Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/9094937d-8b89-3d2b-910c-4dae9a9d0aea.roa
File:                     9094937d-8b89-3d2b-910c-4dae9a9d0aea.roa (raw, json)
Hash identifier:          IMljSGpyDXZK+EVtqbk737D6NlpWyrNj9Jonaw40Y3k=
Subject key identifier:   D6:2A:D2:C2:7A:06:2E:E3:43:C8:E5:62:C6:EC:1B:32:21:25:AD:33
Certificate issuer:       /CN=0d0378a9-103c-45ca-869d-7c9115c7b0f6
Certificate serial:       010D0C9F4328584B3126F3BC85315D58A2ABD3C0
Authority key identifier: 42:97:2F:2F:73:59:EB:7A:F5:61:60:0D:0E:39:57:85:38:D6:1B:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/9094937d-8b89-3d2b-910c-4dae9a9d0aea.roa
Signing time:             Sun 14 Sep 2025 13:00:42 +0000
ROA not before:           Sun 14 Sep 2025 13:00:42 +0000
ROA not after:            Sat 13 Dec 2025 14:00:42 +0000
asID:                     21515
IP address blocks:        137.119.26.0/23 maxlen: 23
                          137.119.64.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/0d0378a9-103c-45ca-869d-7c9115c7b0f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/0d0378a9-103c-45ca-869d-7c9115c7b0f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:31:26:f3:bc:85:31:5d:58:a2:ab:d3:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d0378a9-103c-45ca-869d-7c9115c7b0f6
        Validity
            Not Before: Sep 14 13:00:42 2025 GMT
            Not After : Dec 13 14:00:42 2025 GMT
        Subject: CN=378c26e1-de44-432b-ae95-b0fc4f937392
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:36:cb:08:30:1c:39:79:58:9f:7e:8d:69:0d:
                    6f:cf:0c:c3:dc:94:45:57:e7:a2:c3:7f:96:d0:9e:
                    b4:32:2d:fe:c4:e9:a4:75:9b:9f:8a:0f:6d:bf:5e:
                    5e:67:c4:6a:4d:79:a7:af:70:d4:d0:ff:0c:02:9d:
                    8f:a3:3a:19:af:1f:70:a6:26:a6:cc:a2:53:62:fd:
                    93:02:f4:53:19:f5:5c:e6:17:e2:2e:e5:85:c1:58:
                    c0:86:11:33:34:9c:4a:68:00:6d:d1:7b:7d:ad:fe:
                    2b:17:26:06:7f:6f:6d:f1:98:f0:b4:81:14:4f:95:
                    a2:30:a3:93:74:7e:fa:93:22:26:50:2a:2b:4f:96:
                    50:3e:f4:11:b0:d8:0c:5e:22:fd:9f:29:8d:42:f1:
                    3f:0d:72:10:ee:8a:56:db:b8:6a:00:59:bc:cc:8f:
                    bc:51:c0:e7:d8:52:0d:16:3d:5c:bd:c4:f8:2b:d7:
                    42:df:53:b5:50:99:80:fb:b3:ba:f4:cf:3b:35:d7:
                    92:64:a5:77:b8:c0:87:d6:36:e1:11:db:4a:9b:82:
                    89:39:b6:47:79:3e:96:c3:a1:37:7f:d0:fa:13:71:
                    97:48:4a:6e:e3:53:ba:43:d7:52:64:6f:b4:38:a0:
                    0f:a0:4e:38:1a:d3:c3:91:5a:3e:12:7e:74:94:65:
                    4f:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:2A:D2:C2:7A:06:2E:E3:43:C8:E5:62:C6:EC:1B:32:21:25:AD:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/9094937d-8b89-3d2b-910c-4dae9a9d0aea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/0d0378a9-103c-45ca-869d-7c9115c7b0f6.crl

            X509v3 Authority Key Identifier:
                keyid:42:97:2F:2F:73:59:EB:7A:F5:61:60:0D:0E:39:57:85:38:D6:1B:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.119.26.0/23
                  137.119.64.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:1c:8c:c2:90:c6:07:6d:d4:80:f2:bc:d4:36:b9:ae:78:ed:
         d1:50:cd:1e:fa:7a:47:a3:c3:91:e8:d2:ab:0d:70:8b:82:7d:
         fa:e3:46:14:00:72:85:37:75:2f:4d:79:5c:d0:52:7e:0d:9f:
         36:86:12:ec:04:c6:41:4f:2c:ea:bf:c6:07:8c:51:ce:6f:ca:
         43:1b:dd:59:e5:be:af:e1:b3:cd:da:17:c9:49:e7:8e:61:48:
         eb:9b:f0:1e:4e:02:3a:a4:9b:8f:46:f4:a0:28:9d:7a:fb:7c:
         3c:36:25:cd:d7:b8:9a:99:0c:f7:4a:15:c7:fb:b1:1e:2b:f7:
         d1:1d:d0:1a:a9:cc:f6:89:e7:bb:33:f4:83:70:1c:bc:e9:71:
         2c:48:b3:56:ae:42:32:bb:cc:a8:82:26:4e:6e:75:ea:b7:14:
         02:60:b7:fb:cd:27:cf:b7:7c:1a:15:94:25:1b:a5:32:c3:5b:
         b4:df:06:f7:cc:fa:ef:78:6e:a8:cd:c0:ac:16:8b:01:c8:5d:
         c4:35:87:3a:e6:f9:9b:64:f2:bb:42:d2:74:33:fb:43:29:a8:
         f2:a8:06:0a:08:59:1a:90:e1:72:26:cd:f0:c9:36:db:24:38:
         90:15:83:0a:52:4c:d2:f4:2d:90:41:54:f1:69:e5:ad:c9:a2:
         98:a1:75:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 09:43:20 2025 by rpki-client