Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344/7b3ef3de-d4cb-3501-9b4a-4a4dae593fca.roa
File:                     7b3ef3de-d4cb-3501-9b4a-4a4dae593fca.roa (raw, json)
Hash identifier:          80BoHVayrif0mTlRgli/njvo00/D2LD2k1u3sJPwVSw=
Subject key identifier:   CF:1E:83:87:2E:D6:7D:97:50:FB:19:79:02:15:82:75:48:80:BC:25
Certificate issuer:       /CN=937a6fc8-35c3-4151-aa2e-2513420f9344
Certificate serial:       010D0C9F432858496A19A7D0D8C100E27ED51880
Authority key identifier: 6A:1F:E6:4E:1D:16:39:6D:86:6E:99:3B:A8:64:29:AE:C3:4E:FC:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344/7b3ef3de-d4cb-3501-9b4a-4a4dae593fca.roa
Signing time:             Fri 04 Apr 2025 13:00:59 +0000
ROA not before:           Fri 04 Apr 2025 13:00:59 +0000
ROA not after:            Thu 03 Jul 2025 13:00:59 +0000
asID:                     13720
IP address blocks:        64.37.175.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344/937a6fc8-35c3-4151-aa2e-2513420f9344.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344/937a6fc8-35c3-4151-aa2e-2513420f9344.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 18 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:6a:19:a7:d0:d8:c1:00:e2:7e:d5:18:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=937a6fc8-35c3-4151-aa2e-2513420f9344
        Validity
            Not Before: Apr  4 13:00:59 2025 GMT
            Not After : Jul  3 13:00:59 2025 GMT
        Subject: CN=09ecc713-a8b9-4182-a594-5d6796a6c4ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:8c:19:0f:fb:35:61:f5:50:e1:fa:bc:e5:dc:
                    b8:80:6e:a5:6f:6e:d1:86:8a:ae:c4:6d:ac:46:62:
                    92:60:0e:a6:44:ef:89:5d:e1:65:45:05:98:e5:14:
                    6f:43:26:64:13:f2:48:94:38:51:8c:8f:40:77:37:
                    41:60:01:e4:44:85:c6:7e:44:a3:31:ac:35:d7:59:
                    b2:ff:19:90:cf:a7:08:9a:06:a9:44:6c:4f:19:a6:
                    60:c5:f6:d2:85:69:7f:9c:d0:44:fd:58:09:41:21:
                    1f:7d:e3:d7:87:2e:06:10:57:0a:81:52:f7:b0:f8:
                    23:69:e4:88:0a:49:aa:64:68:81:b7:02:94:4b:c3:
                    a8:23:9c:52:b1:e0:19:7e:de:2c:e4:2a:3c:b0:7e:
                    3c:84:7d:32:23:4a:f5:bb:49:2d:85:9c:30:a5:5d:
                    2c:29:8d:a6:84:52:96:d8:69:2f:fc:df:f3:39:76:
                    47:d9:c0:41:c6:35:60:c5:42:0a:4e:41:27:8a:91:
                    9c:74:e4:f6:e3:f9:4e:62:ec:20:44:bc:10:6b:b1:
                    c1:51:44:bd:20:af:c9:d3:c5:61:c4:fb:b4:53:6b:
                    10:25:60:59:ec:62:60:2a:34:f0:c4:b3:09:e9:05:
                    c4:26:bf:55:b8:3f:5f:d5:d7:1d:de:12:b8:9b:51:
                    8b:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:1E:83:87:2E:D6:7D:97:50:FB:19:79:02:15:82:75:48:80:BC:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344/7b3ef3de-d4cb-3501-9b4a-4a4dae593fca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344/937a6fc8-35c3-4151-aa2e-2513420f9344.crl

            X509v3 Authority Key Identifier:
                keyid:6A:1F:E6:4E:1D:16:39:6D:86:6E:99:3B:A8:64:29:AE:C3:4E:FC:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.37.175.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:1c:21:97:d1:21:81:ec:8d:73:1c:86:aa:4a:c4:41:63:61:
         dd:54:2a:37:96:82:a3:0a:a7:90:8c:23:74:47:65:42:8d:12:
         10:4d:3e:65:f2:bd:b1:27:b2:c0:19:f0:d7:3d:85:89:b1:55:
         75:9d:d4:af:b8:f9:07:d9:ae:05:d1:33:16:2b:30:df:5d:dd:
         10:a9:e7:5d:61:99:3e:cd:be:8d:53:e9:98:d5:1d:ce:3e:1c:
         14:0a:63:c2:9e:94:9a:30:2c:aa:9e:84:e8:46:9b:70:1c:bb:
         fb:bc:18:4b:b7:11:79:9e:83:78:da:ea:39:a7:ee:9d:3f:8e:
         a9:ff:58:6a:08:3a:ff:7c:af:ff:6f:8e:99:77:4a:bc:15:b3:
         64:c2:a0:9e:b2:31:ef:c5:5b:3c:5b:d5:2b:49:fc:29:4f:ef:
         9c:bc:41:50:9b:41:0c:7f:41:d0:c9:3b:5f:99:b2:fd:27:6d:
         2a:d1:3d:2f:34:a1:7a:e4:58:57:f5:bd:ee:8b:e1:dd:72:60:
         3e:49:18:03:96:b2:a7:62:65:6a:ee:89:a8:20:35:1d:ce:a1:
         48:92:e6:7a:ac:24:3e:05:31:80:17:6e:1e:09:98:9d:a3:21:
         6c:a0:62:32:3c:27:a5:18:28:e0:3e:1a:d1:2e:91:69:09:7e:
         b8:d5:6c:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 17:08:57 2025 by rpki-client