Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7875058f-5363-4bbc-9de7-bfd669c88bd9/0d0c3bbe-6b58-3307-978f-eb2c3631fe13.roa
File:                     0d0c3bbe-6b58-3307-978f-eb2c3631fe13.roa (raw, json)
Hash identifier:          39AI/1dOBGK0tE0F1dh3pJ4E/r0PavadI4BNJLJAwZg=
Subject key identifier:   95:20:F5:94:09:A1:03:8B:5F:26:D4:A1:97:3F:5F:98:F3:70:AA:94
Certificate issuer:       /CN=7875058f-5363-4bbc-9de7-bfd669c88bd9
Certificate serial:       010D0C9F43285848ADC604523E7945B1D24F6D80
Authority key identifier: 60:F8:59:9A:79:56:37:4D:45:E0:02:ED:58:C0:8D:19:18:5B:AC:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7875058f-5363-4bbc-9de7-bfd669c88bd9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7875058f-5363-4bbc-9de7-bfd669c88bd9/0d0c3bbe-6b58-3307-978f-eb2c3631fe13.roa
Signing time:             Mon 27 Jan 2025 02:00:39 +0000
ROA not before:           Mon 27 Jan 2025 02:00:39 +0000
ROA not after:            Sun 27 Apr 2025 01:00:39 +0000
asID:                     7029
IP address blocks:        137.155.0.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7875058f-5363-4bbc-9de7-bfd669c88bd9/7875058f-5363-4bbc-9de7-bfd669c88bd9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7875058f-5363-4bbc-9de7-bfd669c88bd9/7875058f-5363-4bbc-9de7-bfd669c88bd9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7875058f-5363-4bbc-9de7-bfd669c88bd9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Apr 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ad:c6:04:52:3e:79:45:b1:d2:4f:6d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7875058f-5363-4bbc-9de7-bfd669c88bd9
        Validity
            Not Before: Jan 27 02:00:39 2025 GMT
            Not After : Apr 27 01:00:39 2025 GMT
        Subject: CN=8318d7fd-473f-4b76-b99c-2d36595685ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:26:14:77:05:2c:74:48:53:83:22:cd:be:27:
                    d5:0c:39:a3:26:ff:b9:6e:ef:5c:4b:b8:96:ea:38:
                    01:c9:e2:75:c7:7f:ab:d3:46:12:fd:ef:18:51:63:
                    5e:6e:e4:24:c9:61:d8:ff:7f:80:8b:6c:91:ea:84:
                    d2:bf:90:45:35:2c:7a:58:05:e5:5b:ef:7c:48:c0:
                    8e:2e:d2:4f:4a:e2:7d:c6:e3:2b:18:92:27:bf:b9:
                    3a:30:c4:36:ff:b1:4d:0e:ad:7d:7b:a2:07:76:2f:
                    e9:36:e7:e1:61:fd:7a:f9:60:57:e8:f6:71:40:4a:
                    18:68:61:bb:6b:ff:54:34:a1:a0:49:99:a4:17:70:
                    db:60:32:dc:52:e9:40:d4:35:8a:bb:0d:14:9a:5b:
                    13:be:26:f7:83:f5:10:d1:e4:00:97:cc:03:ab:18:
                    d3:64:94:5b:e9:00:db:11:58:49:2b:78:c0:51:94:
                    60:66:95:31:d7:b0:84:44:9e:8a:1c:cc:31:82:48:
                    90:31:e5:f7:90:50:3d:71:b7:33:68:2c:a1:a2:ec:
                    b6:36:16:d3:49:9f:82:3b:56:fa:3a:e0:58:fb:cf:
                    cb:f5:ff:a7:a2:45:29:d1:a0:2b:47:72:19:a2:82:
                    d5:10:b3:19:8a:ec:3e:c6:b1:01:e7:23:d1:ea:93:
                    d1:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:20:F5:94:09:A1:03:8B:5F:26:D4:A1:97:3F:5F:98:F3:70:AA:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7875058f-5363-4bbc-9de7-bfd669c88bd9/0d0c3bbe-6b58-3307-978f-eb2c3631fe13.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7875058f-5363-4bbc-9de7-bfd669c88bd9/7875058f-5363-4bbc-9de7-bfd669c88bd9.crl

            X509v3 Authority Key Identifier:
                keyid:60:F8:59:9A:79:56:37:4D:45:E0:02:ED:58:C0:8D:19:18:5B:AC:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7875058f-5363-4bbc-9de7-bfd669c88bd9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.155.0.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:89:2c:9f:04:41:e1:1f:9e:4d:7c:36:38:86:11:0b:ba:92:
         b5:88:aa:20:7a:b0:6b:ef:df:da:e3:6f:18:0f:a5:ae:dd:aa:
         ab:2b:d7:fc:8d:13:34:75:cd:a3:93:39:9e:fb:29:56:4a:b1:
         cf:86:5c:63:63:f2:9f:2e:ed:b7:75:56:f3:55:c6:1f:69:c9:
         8d:9a:b2:3b:ed:74:36:6f:b8:44:41:5b:9a:51:a3:27:c7:4f:
         1e:cd:ac:3d:29:e6:3b:9d:87:20:fe:7e:91:8a:ff:d8:b7:8a:
         1a:69:ae:91:f4:c2:e5:e9:e9:c5:55:ae:c5:a7:61:d9:c1:8b:
         9b:f3:7b:ad:a3:f2:38:5b:40:db:0e:57:2b:5c:51:08:90:f8:
         d5:c9:6e:eb:d7:f0:98:b4:f0:f8:2b:8d:04:cd:d7:36:7a:7c:
         b1:d3:5f:d5:a7:7d:f0:07:0f:f1:45:33:9e:1b:32:98:19:de:
         58:d6:30:b0:2e:87:98:cf:34:d1:a1:04:b2:1b:2b:fa:09:44:
         90:61:95:87:a4:dd:e3:2b:dd:4b:29:37:19:17:8a:cd:82:94:
         b9:7c:9f:08:7b:6c:00:3f:5d:a4:ba:89:0e:ed:1c:aa:ce:24:
         8d:38:d3:17:0a:0d:55:08:11:af:71:46:bd:fe:80:22:d5:bb:
         4c:09:69:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:07:54 2025 by rpki-client