Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344/9eed383d-c87e-30d7-b94b-f864a165b048.roa
File:                     9eed383d-c87e-30d7-b94b-f864a165b048.roa (raw, json)
Hash identifier:          VJmWJz87ynCOWLItQmAgWCNssfaJa7I28tjP8Vlinos=
Subject key identifier:   7B:79:D9:F9:E8:3E:E8:B3:1B:39:12:D9:F9:9A:88:91:8B:53:83:8E
Certificate issuer:       /CN=937a6fc8-35c3-4151-aa2e-2513420f9344
Certificate serial:       010D0C9F4328584DCAFB0073987B7CC2F9794C00
Authority key identifier: 6A:1F:E6:4E:1D:16:39:6D:86:6E:99:3B:A8:64:29:AE:C3:4E:FC:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344/9eed383d-c87e-30d7-b94b-f864a165b048.roa
Signing time:             Mon 11 May 2026 01:00:24 +0000
ROA not before:           Mon 11 May 2026 01:00:24 +0000
ROA not after:            Sun 09 Aug 2026 01:00:24 +0000
asID:                     13720
IP address blocks:        64.37.168.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344/937a6fc8-35c3-4151-aa2e-2513420f9344.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344/937a6fc8-35c3-4151-aa2e-2513420f9344.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ca:fb:00:73:98:7b:7c:c2:f9:79:4c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=937a6fc8-35c3-4151-aa2e-2513420f9344
        Validity
            Not Before: May 11 01:00:24 2026 GMT
            Not After : Aug  9 01:00:24 2026 GMT
        Subject: CN=2a66f69d-999c-4895-9582-16c53f9a7f43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:d6:8c:93:53:4c:e3:b3:70:1e:c0:54:4b:e0:
                    59:b1:bc:51:29:51:69:61:b2:27:04:d5:1f:ac:02:
                    81:64:9d:52:e2:a1:d8:ca:16:46:f4:4e:34:51:81:
                    21:da:83:ef:e6:80:ec:fb:b9:9a:53:b3:e1:f8:3f:
                    7d:f0:96:22:71:5e:c8:fa:25:dc:47:b4:19:21:68:
                    98:a8:c5:9e:bb:e7:af:2d:d8:3a:35:87:4b:19:93:
                    37:a9:24:67:9d:68:78:e8:60:e3:5b:54:82:b0:2e:
                    89:ed:f7:70:ff:5c:63:b1:4e:e7:f3:02:c4:09:fd:
                    5a:93:92:18:ef:4e:40:d3:11:7a:b6:ea:59:cf:db:
                    a0:f4:ac:a5:74:aa:22:d6:68:58:e0:f1:5a:36:30:
                    a5:2e:18:2c:3d:89:bf:9c:65:b7:d0:a3:7c:2a:d6:
                    b5:8d:25:f1:6f:3d:d1:92:55:07:ba:1e:68:cb:92:
                    8a:36:31:1d:6e:ea:97:1d:a3:74:8d:e5:6f:97:a9:
                    28:ed:6f:0f:55:5d:01:b2:e5:29:35:21:15:1a:99:
                    d2:f4:e7:26:c4:28:f6:7b:90:4d:b2:3c:8e:9b:f0:
                    1f:10:b2:6f:7d:36:78:fa:92:69:7b:00:c6:5d:21:
                    14:73:5a:50:83:70:bd:c4:49:47:4d:3e:61:97:e8:
                    9b:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:79:D9:F9:E8:3E:E8:B3:1B:39:12:D9:F9:9A:88:91:8B:53:83:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344/9eed383d-c87e-30d7-b94b-f864a165b048.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344/937a6fc8-35c3-4151-aa2e-2513420f9344.crl

            X509v3 Authority Key Identifier:
                keyid:6A:1F:E6:4E:1D:16:39:6D:86:6E:99:3B:A8:64:29:AE:C3:4E:FC:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.37.168.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:07:75:2f:82:05:a8:c4:35:49:b7:60:53:01:46:a9:18:a5:
         8e:20:6a:31:76:df:4b:1b:88:04:cf:9d:ce:79:43:14:aa:44:
         d4:c3:ad:db:37:73:92:94:56:e5:8c:28:4f:39:39:03:aa:28:
         90:59:cb:b1:69:bb:6a:7d:41:8a:3d:71:bd:d7:17:c9:eb:ec:
         70:7f:0a:dd:d7:f6:f0:ff:1a:0a:0e:98:59:0b:5d:09:88:51:
         64:e5:18:a2:00:45:5d:90:41:14:e0:6e:67:5c:e2:5d:c4:3d:
         2c:e6:44:79:bd:b1:85:cf:fc:92:76:db:8a:fd:b3:6c:8c:fa:
         2c:89:9b:ed:c7:d6:45:b5:f5:1f:f5:7d:9a:7a:c1:64:2f:23:
         f0:16:36:6d:af:c7:c6:2a:36:68:f3:46:c2:1f:df:8b:f2:18:
         a1:90:7b:b8:75:5a:3f:a1:98:de:88:4f:88:64:04:cb:52:34:
         e7:83:e0:ed:05:09:7c:7e:ae:7b:af:76:1f:ec:61:4d:64:2d:
         c2:21:1e:cc:e7:4e:e5:05:61:8c:cd:9e:29:b4:df:d7:87:d9:
         54:b1:94:8a:a5:02:c9:ce:ad:4a:85:c4:ad:10:cd:b9:45:23:
         43:f6:47:8e:2b:dd:bf:5e:b4:7f:96:19:95:e2:90:7f:e9:e6:
         ea:a6:c7:3c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3K+wBzmHt8wvl5TAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTM3YTZmYzgtMzVjMy00MTUxLWFhMmUtMjUxMzQyMGY5
MzQ0MB4XDTI2MDUxMTAxMDAyNFoXDTI2MDgwOTAxMDAyNFowLzEtMCsGA1UEAxMk
MmE2NmY2OWQtOTk5Yy00ODk1LTk1ODItMTZjNTNmOWE3ZjQzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAstaMk1NM47NwHsBUS+BZsbxRKVFpYbInBNUf
rAKBZJ1S4qHYyhZG9E40UYEh2oPv5oDs+7maU7Ph+D998JYicV7I+iXcR7QZIWiY
qMWeu+evLdg6NYdLGZM3qSRnnWh46GDjW1SCsC6J7fdw/1xjsU7n8wLECf1ak5IY
705A0xF6tupZz9ug9KyldKoi1mhY4PFaNjClLhgsPYm/nGW30KN8Kta1jSXxbz3R
klUHuh5oy5KKNjEdbuqXHaN0jeVvl6ko7W8PVV0BsuUpNSEVGpnS9OcmxCj2e5BN
sjyOm/AfELJvfTZ4+pJpewDGXSEUc1pQg3C9xElHTT5hl+iblwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHt52fnoPuizGzkS2fmaiJGLU4OOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85Mzdh
NmZjOC0zNWMzLTQxNTEtYWEyZS0yNTEzNDIwZjkzNDQvOWVlZDM4M2QtYzg3ZS0z
MGQ3LWI5NGItZjg2NGExNjViMDQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTM3YTZmYzgtMzVjMy00MTUxLWFh
MmUtMjUxMzQyMGY5MzQ0LzkzN2E2ZmM4LTM1YzMtNDE1MS1hYTJlLTI1MTM0MjBm
OTM0NC5jcmwwHwYDVR0jBBgwFoAUah/mTh0WOW2Gbpk7qGQprsNO/HgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MzdhNmZjOC0zNWMzLTQxNTEtYWEyZS0yNTEz
NDIwZjkzNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQCWoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG4HdS+CBajENUm3YFMBRqkYpY4gajF230sbiATPnc55QxSqRNTDrds3
c5KUVuWMKE85OQOqKJBZy7Fpu2p9QYo9cb3XF8nr7HB/Ct3X9vD/GgoOmFkLXQmI
UWTlGKIARV2QQRTgbmdc4l3EPSzmRHm9sYXP/JJ224r9s2yM+iyJm+3H1kW19R/1
fZp6wWQvI/AWNm2vx8YqNmjzRsIf34vyGKGQe7h1Wj+hmN6IT4hkBMtSNOeD4O0F
CXx+rnuvdh/sYU1kLcIhHsznTuUFYYzNnim039eH2VSxlIqlAsnOrUqFxK0QzblF
I0P2R44r3b9etH+WGZXikH/p5uqmxzw=
-----END CERTIFICATE-----
Generated at Wed May 13 16:14:17 2026 by rpki-client