Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344/23aba1c4-6d56-3672-bb4b-9d5adb2ae4bb.roa
File:                     23aba1c4-6d56-3672-bb4b-9d5adb2ae4bb.roa (raw, json)
Hash identifier:          Cb3q9bN0CkrMqlVTS0X17cn2CtuLylE8RoFSPgqZRzQ=
Subject key identifier:   1B:38:B4:DF:1E:6E:51:E2:A7:BC:78:AA:03:A5:C2:6B:2C:41:8B:B3
Certificate issuer:       /CN=937a6fc8-35c3-4151-aa2e-2513420f9344
Certificate serial:       010D0C9F4328584A46A5A9E33F91299055D4D500
Authority key identifier: 6A:1F:E6:4E:1D:16:39:6D:86:6E:99:3B:A8:64:29:AE:C3:4E:FC:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344/23aba1c4-6d56-3672-bb4b-9d5adb2ae4bb.roa
Signing time:             Sun 22 Jun 2025 13:01:03 +0000
ROA not before:           Sun 22 Jun 2025 13:01:03 +0000
ROA not after:            Sat 20 Sep 2025 13:01:03 +0000
asID:                     13720
IP address blocks:        64.37.133.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344/937a6fc8-35c3-4151-aa2e-2513420f9344.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344/937a6fc8-35c3-4151-aa2e-2513420f9344.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:46:a5:a9:e3:3f:91:29:90:55:d4:d5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=937a6fc8-35c3-4151-aa2e-2513420f9344
        Validity
            Not Before: Jun 22 13:01:03 2025 GMT
            Not After : Sep 20 13:01:03 2025 GMT
        Subject: CN=bc2df39a-1e12-44fc-a746-b65a4fa96ce7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:54:7a:dd:03:22:3f:89:57:c8:ee:25:e6:14:
                    26:2d:bc:30:40:7e:c8:2b:77:6c:54:a3:f0:2a:ed:
                    62:d9:2a:aa:3f:f6:51:d5:51:f8:03:1b:b0:a1:35:
                    03:38:ab:d1:83:21:3e:f5:ba:9b:fb:50:be:96:09:
                    07:b9:93:da:40:1e:8e:92:f9:97:5b:8c:b7:e3:d9:
                    82:a4:cc:0b:ff:c5:b0:d9:fc:f7:47:38:e5:bd:02:
                    eb:b8:b6:7c:e5:c2:6e:47:c2:cf:f1:8b:6a:99:de:
                    4c:68:4e:c2:56:fb:93:84:82:59:a0:f4:47:f9:00:
                    da:da:dd:ad:be:63:0a:96:60:f8:4b:1c:de:d1:81:
                    0c:dc:36:e2:bb:69:7c:b7:b9:f3:4c:fc:8f:a4:41:
                    d9:15:b1:33:8e:85:f9:12:4f:45:89:39:17:08:4b:
                    ff:4b:1a:e5:86:93:25:60:3c:5a:05:b8:fe:96:92:
                    ca:28:98:3c:02:fa:c0:52:9c:89:72:ba:a9:20:f4:
                    89:4e:c6:71:33:fb:c8:20:5c:f0:1c:0a:a4:60:18:
                    02:0b:a6:99:72:b0:9b:da:b4:36:a4:7d:fb:9b:05:
                    1a:8a:63:ce:07:1a:97:dc:37:93:6c:98:60:c7:86:
                    80:a5:1e:10:52:17:e6:1d:3f:2a:52:30:19:2a:5a:
                    65:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:38:B4:DF:1E:6E:51:E2:A7:BC:78:AA:03:A5:C2:6B:2C:41:8B:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344/23aba1c4-6d56-3672-bb4b-9d5adb2ae4bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344/937a6fc8-35c3-4151-aa2e-2513420f9344.crl

            X509v3 Authority Key Identifier:
                keyid:6A:1F:E6:4E:1D:16:39:6D:86:6E:99:3B:A8:64:29:AE:C3:4E:FC:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.37.133.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:02:3b:76:8b:55:06:e4:ce:e2:43:89:11:74:91:27:7d:35:
         07:35:c1:c5:b4:3a:a2:5e:f8:fb:97:44:86:6f:46:7a:b3:e0:
         bd:f0:c3:67:e1:8e:62:4e:56:74:b9:a2:76:0a:28:0f:5f:75:
         70:d2:c5:53:df:04:c4:92:63:17:7c:12:40:ef:9f:1f:e6:eb:
         c7:6c:3f:35:ef:da:5f:f6:f6:83:0e:26:e2:2e:59:ce:0e:d6:
         e0:cc:26:05:66:91:ba:25:d7:0c:1d:95:62:82:09:eb:53:da:
         a6:ad:31:31:e6:23:74:06:b8:82:49:04:16:7d:26:34:d7:13:
         99:dc:c7:2a:9d:85:25:6d:27:4b:5c:6a:93:8c:07:06:b7:e0:
         d2:3b:b2:e3:fd:58:cb:e1:0d:5e:a4:b4:8f:08:7d:b7:d2:df:
         14:60:d4:44:44:ce:9e:33:5f:37:69:46:3d:86:4a:f0:89:9f:
         ff:9c:dd:93:51:3d:fe:e5:21:e6:a3:c2:d2:66:3f:9c:fb:bb:
         f8:19:64:d2:59:84:f3:66:a7:01:53:f0:35:c6:ac:62:b6:bb:
         4a:5e:c4:7d:ad:f8:fd:67:f5:81:d9:67:fd:d6:2a:11:59:cb:
         93:1f:74:9f:9d:95:17:ac:ef:93:3d:15:c5:65:9c:59:7f:e0:
         77:cb:ec:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 20:48:12 2025 by rpki-client