Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344/23aba1c4-6d56-3672-bb4b-9d5adb2ae4bb.roa
File:                     23aba1c4-6d56-3672-bb4b-9d5adb2ae4bb.roa (raw, json)
Hash identifier:          yOocQh2u4UUGTk+Asqy+Dlgfk13tztuZUTqcjhZumc4=
Subject key identifier:   6B:36:5F:46:B9:25:D1:0A:9D:22:AB:FE:37:F1:37:49:5B:22:86:C4
Certificate issuer:       /CN=937a6fc8-35c3-4151-aa2e-2513420f9344
Certificate serial:       010D0C9F4328584B276176D8BCC6FEFF9836B5A0
Authority key identifier: 6A:1F:E6:4E:1D:16:39:6D:86:6E:99:3B:A8:64:29:AE:C3:4E:FC:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344/23aba1c4-6d56-3672-bb4b-9d5adb2ae4bb.roa
Signing time:             Thu 11 Sep 2025 01:00:33 +0000
ROA not before:           Thu 11 Sep 2025 01:00:33 +0000
ROA not after:            Wed 10 Dec 2025 02:00:33 +0000
asID:                     13720
IP address blocks:        64.37.133.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344/937a6fc8-35c3-4151-aa2e-2513420f9344.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344/937a6fc8-35c3-4151-aa2e-2513420f9344.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:27:61:76:d8:bc:c6:fe:ff:98:36:b5:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=937a6fc8-35c3-4151-aa2e-2513420f9344
        Validity
            Not Before: Sep 11 01:00:33 2025 GMT
            Not After : Dec 10 02:00:33 2025 GMT
        Subject: CN=c9ee0432-da64-4d93-b928-235add808861
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:b9:26:ed:5d:fe:5a:39:58:b8:06:63:51:db:
                    1e:dd:88:cd:c1:26:5d:e5:b6:a1:93:69:00:77:32:
                    cb:1a:c5:9b:4a:a5:3a:8a:24:ff:bc:b5:ee:30:af:
                    ad:35:96:63:6f:09:5d:6f:1b:2e:37:be:5f:11:d4:
                    66:67:c9:40:9e:98:a1:56:fe:a5:f6:18:00:e1:62:
                    a3:96:f7:5f:f8:c0:b6:e7:01:e8:02:f9:33:53:39:
                    aa:55:a6:26:41:c0:a5:5a:93:39:07:d0:00:f5:32:
                    f2:c5:52:f4:48:8a:41:f9:6c:b8:ac:e6:8d:63:12:
                    ba:90:ee:03:83:f2:c8:59:08:3e:40:18:c1:ae:e5:
                    d4:61:1e:78:03:77:4d:4c:0a:88:fe:0e:af:6b:51:
                    e3:49:66:14:cb:47:a2:49:28:6f:8d:fa:97:d8:69:
                    60:49:de:58:c1:64:98:0f:41:4a:b3:7e:ba:c4:4c:
                    20:6d:df:9b:6e:cf:98:90:bc:b1:86:00:96:ff:3a:
                    80:16:51:72:ad:17:ca:1e:56:e7:e8:49:31:e4:e9:
                    c5:84:77:bb:a6:21:08:62:e3:d6:c4:9d:ad:e7:0b:
                    32:0e:9c:35:b1:6b:af:0d:53:aa:aa:7e:66:58:1d:
                    4f:15:55:f4:d5:87:79:d3:6c:a7:38:eb:da:67:f7:
                    c2:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:36:5F:46:B9:25:D1:0A:9D:22:AB:FE:37:F1:37:49:5B:22:86:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344/23aba1c4-6d56-3672-bb4b-9d5adb2ae4bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344/937a6fc8-35c3-4151-aa2e-2513420f9344.crl

            X509v3 Authority Key Identifier:
                keyid:6A:1F:E6:4E:1D:16:39:6D:86:6E:99:3B:A8:64:29:AE:C3:4E:FC:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.37.133.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:68:fb:be:f0:dc:f3:ba:a8:2e:c1:41:6c:8b:24:da:ce:72:
         69:e5:b1:61:94:85:2b:d8:e9:60:4a:6b:11:c4:40:38:1c:72:
         19:9e:ed:df:f3:51:7d:21:85:fa:ea:75:af:9b:62:14:e7:c5:
         3f:5c:72:9e:a5:4e:c5:e8:6f:26:63:cf:44:10:3b:f9:b7:07:
         bf:61:2e:fd:2a:88:83:46:fa:b4:7f:25:46:e5:e8:74:5e:2f:
         43:95:40:a5:ec:65:7b:61:f0:9b:5f:ba:cf:dc:59:18:9d:fa:
         8b:e7:fb:fb:a1:80:e7:a2:4c:36:27:6d:9e:78:71:2e:a4:4e:
         26:97:db:c4:f6:c9:79:76:88:a1:43:c6:22:ba:74:42:75:14:
         36:03:c9:78:b7:f9:33:1e:1c:74:74:b0:14:2c:1e:16:1d:da:
         f4:3d:3a:b7:92:1e:c3:44:33:b5:52:9e:2d:91:4b:e2:cd:f9:
         d3:97:fa:f9:32:a6:5a:28:ab:3b:88:28:51:28:5f:3e:c8:24:
         8d:1f:f2:ec:c7:2f:09:4f:2e:85:32:b5:67:93:f0:a8:ca:81:
         5a:10:83:43:23:b1:59:e4:9b:1c:db:53:80:43:4e:18:3f:e0:
         e8:1b:a8:61:ef:a1:cd:84:ed:79:d4:3a:77:17:f6:c8:61:2d:
         31:71:51:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 07:47:09 2025 by rpki-client