Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7875058f-5363-4bbc-9de7-bfd669c88bd9/0d0c3bbe-6b58-3307-978f-eb2c3631fe13.roa
File:                     0d0c3bbe-6b58-3307-978f-eb2c3631fe13.roa (raw, json)
Hash identifier:          fuk9W9qx/y7//m2ob0HVLs618i/uuF6fWsPDaJDicnE=
Subject key identifier:   AF:E9:C7:D7:E7:49:7F:95:E5:32:0A:25:92:4D:31:A4:09:9A:37:2B
Certificate issuer:       /CN=7875058f-5363-4bbc-9de7-bfd669c88bd9
Certificate serial:       010D0C9F4328584AB0EC7080180333162CD71700
Authority key identifier: 60:F8:59:9A:79:56:37:4D:45:E0:02:ED:58:C0:8D:19:18:5B:AC:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7875058f-5363-4bbc-9de7-bfd669c88bd9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7875058f-5363-4bbc-9de7-bfd669c88bd9/0d0c3bbe-6b58-3307-978f-eb2c3631fe13.roa
Signing time:             Sun 06 Jul 2025 01:00:49 +0000
ROA not before:           Sun 06 Jul 2025 01:00:49 +0000
ROA not after:            Sat 04 Oct 2025 01:00:49 +0000
asID:                     7029
IP address blocks:        137.155.0.0/19 maxlen: 24
                          137.155.96.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7875058f-5363-4bbc-9de7-bfd669c88bd9/7875058f-5363-4bbc-9de7-bfd669c88bd9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7875058f-5363-4bbc-9de7-bfd669c88bd9/7875058f-5363-4bbc-9de7-bfd669c88bd9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7875058f-5363-4bbc-9de7-bfd669c88bd9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 03 Aug 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b0:ec:70:80:18:03:33:16:2c:d7:17:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7875058f-5363-4bbc-9de7-bfd669c88bd9
        Validity
            Not Before: Jul  6 01:00:49 2025 GMT
            Not After : Oct  4 01:00:49 2025 GMT
        Subject: CN=cdfb1cf5-e831-4eb5-8a50-8a8fb5c809af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:75:fb:16:83:ea:f7:aa:81:81:b0:bc:3c:4e:
                    4d:d6:d5:a3:1d:79:fc:97:47:6c:b5:49:3e:33:bf:
                    b0:ed:d4:ab:ca:24:5e:48:11:ee:44:01:db:ea:eb:
                    e9:b9:5e:12:a7:bd:cd:28:bb:38:ad:86:a1:fb:dd:
                    1b:0c:0d:54:36:d8:b3:7f:90:3b:bd:30:fe:c4:7f:
                    16:4a:85:bd:b7:54:2c:fa:68:0b:03:17:9a:c1:c0:
                    c8:fa:1b:80:54:88:62:32:2f:1c:df:d8:32:2e:50:
                    fa:43:fa:51:74:18:92:b0:1b:59:07:5d:fe:d6:d2:
                    ab:10:20:3a:9b:62:8d:0a:40:fd:a2:8b:26:b7:76:
                    34:a5:51:06:0a:80:b9:ef:9e:95:a8:74:1d:c5:da:
                    de:a5:a9:6f:a2:46:72:9b:31:b2:0d:24:3f:49:86:
                    ba:32:e1:cd:7f:51:07:7a:bc:7f:02:82:bc:a0:87:
                    48:a4:bf:c0:11:ad:ee:b5:d9:c9:e7:78:ec:72:f4:
                    ac:aa:db:a6:24:f9:06:2c:bf:7d:c9:cc:63:a1:f7:
                    39:b5:18:eb:62:0f:fb:57:04:52:23:1c:08:9c:9a:
                    aa:45:6a:c9:e6:e1:70:fd:98:e8:0f:df:dd:f6:56:
                    93:e5:64:81:31:e7:09:fc:cf:c0:1c:74:7a:84:2e:
                    8d:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:E9:C7:D7:E7:49:7F:95:E5:32:0A:25:92:4D:31:A4:09:9A:37:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7875058f-5363-4bbc-9de7-bfd669c88bd9/0d0c3bbe-6b58-3307-978f-eb2c3631fe13.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7875058f-5363-4bbc-9de7-bfd669c88bd9/7875058f-5363-4bbc-9de7-bfd669c88bd9.crl

            X509v3 Authority Key Identifier:
                keyid:60:F8:59:9A:79:56:37:4D:45:E0:02:ED:58:C0:8D:19:18:5B:AC:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7875058f-5363-4bbc-9de7-bfd669c88bd9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.155.0.0/19
                  137.155.96.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:34:61:28:9d:03:28:6e:4c:fd:f1:e2:65:08:cd:21:8f:a9:
         a4:a2:a5:29:ac:a1:79:0b:46:e2:46:60:0e:af:a1:77:98:07:
         33:b1:57:ed:1f:27:aa:fc:43:f9:36:5d:ca:e3:aa:e2:2d:bc:
         9c:49:26:1b:2b:bd:9e:9d:e2:ae:a7:6b:84:8f:7d:9b:17:fa:
         f6:9d:9f:88:de:d3:fe:99:86:38:70:80:e3:2c:75:ce:b4:87:
         8d:90:9d:ef:9b:7f:01:f0:73:c5:70:b5:18:e9:d0:63:ef:6f:
         13:25:cc:b4:6a:35:de:96:11:91:67:4e:81:59:db:53:5f:74:
         f0:66:00:ee:4e:7c:3e:d6:a2:6d:23:4c:76:6e:eb:19:01:1b:
         6f:ab:ea:36:81:e8:8e:c8:68:61:44:06:a3:3f:2d:26:40:bb:
         a4:4b:c9:4a:15:f9:51:cb:d5:fa:05:43:88:67:06:09:b0:84:
         36:a0:69:6c:f4:b8:49:5d:1d:8a:67:c3:60:58:ad:e7:81:ac:
         42:d5:96:d3:3c:ba:7e:3f:47:b5:dd:29:0e:1c:18:3f:0b:41:
         b6:a3:ab:4d:65:96:a7:85:6d:f5:fc:98:5d:80:62:4b:ef:32:
         e2:8a:7f:5c:bc:6b:8a:c7:f1:0e:78:ee:30:46:d6:f2:7b:6b:
         51:ea:a4:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 2 05:27:22 2025 by rpki-client