Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344/91067bb3-9af7-3978-9836-85936efce395.roa
File:                     91067bb3-9af7-3978-9836-85936efce395.roa (raw, json)
Hash identifier:          NfNWIf2xSTWE+KHFwiARz5bDhrY0XR957guqTIUT44w=
Subject key identifier:   B0:33:5F:C9:CC:FB:AC:D5:67:F4:60:B5:B4:1E:CA:04:08:7C:D7:A7
Certificate issuer:       /CN=937a6fc8-35c3-4151-aa2e-2513420f9344
Certificate serial:       010D0C9F4328584DCAFAFAB8AEDA490A86A11F80
Authority key identifier: 6A:1F:E6:4E:1D:16:39:6D:86:6E:99:3B:A8:64:29:AE:C3:4E:FC:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344/91067bb3-9af7-3978-9836-85936efce395.roa
Signing time:             Mon 11 May 2026 01:00:24 +0000
ROA not before:           Mon 11 May 2026 01:00:24 +0000
ROA not after:            Sun 09 Aug 2026 01:00:24 +0000
asID:                     13720
IP address blocks:        64.37.171.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344/937a6fc8-35c3-4151-aa2e-2513420f9344.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344/937a6fc8-35c3-4151-aa2e-2513420f9344.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ca:fa:fa:b8:ae:da:49:0a:86:a1:1f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=937a6fc8-35c3-4151-aa2e-2513420f9344
        Validity
            Not Before: May 11 01:00:24 2026 GMT
            Not After : Aug  9 01:00:24 2026 GMT
        Subject: CN=2b4f8d20-7946-48ae-ada3-9d424221d5bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:ac:c9:69:65:cf:27:60:77:1c:06:c1:b6:6e:
                    d1:27:85:a3:c7:f3:2a:7b:89:8e:37:d2:de:a6:da:
                    92:26:aa:2f:b1:85:60:c4:74:c4:68:6f:e5:c3:87:
                    da:59:47:ff:61:6e:f8:63:6a:e9:b4:a1:bf:c7:c8:
                    39:42:c5:cd:6a:c8:5d:90:e9:13:f9:d7:65:cf:9e:
                    81:c0:f2:af:32:74:c0:2a:c3:53:5f:c4:1a:2b:28:
                    c9:88:a3:b1:81:fd:86:65:b1:8e:0d:aa:08:57:33:
                    92:e6:85:a8:50:5c:bc:15:0b:f7:8e:3c:12:4f:19:
                    3b:ec:2c:d0:13:7d:fc:4a:5b:1f:03:ef:67:10:a9:
                    8d:c2:4e:0b:c5:6b:a4:77:7d:e7:1e:9a:29:80:07:
                    1d:b6:ac:0f:af:a6:5f:cd:18:3c:ce:04:00:6d:2a:
                    fc:c9:1e:f7:8d:db:3b:88:0c:e9:3c:90:96:60:a0:
                    0c:30:b1:58:cc:91:9e:b7:06:94:80:ee:d0:68:94:
                    be:61:5d:71:13:de:b8:fc:d8:1b:33:9c:f8:8d:2b:
                    ca:83:0e:65:cb:5a:11:5d:14:2d:db:0a:62:45:a3:
                    56:bf:26:41:b5:ad:16:d0:fc:70:40:10:00:2e:b2:
                    60:e5:4d:7a:2e:fb:eb:ec:17:92:de:9c:20:47:c9:
                    e4:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:33:5F:C9:CC:FB:AC:D5:67:F4:60:B5:B4:1E:CA:04:08:7C:D7:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344/91067bb3-9af7-3978-9836-85936efce395.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344/937a6fc8-35c3-4151-aa2e-2513420f9344.crl

            X509v3 Authority Key Identifier:
                keyid:6A:1F:E6:4E:1D:16:39:6D:86:6E:99:3B:A8:64:29:AE:C3:4E:FC:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.37.171.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:1b:44:12:be:30:10:63:f3:62:1b:cb:c0:54:b5:4f:e7:55:
         ce:7b:f3:c5:f7:e5:62:5d:fd:6a:eb:4c:81:63:56:a6:d3:f2:
         1a:84:a4:96:3c:b7:a1:df:b1:24:ae:ea:6c:1e:e5:37:23:02:
         5e:b8:e6:7e:9b:7d:a3:e1:89:34:5b:bf:be:e6:4b:67:85:44:
         a8:5a:c0:db:c8:d6:33:17:d3:50:9b:77:3a:3c:42:99:0a:db:
         e0:84:cc:aa:3a:72:71:a2:82:09:dd:24:d0:3f:78:09:00:cd:
         9a:97:34:04:98:04:86:16:38:bb:2c:ba:86:9f:18:54:8f:f8:
         f9:7c:b8:95:0d:70:cd:f0:50:af:ae:10:c8:0f:47:2f:95:ad:
         49:d1:13:e0:e2:fb:97:2a:95:73:ff:a7:d3:94:57:bb:29:4f:
         99:ab:d6:35:3f:ea:67:68:02:fa:cc:1c:0f:ca:f6:a4:33:41:
         2e:3e:e4:ae:7a:de:4f:28:b0:cb:81:e4:c9:a8:78:de:3d:e5:
         b9:72:c6:79:64:45:2a:a8:ac:fd:2c:52:a7:5a:63:aa:40:9c:
         f3:33:c0:12:de:bc:17:ec:e0:2d:b1:a3:f8:c0:f8:12:7c:1f:
         cc:4a:3e:92:55:67:9f:ff:64:ac:d8:f7:a5:49:99:a9:9d:e1:
         9d:cf:99:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:22:33 2026 by rpki-client