Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344/485055b6-39a6-32ef-9c07-15c686a4d194.roa
File:                     485055b6-39a6-32ef-9c07-15c686a4d194.roa (raw, json)
Hash identifier:          7I1GCOsmY1UhR0OonOBlLx+aM6Aob1tKI7/xM+tychY=
Subject key identifier:   97:15:97:D8:D8:2B:1D:08:7D:25:4F:67:8C:2D:EB:60:64:81:0D:EB
Certificate issuer:       /CN=937a6fc8-35c3-4151-aa2e-2513420f9344
Certificate serial:       010D0C9F432858496A199E025594F1BBFB06E1A0
Authority key identifier: 6A:1F:E6:4E:1D:16:39:6D:86:6E:99:3B:A8:64:29:AE:C3:4E:FC:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344/485055b6-39a6-32ef-9c07-15c686a4d194.roa
Signing time:             Fri 04 Apr 2025 13:00:59 +0000
ROA not before:           Fri 04 Apr 2025 13:00:59 +0000
ROA not after:            Thu 03 Jul 2025 13:00:59 +0000
asID:                     13720
IP address blocks:        64.37.173.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344/937a6fc8-35c3-4151-aa2e-2513420f9344.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344/937a6fc8-35c3-4151-aa2e-2513420f9344.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 18 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:6a:19:9e:02:55:94:f1:bb:fb:06:e1:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=937a6fc8-35c3-4151-aa2e-2513420f9344
        Validity
            Not Before: Apr  4 13:00:59 2025 GMT
            Not After : Jul  3 13:00:59 2025 GMT
        Subject: CN=471905ad-440a-45f8-a602-187acae717c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:e7:09:c8:2d:5c:98:d3:d8:78:4f:05:e2:49:
                    7e:85:6e:f4:f9:53:06:8d:a6:4f:60:df:57:b1:17:
                    57:cb:ba:b1:95:11:46:45:3c:fd:1c:90:0e:c6:7e:
                    7c:d6:74:e9:34:e7:dd:27:c0:45:37:2c:26:3b:62:
                    db:be:fe:85:cb:9d:bd:00:95:4f:62:f3:08:0b:07:
                    3e:94:50:98:57:0d:eb:de:15:00:a6:f1:af:36:64:
                    5a:dd:6f:81:39:b7:3a:27:0b:2e:55:2e:37:37:09:
                    99:00:ad:33:8b:19:07:d1:e3:88:42:eb:b8:e3:e8:
                    ba:7f:de:42:f4:b6:17:e3:6e:b7:ad:b6:63:55:5b:
                    1a:9f:d0:be:0b:1b:a4:c6:e4:43:de:1f:42:68:a8:
                    5d:94:f0:ca:d1:ae:b8:d3:c0:6f:c8:6f:20:d9:a7:
                    f2:0f:14:75:bd:1b:10:33:0f:3a:c1:28:cc:f2:21:
                    a8:89:d6:85:be:73:71:b7:45:c8:19:65:50:2f:11:
                    aa:7f:80:fd:76:9a:11:5d:38:10:c2:0a:26:6f:e9:
                    a5:f3:5c:7f:b7:61:92:a2:5a:8a:fb:af:c8:39:c5:
                    9c:9c:55:47:7e:d4:d8:ec:c8:6f:d4:f3:e9:55:f3:
                    5b:16:c3:ec:14:0c:e1:09:18:86:6e:2f:95:3c:2b:
                    34:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:15:97:D8:D8:2B:1D:08:7D:25:4F:67:8C:2D:EB:60:64:81:0D:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344/485055b6-39a6-32ef-9c07-15c686a4d194.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344/937a6fc8-35c3-4151-aa2e-2513420f9344.crl

            X509v3 Authority Key Identifier:
                keyid:6A:1F:E6:4E:1D:16:39:6D:86:6E:99:3B:A8:64:29:AE:C3:4E:FC:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.37.173.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:d8:80:2d:07:6c:21:a6:3f:2c:77:44:92:32:de:f3:10:d8:
         39:6a:38:b3:78:1c:0b:fe:81:f6:1d:4f:df:2e:26:38:04:74:
         75:6c:21:78:6d:35:48:0c:d3:e2:09:dd:47:f0:a2:2c:e4:77:
         32:28:a4:c4:aa:fc:40:ee:7f:35:ee:04:c1:5a:39:09:e8:c5:
         dd:e4:d1:a7:9f:e0:88:d3:18:f4:ee:9c:f7:3d:c4:40:41:e9:
         bd:24:32:1d:0a:df:6d:73:d3:a5:72:39:42:cf:e5:64:8b:57:
         d6:0e:28:5b:2b:74:bf:81:ea:c5:d5:a2:38:14:e3:8c:95:82:
         c2:fe:0e:84:59:eb:12:1e:5e:08:99:ca:61:ac:85:a3:b4:2d:
         b5:50:12:09:f6:79:71:18:06:d2:f9:a0:a1:d3:93:ab:28:af:
         73:e6:d5:94:74:ac:29:55:f5:9b:1c:a1:c3:a9:06:11:50:fb:
         e3:6e:d1:51:78:30:62:28:89:07:41:ca:29:ed:de:8a:23:34:
         31:5e:35:19:a7:a5:4f:83:54:25:b5:21:63:f5:03:0f:69:b9:
         8d:7b:ab:f4:fa:be:c6:02:73:86:19:ff:14:09:fc:39:56:c0:
         80:03:26:48:cd:67:42:2b:72:1f:b6:7f:d2:d8:2c:91:47:2d:
         34:13:ba:5e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElqGZ4CVZTxu/sG4aAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTM3YTZmYzgtMzVjMy00MTUxLWFhMmUtMjUxMzQyMGY5
MzQ0MB4XDTI1MDQwNDEzMDA1OVoXDTI1MDcwMzEzMDA1OVowLzEtMCsGA1UEAxMk
NDcxOTA1YWQtNDQwYS00NWY4LWE2MDItMTg3YWNhZTcxN2M1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhucJyC1cmNPYeE8F4kl+hW70+VMGjaZPYN9X
sRdXy7qxlRFGRTz9HJAOxn581nTpNOfdJ8BFNywmO2Lbvv6Fy529AJVPYvMICwc+
lFCYVw3r3hUApvGvNmRa3W+BObc6JwsuVS43NwmZAK0zixkH0eOIQuu44+i6f95C
9LYX4263rbZjVVsan9C+CxukxuRD3h9CaKhdlPDK0a6408BvyG8g2afyDxR1vRsQ
Mw86wSjM8iGoidaFvnNxt0XIGWVQLxGqf4D9dpoRXTgQwgomb+ml81x/t2GSolqK
+6/IOcWcnFVHftTY7Mhv1PPpVfNbFsPsFAzhCRiGbi+VPCs0wwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJcVl9jYKx0IfSVPZ4wt62BkgQ3rMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85Mzdh
NmZjOC0zNWMzLTQxNTEtYWEyZS0yNTEzNDIwZjkzNDQvNDg1MDU1YjYtMzlhNi0z
MmVmLTljMDctMTVjNjg2YTRkMTk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTM3YTZmYzgtMzVjMy00MTUxLWFh
MmUtMjUxMzQyMGY5MzQ0LzkzN2E2ZmM4LTM1YzMtNDE1MS1hYTJlLTI1MTM0MjBm
OTM0NC5jcmwwHwYDVR0jBBgwFoAUah/mTh0WOW2Gbpk7qGQprsNO/HgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MzdhNmZjOC0zNWMzLTQxNTEtYWEyZS0yNTEz
NDIwZjkzNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQCWtMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHXYgC0HbCGmPyx3RJIy3vMQ2DlqOLN4HAv+gfYdT98uJjgEdHVsIXht
NUgM0+IJ3UfwoizkdzIopMSq/EDufzXuBMFaOQnoxd3k0aef4IjTGPTunPc9xEBB
6b0kMh0K321z06VyOULP5WSLV9YOKFsrdL+B6sXVojgU44yVgsL+DoRZ6xIeXgiZ
ymGshaO0LbVQEgn2eXEYBtL5oKHTk6sor3Pm1ZR0rClV9ZscocOpBhFQ++Nu0VF4
MGIoiQdByint3oojNDFeNRmnpU+DVCW1IWP1Aw9puY17q/T6vsYCc4YZ/xQJ/DlW
wIADJkjNZ0Irch+2f9LYLJFHLTQTul4=
-----END CERTIFICATE-----
Generated at Wed Apr 16 17:00:45 2025 by rpki-client