 May 2026 01:00:24 +0000
ROA not before:           Sun 10 May 2026 01:00:24 +0000
ROA not after:            Sat 08 Aug 2026 01:00:24 +0000
asID:                     13720
IP address blocks:        64.37.133.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344/937a6fc8-35c3-4151-aa2e-2513420f9344.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344/937a6fc8-35c3-4151-aa2e-2513420f9344.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c8:30:42:e6:c3:b7:7c:5c:3f:01:9b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=937a6fc8-35c3-4151-aa2e-2513420f9344
        Validity
            Not Before: May 10 01:00:24 2026 GMT
            Not After : Aug  8 01:00:24 2026 GMT
        Subject: CN=b0c32a4c-75d2-4df5-8bcc-7663283afb2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:24:58:c6:a3:62:dc:7e:39:0b:49:8c:eb:93:
                    ab:98:fe:61:a2:af:43:ba:f3:de:66:c8:a8:96:50:
                    e2:36:c8:0c:d2:01:9d:86:4b:ec:ea:32:d2:89:e5:
                    45:c4:65:e2:c3:99:a5:52:07:2a:de:06:9b:80:c4:
                    97:48:b3:51:31:0e:9b:d1:19:8b:02:ac:47:58:ef:
                    3b:cd:8d:68:b2:fb:e4:1e:39:c5:55:3a:7c:06:af:
                    9e:5d:04:53:61:1a:dd:98:b8:d2:13:1b:f4:b9:d6:
                    1b:75:dd:ed:1b:e0:27:ae:47:95:b9:fe:e0:52:86:
                    ab:f2:69:22:70:cb:32:46:e0:41:3e:fa:55:5b:04:
                    73:0b:81:52:ee:27:8d:3f:62:10:ae:2b:96:e1:5e:
                    6d:ed:1f:c6:25:01:53:39:c1:0a:e5:86:c1:71:a5:
                    d3:f3:b7:16:35:a5:e5:6e:a8:9b:1c:0c:4e:17:7f:
                    57:c1:92:f6:d3:98:4e:9b:c1:2b:cd:46:16:8f:6e:
                    ac:cd:23:74:8b:48:66:a6:a2:ee:2b:69:40:94:1d:
                    7e:18:73:8d:42:e2:a7:16:8e:15:dd:b9:f2:63:ea:
                    20:85:68:57:ec:92:7b:c9:ae:10:da:87:39:5f:66:
                    be:04:12:ff:aa:a0:0b:15:90:6f:01:1f:58:84:59:
                    61:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:41:FD:40:32:36:58:35:7D:C0:54:A3:6B:60:55:22:67:3D:91:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344/23aba1c4-6d56-3672-bb4b-9d5adb2ae4bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344/937a6fc8-35c3-4151-aa2e-2513420f9344.crl

            X509v3 Authority Key Identifier:
                keyid:6A:1F:E6:4E:1D:16:39:6D:86:6E:99:3B:A8:64:29:AE:C3:4E:FC:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.37.133.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:2f:bc:a4:1d:d6:57:35:30:18:47:26:16:85:ba:0c:82:c3:
         e0:fa:4c:58:9e:19:57:21:8f:e6:99:34:2f:a4:71:9c:de:12:
         02:11:8a:00:62:be:91:32:32:90:17:5c:ba:8a:f9:62:f4:8e:
         51:94:a3:f3:80:79:5a:5c:cb:52:2d:15:9f:11:3b:e2:b6:21:
         7d:69:cc:3d:2c:a2:9f:76:a8:a2:1b:98:8c:2d:ce:05:51:01:
         b1:e8:ed:41:7b:ea:2b:67:df:d0:f1:f4:60:a6:14:6e:d6:be:
         ee:82:81:37:61:69:cc:79:e3:d6:52:54:e2:98:69:ad:81:2a:
         bc:13:d6:1b:47:69:ba:5d:66:f6:d7:7e:9c:90:9a:be:72:9b:
         88:4b:f7:70:be:6e:6b:43:75:e1:1c:38:f7:ef:ef:f3:a4:d0:
         62:21:79:da:6b:21:f8:4a:85:ae:90:dd:cb:24:28:80:f8:69:
         65:3d:c7:16:08:1f:34:0b:60:8c:08:92:cf:ce:4d:b8:f1:07:
         58:bf:69:58:53:5a:a4:3b:93:c9:5c:a5:95:2b:4e:5a:2c:fb:
         42:a2:bf:de:6a:dc:c7:95:5c:3e:a0:d9:05:69:12:e9:84:bf:
         e8:fe:0f:cb:f8:09:cf:80:fe:19:7d:15:93:b4:b3:07:4a:fa:
         9f:6a:75:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:12:09 2026 by rpki-client