Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344/8369b5cf-ce2b-3b1a-b9a9-62173de666bb.roa
File:                     8369b5cf-ce2b-3b1a-b9a9-62173de666bb.roa (raw, json)
Hash identifier:          /ibCPCkhQ9VTK6YuHkhnCQGrX/g3TyxHqqtSBM1meBg=
Subject key identifier:   6E:62:F9:F9:9A:8B:FF:C8:5C:FD:F5:A7:4C:AF:5B:8F:4E:DC:25:CC
Certificate issuer:       /CN=937a6fc8-35c3-4151-aa2e-2513420f9344
Certificate serial:       010D0C9F4328584F497404D5F6A3943BEA37E800
Authority key identifier: 6A:1F:E6:4E:1D:16:39:6D:86:6E:99:3B:A8:64:29:AE:C3:4E:FC:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344/8369b5cf-ce2b-3b1a-b9a9-62173de666bb.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     13720
IP address blocks:        64.37.128.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344/937a6fc8-35c3-4151-aa2e-2513420f9344.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344/937a6fc8-35c3-4151-aa2e-2513420f9344.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 Oct 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:74:04:d5:f6:a3:94:3b:ea:37:e8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=937a6fc8-35c3-4151-aa2e-2513420f9344
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=dfe6fc01-6052-4c52-ad72-3148a5ffecc5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:a5:be:19:1b:73:d9:ed:1c:09:6d:eb:c6:ee:
                    b1:59:e0:84:03:3d:80:66:49:15:9c:c5:ba:9c:77:
                    2b:90:33:79:38:47:d3:5e:be:1e:1b:45:d7:28:6e:
                    10:03:9e:68:c5:a9:e9:ac:4c:bd:5d:68:4b:ee:13:
                    18:26:e2:fc:1a:6b:2e:b1:b2:9e:40:6f:55:3a:7a:
                    83:6f:60:56:6c:2f:57:30:8f:49:e6:fe:f9:23:18:
                    c6:ca:0c:78:30:41:31:92:78:00:2d:23:06:3e:23:
                    ed:6f:57:50:c3:a7:cb:db:5a:68:69:5d:79:07:1c:
                    a9:a3:3c:cf:c8:37:b6:ed:ad:c7:0e:62:28:53:b9:
                    f0:41:6e:80:97:6f:68:0a:ae:b9:cf:50:e6:78:3a:
                    02:77:af:14:f7:12:f2:65:16:29:e3:da:2e:bb:c9:
                    7a:74:25:06:65:9d:76:68:6d:c1:e5:e2:06:83:aa:
                    d5:ed:72:fe:ae:3b:a9:24:21:5b:30:0e:77:00:af:
                    15:9e:47:6e:a2:c8:76:c3:f4:63:9c:1e:d7:33:1e:
                    94:07:4f:57:f7:57:20:49:52:95:02:93:d8:8b:75:
                    e0:b9:ee:1e:9b:33:11:5f:fc:93:cb:da:62:f1:0f:
                    ba:6d:2a:73:b3:b0:e7:55:96:6c:76:b7:02:18:a7:
                    cf:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:62:F9:F9:9A:8B:FF:C8:5C:FD:F5:A7:4C:AF:5B:8F:4E:DC:25:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344/8369b5cf-ce2b-3b1a-b9a9-62173de666bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344/937a6fc8-35c3-4151-aa2e-2513420f9344.crl

            X509v3 Authority Key Identifier:
                keyid:6A:1F:E6:4E:1D:16:39:6D:86:6E:99:3B:A8:64:29:AE:C3:4E:FC:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.37.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:0c:74:4a:4f:5c:dc:1a:60:d6:6c:3f:1c:2f:dd:d3:18:cf:
         8b:5b:36:0c:19:d3:2d:99:93:39:94:c1:32:91:2b:91:1c:54:
         00:c7:52:01:5f:f8:0b:10:fe:8d:f5:6b:c7:ba:f8:89:16:1f:
         97:8b:32:0f:89:a0:79:01:2b:5b:26:0f:5e:09:82:2a:5a:27:
         e4:eb:9f:15:8d:be:e2:7d:55:cd:31:12:4f:d5:54:2c:5b:99:
         5c:af:ca:8a:ac:8d:26:b6:52:5f:1e:72:05:50:6e:d8:b2:66:
         6e:4a:42:a5:8d:1c:45:1d:2e:e2:ac:d7:be:a8:22:63:1b:d1:
         11:9d:a5:9d:8c:0d:86:7c:a2:4a:a0:9b:a5:f3:8b:3e:99:4e:
         da:55:aa:3d:22:d7:b5:74:3c:1e:3d:27:79:df:f8:27:17:5f:
         84:3c:04:aa:01:ee:5c:14:5d:98:1b:5d:22:04:23:a3:2d:8b:
         9a:17:b3:c8:df:96:e0:fe:8a:8c:25:48:07:41:72:db:3d:d6:
         fe:f4:4a:46:06:ec:a2:fd:1d:91:b2:88:46:b6:a0:1b:2e:96:
         fc:63:81:ba:fa:b2:96:4e:60:24:54:c5:86:81:45:68:4b:27:
         a7:27:de:cd:6f:5a:6e:0f:7d:6e:86:74:c0:7c:ea:98:04:d3:
         2c:08:dc:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 19:40:44 2026 by rpki-client