Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344/dcaf09aa-2ee3-3e9e-b273-733778c76392.roa
File:                     dcaf09aa-2ee3-3e9e-b273-733778c76392.roa (raw, json)
Hash identifier:          2wYzW7fAVrXIyGcUDg+P4Daf8i85wXRwZgiQgvnFV9M=
Subject key identifier:   2A:E1:B4:CF:FC:66:76:B2:CD:6F:16:A4:2D:25:EF:0D:07:F2:1C:97
Certificate issuer:       /CN=937a6fc8-35c3-4151-aa2e-2513420f9344
Certificate serial:       010D0C9F4328584B2A2C32F71FDB371CA3CDA400
Authority key identifier: 6A:1F:E6:4E:1D:16:39:6D:86:6E:99:3B:A8:64:29:AE:C3:4E:FC:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344/dcaf09aa-2ee3-3e9e-b273-733778c76392.roa
Signing time:             Fri 12 Sep 2025 01:00:32 +0000
ROA not before:           Fri 12 Sep 2025 01:00:32 +0000
ROA not after:            Thu 11 Dec 2025 02:00:32 +0000
asID:                     13720
IP address blocks:        64.37.174.0/25 maxlen: 25
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344/937a6fc8-35c3-4151-aa2e-2513420f9344.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344/937a6fc8-35c3-4151-aa2e-2513420f9344.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2a:2c:32:f7:1f:db:37:1c:a3:cd:a4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=937a6fc8-35c3-4151-aa2e-2513420f9344
        Validity
            Not Before: Sep 12 01:00:32 2025 GMT
            Not After : Dec 11 02:00:32 2025 GMT
        Subject: CN=2b773cb6-dcc9-4d1e-8891-e116885705cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:3d:3d:49:c0:34:a0:e5:15:80:36:1c:95:36:
                    a9:e4:4a:3b:32:96:56:c9:08:73:7e:2a:82:38:43:
                    19:da:c1:9f:d3:64:e3:3e:5a:3a:51:5e:03:50:be:
                    8a:4d:39:0a:65:a1:b7:39:e8:f2:07:93:b4:6b:d3:
                    0c:d7:77:41:4c:31:0f:d8:b1:da:62:20:28:ee:14:
                    c6:7a:18:80:15:ba:be:3d:bd:bd:a9:5d:5f:44:0d:
                    2f:ca:e6:33:86:95:6e:6c:dd:a5:4a:aa:3b:0a:a2:
                    5f:af:00:8a:f2:e8:c0:a5:27:e8:3d:ff:e4:6b:4d:
                    f7:b8:7a:c6:75:00:10:27:5c:ec:9c:e1:f7:bc:65:
                    b0:95:35:43:73:8c:42:66:dc:6e:64:9a:6f:6b:60:
                    45:d7:78:b1:12:a4:15:10:42:5d:4e:e9:66:c4:98:
                    8a:41:ca:17:cb:a8:16:33:a5:8e:ec:f6:6b:0f:48:
                    31:94:31:cc:a9:26:d2:51:0f:2f:a3:7a:ed:47:9d:
                    a3:6e:92:eb:c0:2a:c0:71:34:53:7f:42:9d:e8:b7:
                    ea:fb:04:44:da:a4:57:52:a2:2d:05:9a:1d:f3:64:
                    1e:52:ba:2a:32:02:bd:81:d3:66:ab:f3:e2:eb:95:
                    c4:c3:94:84:bf:ba:f5:6a:33:1f:06:d6:f7:96:2c:
                    f4:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:E1:B4:CF:FC:66:76:B2:CD:6F:16:A4:2D:25:EF:0D:07:F2:1C:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344/dcaf09aa-2ee3-3e9e-b273-733778c76392.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344/937a6fc8-35c3-4151-aa2e-2513420f9344.crl

            X509v3 Authority Key Identifier:
                keyid:6A:1F:E6:4E:1D:16:39:6D:86:6E:99:3B:A8:64:29:AE:C3:4E:FC:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.37.174.0/25

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:0d:6a:e2:9c:2b:8e:ac:e8:4a:70:55:6e:6d:73:98:0e:e1:
         ce:d3:f5:8c:9a:55:08:01:af:98:fd:61:3e:81:72:7e:5c:e4:
         20:8e:d9:b7:3f:41:25:f4:21:3f:75:7c:9e:4b:d3:bb:70:ff:
         cc:85:85:ad:52:80:9b:d6:23:4b:eb:ff:72:51:30:de:9a:d5:
         6a:c0:e5:80:a1:5f:4a:d8:dc:7e:fe:68:3e:46:46:fe:5f:0d:
         4f:1e:03:a6:ab:54:7b:f6:c9:1b:ee:8d:44:88:b8:c8:5a:20:
         b4:9c:26:1f:76:e6:1c:c7:01:96:02:6d:e7:05:b4:07:7c:37:
         f8:fc:a4:e5:a3:c8:66:a2:96:fe:72:c5:11:d4:7f:47:b0:5c:
         f9:af:d1:8d:3c:98:71:bf:df:6e:5f:07:89:ba:42:7e:69:0b:
         a3:81:5a:6f:f7:27:b6:4f:84:fc:21:8d:c0:1f:4e:ee:0b:39:
         75:ee:ba:1c:c4:00:a7:74:50:90:dc:f7:3c:5b:04:9c:ef:c5:
         2e:99:b7:ca:e6:e7:e2:9d:f4:1f:bd:02:61:3f:e5:31:47:c4:
         2f:f5:60:f8:fb:5e:0b:93:7f:7b:46:ed:06:c1:d5:e3:dd:2f:
         12:e4:aa:d2:d7:d4:9e:3b:87:d6:92:6b:61:06:a8:03:9a:c2:
         e2:37:e7:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 07:47:05 2025 by rpki-client