Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344/640a5b0c-fdb2-3f3e-9eea-1fccbaa75a07.roa
File:                     640a5b0c-fdb2-3f3e-9eea-1fccbaa75a07.roa (raw, json)
Hash identifier:          KX6lHun5f0vjkgRfxVTBJon0Yj+pKr2Us8GRPS6TDMk=
Subject key identifier:   D1:F1:EF:68:8B:86:03:B9:9F:31:E6:EA:26:1F:23:68:95:22:B1:30
Certificate issuer:       /CN=937a6fc8-35c3-4151-aa2e-2513420f9344
Certificate serial:       010D0C9F4328584DC83046487C2D765EF3D259D0
Authority key identifier: 6A:1F:E6:4E:1D:16:39:6D:86:6E:99:3B:A8:64:29:AE:C3:4E:FC:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344/640a5b0c-fdb2-3f3e-9eea-1fccbaa75a07.roa
Signing time:             Sun 10 May 2026 01:00:24 +0000
ROA not before:           Sun 10 May 2026 01:00:24 +0000
ROA not after:            Sat 08 Aug 2026 01:00:24 +0000
asID:                     13720
IP address blocks:        64.37.129.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344/937a6fc8-35c3-4151-aa2e-2513420f9344.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344/937a6fc8-35c3-4151-aa2e-2513420f9344.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c8:30:46:48:7c:2d:76:5e:f3:d2:59:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=937a6fc8-35c3-4151-aa2e-2513420f9344
        Validity
            Not Before: May 10 01:00:24 2026 GMT
            Not After : Aug  8 01:00:24 2026 GMT
        Subject: CN=b48d4906-bb20-418e-a4d2-c4768dc71be5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:4a:01:80:22:9f:a5:06:32:07:d6:f6:f5:a5:
                    b5:d4:1d:7e:dc:89:f7:ce:21:34:79:60:1d:d7:cc:
                    2d:92:36:6e:f1:79:1b:79:49:e6:9f:cc:b8:1d:29:
                    16:b8:4d:e3:61:e8:34:be:13:2b:b6:66:4c:12:84:
                    19:de:8e:da:be:0f:d6:c1:f0:76:a0:3e:b7:63:f7:
                    be:fd:4c:f0:c0:b7:b0:78:35:57:ab:65:25:3b:89:
                    d9:8a:35:9f:14:fb:f5:24:d7:8c:58:4e:98:d5:d9:
                    6e:ef:78:a0:47:62:f3:63:2c:77:58:ac:77:dd:d1:
                    b6:9e:94:f0:7e:aa:74:15:7e:39:85:94:68:eb:45:
                    c0:0c:0c:2e:9e:70:3e:3e:67:83:10:ab:0f:dc:99:
                    e5:10:e8:a9:16:27:13:71:5d:7a:72:9d:e3:db:ef:
                    b3:3b:b5:6d:27:ab:1d:95:9a:5a:7b:5a:f5:45:15:
                    f2:86:e3:56:5c:fe:f8:b4:cb:8a:4b:af:7f:8c:8a:
                    4f:02:48:31:87:b1:1e:98:46:31:b1:41:18:a4:84:
                    01:af:34:7f:fc:24:b5:d2:b5:9a:d2:f9:1a:e8:45:
                    47:18:c1:e5:97:12:2a:26:80:43:b0:56:08:ff:ea:
                    b6:61:a3:6c:90:07:05:9c:d2:44:bc:b9:25:c3:38:
                    7c:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:F1:EF:68:8B:86:03:B9:9F:31:E6:EA:26:1F:23:68:95:22:B1:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344/640a5b0c-fdb2-3f3e-9eea-1fccbaa75a07.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344/937a6fc8-35c3-4151-aa2e-2513420f9344.crl

            X509v3 Authority Key Identifier:
                keyid:6A:1F:E6:4E:1D:16:39:6D:86:6E:99:3B:A8:64:29:AE:C3:4E:FC:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.37.129.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:a7:27:31:a4:f6:74:24:4d:10:86:a6:7b:aa:a2:95:4b:06:
         e7:a3:54:d8:26:a4:62:c7:64:b2:db:c0:da:df:d6:cb:b2:8a:
         37:b0:cd:a2:8e:2c:4d:43:6c:3c:0f:06:dc:5e:52:a1:0f:cb:
         72:31:3d:79:07:b7:9c:ff:23:b9:14:12:8b:d6:7e:01:f2:f3:
         6d:89:b8:a4:59:fe:aa:8c:30:c9:42:7e:c8:2e:b2:79:18:2d:
         ee:2a:65:bc:df:81:da:e5:9c:8f:e8:01:d0:da:5e:4f:6a:9f:
         a8:24:a1:1e:12:66:a5:c8:ca:d7:1a:f0:a6:e0:16:84:c4:20:
         56:06:de:96:13:76:ab:92:8f:ac:a2:03:2b:2e:f0:53:42:11:
         bf:8f:ef:da:a7:96:22:d9:4d:3a:58:d5:c5:cf:e0:0d:b7:a3:
         2c:43:ab:1b:58:2a:f6:11:13:56:89:99:70:05:8d:06:2b:21:
         c2:a9:e4:6e:46:bc:a1:83:84:12:3b:39:48:28:9a:1b:7b:20:
         fe:5e:1b:f2:05:81:b7:61:49:38:64:95:58:5f:9e:26:05:50:
         22:4e:9c:be:21:fa:d0:96:c8:79:b0:06:42:f6:ab:c4:c8:98:
         9a:42:d9:5c:b5:7f:5a:bc:15:98:f2:5c:36:80:8c:4b:74:1f:
         80:76:08:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:55:56 2026 by rpki-client