Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344/dcaf09aa-2ee3-3e9e-b273-733778c76392.roa
File:                     dcaf09aa-2ee3-3e9e-b273-733778c76392.roa (raw, json)
Hash identifier:          PNDd8RTo+APraxI+S0FNmQfX5VW7T0OtEUMflVKjNtQ=
Subject key identifier:   C2:C2:1C:AE:3C:FB:3F:B0:F6:90:8D:45:CB:51:5F:6A:9F:15:05:8D
Certificate issuer:       /CN=937a6fc8-35c3-4151-aa2e-2513420f9344
Certificate serial:       010D0C9F432858496A19A7BE5EE350F754646340
Authority key identifier: 6A:1F:E6:4E:1D:16:39:6D:86:6E:99:3B:A8:64:29:AE:C3:4E:FC:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344/dcaf09aa-2ee3-3e9e-b273-733778c76392.roa
Signing time:             Fri 04 Apr 2025 13:00:59 +0000
ROA not before:           Fri 04 Apr 2025 13:00:59 +0000
ROA not after:            Thu 03 Jul 2025 13:00:59 +0000
asID:                     13720
IP address blocks:        64.37.174.0/25 maxlen: 25
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344/937a6fc8-35c3-4151-aa2e-2513420f9344.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344/937a6fc8-35c3-4151-aa2e-2513420f9344.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 18 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:6a:19:a7:be:5e:e3:50:f7:54:64:63:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=937a6fc8-35c3-4151-aa2e-2513420f9344
        Validity
            Not Before: Apr  4 13:00:59 2025 GMT
            Not After : Jul  3 13:00:59 2025 GMT
        Subject: CN=61fe98d5-0c65-4cce-a0df-e1cd717454b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:a8:bd:4d:a1:06:fb:a7:80:0e:64:4e:1d:7b:
                    83:7f:4e:0f:eb:f0:5e:b3:69:c6:79:ba:5a:5c:d3:
                    5a:db:50:fb:84:b5:98:d3:f9:fd:07:f1:46:9e:47:
                    08:ff:09:d6:55:8e:ab:b6:f3:27:36:97:0e:a1:e5:
                    85:85:dd:af:3b:e8:53:35:19:e0:04:f3:3d:c5:ea:
                    03:8f:2d:87:68:57:d5:bd:bb:44:17:0f:68:4e:7f:
                    80:90:1b:13:bd:e7:f0:e3:a8:25:84:c4:6a:e6:70:
                    64:a8:a2:b6:4d:4e:d6:31:63:8c:16:83:4c:f0:d3:
                    ad:5f:fd:19:01:35:8b:f0:50:42:cc:aa:a6:33:ab:
                    df:26:42:c0:01:da:0c:92:6a:3f:64:89:83:f0:be:
                    29:37:b3:e6:2a:f9:06:e5:1b:d0:8c:fa:af:13:38:
                    34:3d:05:76:10:35:3e:bb:dc:1a:b9:df:d6:42:95:
                    13:fa:59:0d:be:e5:70:21:05:ad:c8:e4:6c:aa:8c:
                    39:45:7c:74:5f:73:32:6c:ec:f5:26:48:73:05:8d:
                    e5:23:d3:b9:26:39:a9:a1:b2:0d:e8:71:38:ee:9a:
                    75:81:02:6e:95:54:44:b1:30:a5:96:42:3f:6e:8b:
                    44:47:f3:c0:76:d2:e6:83:9a:1a:42:2a:48:f3:b5:
                    91:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:C2:1C:AE:3C:FB:3F:B0:F6:90:8D:45:CB:51:5F:6A:9F:15:05:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344/dcaf09aa-2ee3-3e9e-b273-733778c76392.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344/937a6fc8-35c3-4151-aa2e-2513420f9344.crl

            X509v3 Authority Key Identifier:
                keyid:6A:1F:E6:4E:1D:16:39:6D:86:6E:99:3B:A8:64:29:AE:C3:4E:FC:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.37.174.0/25

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:7e:3a:3d:6e:7d:13:ab:64:bd:9c:78:1f:d6:1c:79:53:2a:
         fb:d9:e3:48:29:78:6d:38:42:82:81:0a:d8:cc:de:8e:83:13:
         b2:42:d4:38:df:6e:06:76:14:c2:81:d8:10:16:8c:6b:b1:27:
         5a:09:ca:14:d1:3c:42:d4:01:1e:ae:6c:56:ef:9e:ba:61:ef:
         00:99:f1:bd:c2:b3:79:70:3a:7d:c0:5e:c0:5a:33:52:10:8f:
         d5:fb:48:cf:ab:0e:5e:e5:2c:67:39:5f:28:b0:51:b0:b6:83:
         3b:08:e2:d6:0a:0f:7e:c6:07:b7:d5:ff:e6:6e:da:86:46:17:
         a7:9c:ca:06:f0:05:c4:18:7c:12:67:7f:4c:18:88:dc:7b:d1:
         e4:17:35:d0:92:10:ad:dc:97:5d:cd:33:78:c3:d2:c8:13:c0:
         b8:76:44:0b:93:35:7e:e2:b0:f5:60:35:ea:75:b2:af:06:e5:
         32:b8:9d:3d:1b:69:0a:1f:1e:39:ec:d4:e5:af:99:d0:ab:c9:
         b4:57:a5:35:23:82:84:14:a4:02:b6:af:e5:1a:97:78:40:07:
         e8:ea:d2:e0:af:db:de:23:76:cf:6f:e1:ca:d4:03:5a:3a:0f:
         c0:74:05:33:e0:a0:a5:2e:7e:4a:c2:1e:02:46:1f:78:f7:14:
         63:68:c5:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 17:11:30 2025 by rpki-client