Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344/640a5b0c-fdb2-3f3e-9eea-1fccbaa75a07.roa
File:                     640a5b0c-fdb2-3f3e-9eea-1fccbaa75a07.roa (raw, json)
Hash identifier:          4b7ftUklrwD8k0zHpvvGOZWEfhyQVXYTY2r8/NEfEsk=
Subject key identifier:   FD:50:EF:DD:45:E3:E5:E2:BA:00:09:EC:72:37:33:87:A7:C6:E1:B3
Certificate issuer:       /CN=937a6fc8-35c3-4151-aa2e-2513420f9344
Certificate serial:       010D0C9F43285849674EF56F0D7F35927F3F8D40
Authority key identifier: 6A:1F:E6:4E:1D:16:39:6D:86:6E:99:3B:A8:64:29:AE:C3:4E:FC:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344/640a5b0c-fdb2-3f3e-9eea-1fccbaa75a07.roa
Signing time:             Thu 03 Apr 2025 13:01:02 +0000
ROA not before:           Thu 03 Apr 2025 13:01:02 +0000
ROA not after:            Wed 02 Jul 2025 13:01:02 +0000
asID:                     13720
IP address blocks:        64.37.129.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344/937a6fc8-35c3-4151-aa2e-2513420f9344.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344/937a6fc8-35c3-4151-aa2e-2513420f9344.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 18 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:67:4e:f5:6f:0d:7f:35:92:7f:3f:8d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=937a6fc8-35c3-4151-aa2e-2513420f9344
        Validity
            Not Before: Apr  3 13:01:02 2025 GMT
            Not After : Jul  2 13:01:02 2025 GMT
        Subject: CN=9d33eab6-7194-42b8-9b7e-59fb0747172b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:7a:c6:20:31:d8:47:b2:11:d5:1a:7a:a2:2d:
                    c9:1f:d4:fd:7f:c2:a5:b5:08:15:ce:60:77:d2:25:
                    56:4d:0a:85:f2:36:9a:6f:8c:d9:fa:42:96:77:4b:
                    da:dd:ac:a5:24:24:ad:f9:66:e4:b4:80:84:bf:a8:
                    d2:3e:42:b3:64:d4:60:77:fb:c0:82:54:67:6f:f0:
                    9a:07:14:33:7a:a9:d0:52:a7:9e:f7:5d:c6:b4:90:
                    74:cd:07:6f:c3:c9:29:2d:d6:0e:f1:89:d0:16:8d:
                    5d:10:ba:97:89:17:bf:49:cf:41:d6:a8:78:bb:28:
                    58:6d:d7:b4:ab:d0:5e:0d:f1:87:58:61:58:cc:fd:
                    0e:13:c1:22:0e:98:57:94:51:08:71:29:c9:fc:85:
                    bb:a2:2a:a5:17:c2:f4:26:30:14:79:99:1f:85:cc:
                    06:8e:6e:b8:cc:80:e0:58:f8:53:a3:8f:44:c4:da:
                    65:3b:f5:dd:09:ff:68:02:ab:9c:8c:51:34:bf:27:
                    72:63:0f:96:67:fa:d8:dc:83:e8:9b:ca:9d:cc:0d:
                    83:ca:8f:d2:fe:cd:3e:bc:2a:ac:bb:5d:3b:63:b6:
                    27:13:ad:3d:2f:bd:b3:ff:8a:1c:3a:dc:fc:10:5e:
                    1e:19:8f:f5:5f:9e:4f:f3:38:9a:42:4a:58:ae:e3:
                    87:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:50:EF:DD:45:E3:E5:E2:BA:00:09:EC:72:37:33:87:A7:C6:E1:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344/640a5b0c-fdb2-3f3e-9eea-1fccbaa75a07.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344/937a6fc8-35c3-4151-aa2e-2513420f9344.crl

            X509v3 Authority Key Identifier:
                keyid:6A:1F:E6:4E:1D:16:39:6D:86:6E:99:3B:A8:64:29:AE:C3:4E:FC:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.37.129.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:01:76:fe:f5:33:b7:13:b0:10:98:36:47:e2:2f:53:47:f8:
         86:06:7a:fc:1f:b5:ed:1a:b4:38:4b:64:77:a6:b0:4e:be:e0:
         19:cd:68:a1:49:17:e5:33:f9:0d:2a:13:2a:a1:d4:8f:9b:f5:
         ca:25:a4:77:80:16:29:e1:25:06:78:ca:1f:37:67:a8:97:fe:
         0a:d1:35:84:70:ae:3a:05:13:9a:8d:ae:36:70:b1:35:fe:35:
         67:21:4e:d7:46:2c:4f:b5:2d:2a:20:11:ac:95:c9:97:c3:30:
         ec:43:00:e8:3d:d4:2c:df:4e:36:82:1a:d8:a3:56:bf:77:8c:
         da:c0:08:a0:ca:33:83:52:4b:f8:9d:29:aa:4e:ad:7a:68:f2:
         a1:ac:1f:a1:13:24:32:61:4a:6e:27:d5:d0:8b:f1:d9:86:ee:
         f6:23:93:e9:6b:5c:ce:53:a6:86:65:5a:17:07:ba:6a:ff:d4:
         79:5d:51:b6:ab:17:6d:5f:8a:28:cf:8b:ad:a9:76:03:48:b6:
         fd:36:71:f9:df:41:87:9f:4e:f8:a2:20:9e:43:60:11:24:e6:
         8d:a0:f6:b4:74:43:c2:f1:52:67:b0:0c:bb:3e:e3:92:60:d1:
         dd:79:8b:94:ac:ca:7a:d4:c5:3e:86:ad:72:1d:62:64:a4:3a:
         aa:95:03:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 16:47:04 2025 by rpki-client