Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344/c584006a-1e25-3af9-bd37-faf15f542135.roa
File:                     c584006a-1e25-3af9-bd37-faf15f542135.roa (raw, json)
Hash identifier:          rZa1DlLM7muGnCeuKVVe8/8P7/rgobtMZ8ywXvLX4/s=
Subject key identifier:   6E:05:ED:8A:5A:BE:CB:72:90:83:C2:BD:72:A0:73:D5:F0:19:6F:5B
Certificate issuer:       /CN=937a6fc8-35c3-4151-aa2e-2513420f9344
Certificate serial:       010D0C9F4328584DC83042C5B783DD736B373D80
Authority key identifier: 6A:1F:E6:4E:1D:16:39:6D:86:6E:99:3B:A8:64:29:AE:C3:4E:FC:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344/c584006a-1e25-3af9-bd37-faf15f542135.roa
Signing time:             Sun 10 May 2026 01:00:24 +0000
ROA not before:           Sun 10 May 2026 01:00:24 +0000
ROA not after:            Sat 08 Aug 2026 01:00:24 +0000
asID:                     13720
IP address blocks:        64.37.128.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344/937a6fc8-35c3-4151-aa2e-2513420f9344.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344/937a6fc8-35c3-4151-aa2e-2513420f9344.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c8:30:42:c5:b7:83:dd:73:6b:37:3d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=937a6fc8-35c3-4151-aa2e-2513420f9344
        Validity
            Not Before: May 10 01:00:24 2026 GMT
            Not After : Aug  8 01:00:24 2026 GMT
        Subject: CN=fd6ed7ae-54a1-44b2-a821-5e9076f5d4aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:a1:b7:14:0f:bc:b6:18:51:0d:04:e3:62:11:
                    6f:05:21:c1:00:d0:ae:be:c1:53:ef:74:70:f1:a1:
                    06:f5:b6:f8:23:0b:6f:df:31:00:07:1d:06:92:91:
                    ec:18:dd:04:2c:8d:9c:89:18:c8:df:52:8e:85:f9:
                    e8:8a:64:d7:ef:dc:0e:85:4a:de:fb:17:54:e7:de:
                    8d:bf:56:df:fb:30:15:5c:a8:82:80:d2:4c:e8:ce:
                    c5:a2:d0:b2:77:fa:f4:d8:d9:ad:44:40:71:9d:67:
                    80:f3:db:c2:1d:28:87:41:40:30:8a:8d:98:4d:26:
                    0e:bd:a0:5e:df:05:c6:8d:c2:be:bc:61:7b:94:a8:
                    02:ae:c8:30:d6:8f:9b:ff:80:49:b0:c5:8b:12:c4:
                    0d:58:7c:fe:d2:ad:34:42:93:43:a5:03:82:41:2d:
                    18:89:f2:63:78:d5:68:c1:a0:90:d8:1b:3c:28:f7:
                    2e:77:7c:10:41:8c:ae:c1:1f:5e:c5:55:20:c8:40:
                    75:e1:f7:fd:c8:31:98:03:7a:ae:7d:00:ef:dd:54:
                    a2:a9:32:d1:d3:61:fe:f3:c3:ff:37:4a:16:3a:01:
                    f6:3b:e5:d5:da:0b:30:47:38:af:c5:3f:59:59:05:
                    34:4a:95:d5:19:0d:6e:95:c9:30:90:39:df:a6:87:
                    92:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:05:ED:8A:5A:BE:CB:72:90:83:C2:BD:72:A0:73:D5:F0:19:6F:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344/c584006a-1e25-3af9-bd37-faf15f542135.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344/937a6fc8-35c3-4151-aa2e-2513420f9344.crl

            X509v3 Authority Key Identifier:
                keyid:6A:1F:E6:4E:1D:16:39:6D:86:6E:99:3B:A8:64:29:AE:C3:4E:FC:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.37.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:86:8f:b2:2e:6c:1b:b9:02:c6:cd:9e:21:9f:87:18:7b:d7:
         8a:3e:a4:5d:50:aa:60:20:e9:bf:9d:2a:29:19:ad:84:4c:74:
         7f:95:31:a5:26:81:28:3b:fa:c8:05:c0:6f:1b:06:06:5b:14:
         2c:d6:15:d3:05:4a:ab:fa:9d:77:bf:e3:91:9b:22:00:ff:2d:
         ef:03:c8:07:4a:5c:e3:b6:f3:e5:85:8f:d7:73:9e:9a:98:3b:
         ff:8e:75:69:2e:bc:1b:8b:8c:69:99:24:e7:a6:ce:46:a8:f9:
         ae:dd:3b:d8:47:72:f8:6c:2f:d3:c3:9b:62:77:e9:ce:69:a3:
         3d:74:94:9e:69:1d:6b:f8:59:dc:5a:7b:40:32:fa:01:48:52:
         ed:f4:72:9d:ae:8f:35:d2:27:0b:42:84:f4:43:c5:66:f7:d8:
         40:e3:99:a1:fa:f7:48:b1:a9:33:57:f3:cb:57:99:d0:60:29:
         11:c9:86:0d:30:3b:5d:b4:72:ff:c7:63:74:58:f5:87:0b:16:
         92:5c:0b:78:58:2a:9d:45:64:7c:46:6e:56:0b:c0:03:bd:36:
         be:f3:41:4f:af:a7:11:d3:d2:7e:d8:a4:77:8e:0d:7f:c2:b0:
         7f:c6:45:9b:a0:67:30:de:d8:0d:7b:53:13:f8:3a:cf:ea:47:
         c1:a6:88:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:17:01 2026 by rpki-client