Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344/d05ec1ee-f650-3557-ab8f-2ea8e203e857.roa
File:                     d05ec1ee-f650-3557-ab8f-2ea8e203e857.roa (raw, json)
Hash identifier:          AqkpSh8uxlBOvdyjFC7tXoj5JWyLedD7o2YLhN8qxQU=
Subject key identifier:   20:A6:A9:C5:2B:6F:47:28:3B:68:7D:E5:67:5D:56:C8:6C:B5:CE:63
Certificate issuer:       /CN=937a6fc8-35c3-4151-aa2e-2513420f9344
Certificate serial:       010D0C9F4328584A497064166CFDD861C65DB7A0
Authority key identifier: 6A:1F:E6:4E:1D:16:39:6D:86:6E:99:3B:A8:64:29:AE:C3:4E:FC:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344/d05ec1ee-f650-3557-ab8f-2ea8e203e857.roa
Signing time:             Mon 23 Jun 2025 13:01:03 +0000
ROA not before:           Mon 23 Jun 2025 13:01:03 +0000
ROA not after:            Sun 21 Sep 2025 13:01:03 +0000
asID:                     13720
IP address blocks:        64.37.160.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344/937a6fc8-35c3-4151-aa2e-2513420f9344.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344/937a6fc8-35c3-4151-aa2e-2513420f9344.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:49:70:64:16:6c:fd:d8:61:c6:5d:b7:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=937a6fc8-35c3-4151-aa2e-2513420f9344
        Validity
            Not Before: Jun 23 13:01:03 2025 GMT
            Not After : Sep 21 13:01:03 2025 GMT
        Subject: CN=4704c357-3d5e-4a9f-9d57-22dfde67e34c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:37:c6:49:35:3f:5f:97:d1:c9:7c:52:2f:fc:
                    62:03:94:c8:bf:39:bf:f7:84:4f:51:5f:1f:a5:52:
                    7f:22:1b:93:77:23:11:38:5b:e4:b4:6f:d9:ae:a8:
                    fc:3a:2b:92:7c:7c:c9:cd:2f:7d:a5:ad:d2:1d:49:
                    7c:1a:35:08:f0:50:19:a3:35:fb:62:f5:4b:00:54:
                    4d:1e:9a:88:d9:23:9d:6f:b6:ef:3d:35:05:16:bf:
                    bb:f1:f4:75:f9:36:5e:ce:5e:b5:a6:0a:75:47:bc:
                    e3:74:5e:5e:4d:8a:f2:a0:b9:1c:57:9e:bb:f9:f0:
                    79:ed:68:d2:4f:75:b4:50:e2:29:78:02:97:f5:58:
                    fe:73:02:42:3c:ce:30:51:59:9b:12:e7:91:02:a4:
                    bf:e2:62:58:90:da:e0:b6:66:ba:2b:2f:e7:e2:c0:
                    c5:87:61:97:e9:f6:95:f3:9e:17:28:19:7b:11:c1:
                    e6:56:12:d0:95:4a:01:69:2c:c1:f0:5e:10:06:da:
                    18:46:21:98:df:2e:61:3e:57:2f:37:97:75:87:da:
                    b7:4c:ce:a7:ce:8a:cc:b6:74:f2:c0:c6:73:e8:da:
                    c3:2d:9b:f0:87:ca:93:f3:94:93:84:91:81:57:e0:
                    0a:ac:7f:c7:a9:6d:2b:95:7f:46:c1:30:6a:94:e2:
                    4f:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:A6:A9:C5:2B:6F:47:28:3B:68:7D:E5:67:5D:56:C8:6C:B5:CE:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344/d05ec1ee-f650-3557-ab8f-2ea8e203e857.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344/937a6fc8-35c3-4151-aa2e-2513420f9344.crl

            X509v3 Authority Key Identifier:
                keyid:6A:1F:E6:4E:1D:16:39:6D:86:6E:99:3B:A8:64:29:AE:C3:4E:FC:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.37.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:33:52:ba:b4:1c:2a:2d:5e:82:60:a8:fe:a6:7d:32:8f:28:
         e1:ca:5c:c8:9a:f8:a9:7e:1a:98:63:79:c9:d0:2b:9f:f2:e7:
         8d:91:01:04:bf:26:c7:dd:69:39:96:de:53:78:76:04:f8:9a:
         e4:e2:c6:8e:56:af:3e:71:8b:bc:9a:4f:56:98:d9:fa:3c:bb:
         59:37:68:6d:9d:eb:5b:b1:f7:5f:40:83:b5:54:94:26:45:82:
         50:83:1d:b7:32:18:01:ba:af:b5:33:36:83:c9:8e:7d:e0:ab:
         5e:1b:b7:39:43:3c:8b:e7:e0:77:70:ad:1a:b5:05:03:bc:70:
         44:0f:da:1f:f2:1f:5e:ec:49:bb:be:2b:1b:a6:bd:08:c0:45:
         8d:a0:80:06:c4:63:70:60:d3:d4:d8:69:88:f2:98:4c:62:03:
         cc:c6:54:ed:df:65:6e:d2:13:a5:38:06:ab:9f:b4:45:41:ce:
         0e:9a:3d:63:e2:dd:85:8a:38:66:8e:12:51:1b:85:92:ab:98:
         ad:95:bb:77:0f:4c:33:58:e7:8c:0f:66:f8:e1:20:cd:d8:21:
         94:26:3c:2a:4d:53:d9:c1:6b:26:8a:5d:09:18:6c:c2:02:7b:
         27:48:ba:4b:63:c0:7d:21:e4:4c:65:76:ba:9a:32:04:c5:94:
         4a:4d:dd:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 00:06:15 2025 by rpki-client