Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7875058f-5363-4bbc-9de7-bfd669c88bd9/0da84f32-a3b7-325e-8e88-4a1bb36616de.roa
File:                     0da84f32-a3b7-325e-8e88-4a1bb36616de.roa (raw, json)
Hash identifier:          kJRCX8RYvk3UNF5Zy8EGifQ0A26fI/gOBcp2E0DfUm0=
Subject key identifier:   FB:D8:99:F5:49:F1:66:45:A2:18:91:45:95:86:08:9E:C0:6F:8E:1A
Certificate issuer:       /CN=7875058f-5363-4bbc-9de7-bfd669c88bd9
Certificate serial:       010D0C9F4328584964844BACB567667353CFFAC0
Authority key identifier: 60:F8:59:9A:79:56:37:4D:45:E0:02:ED:58:C0:8D:19:18:5B:AC:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7875058f-5363-4bbc-9de7-bfd669c88bd9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7875058f-5363-4bbc-9de7-bfd669c88bd9/0da84f32-a3b7-325e-8e88-4a1bb36616de.roa
Signing time:             Wed 02 Apr 2025 13:01:01 +0000
ROA not before:           Wed 02 Apr 2025 13:01:01 +0000
ROA not after:            Tue 01 Jul 2025 13:01:01 +0000
asID:                     7018
IP address blocks:        137.155.32.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7875058f-5363-4bbc-9de7-bfd669c88bd9/7875058f-5363-4bbc-9de7-bfd669c88bd9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7875058f-5363-4bbc-9de7-bfd669c88bd9/7875058f-5363-4bbc-9de7-bfd669c88bd9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7875058f-5363-4bbc-9de7-bfd669c88bd9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:64:84:4b:ac:b5:67:66:73:53:cf:fa:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7875058f-5363-4bbc-9de7-bfd669c88bd9
        Validity
            Not Before: Apr  2 13:01:01 2025 GMT
            Not After : Jul  1 13:01:01 2025 GMT
        Subject: CN=7ffdec3f-4395-4b33-800a-5250cd620145
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:28:63:e4:9d:7e:86:36:8b:6a:3c:f2:4a:eb:
                    ce:4d:6b:14:9c:e9:2e:ae:34:c4:98:b2:a6:ba:e0:
                    85:ec:07:cf:53:c9:e3:d3:ba:1a:2a:e2:44:53:1c:
                    64:7f:c5:39:cc:9c:6e:09:1c:0e:eb:cb:77:af:18:
                    99:90:6b:71:74:e8:dc:65:ad:cc:30:c6:f0:50:8f:
                    f2:39:92:c3:5a:6c:d7:4d:23:81:1d:50:97:84:0a:
                    85:1e:09:71:f7:c4:49:49:4a:ad:90:d8:fa:87:97:
                    56:bb:3b:cd:99:3b:aa:4d:49:11:f1:29:96:63:dd:
                    48:5f:c6:95:fc:21:39:5a:86:86:34:0a:7b:b3:b3:
                    d2:9a:bf:c4:91:94:4e:97:99:8c:7a:99:58:8d:69:
                    c7:75:21:a0:5b:b9:8b:82:3e:e1:09:82:fc:f8:3a:
                    dc:cb:00:3f:9c:ee:97:a6:97:d4:56:11:75:0a:e4:
                    cf:af:71:82:77:4c:11:f8:8e:f0:a9:68:2e:27:0f:
                    23:9b:37:12:52:99:60:40:a6:6f:0c:98:61:a3:d5:
                    e2:84:ea:85:cb:a3:5e:64:37:4b:54:ba:84:69:54:
                    ca:76:65:ee:42:d5:b3:28:01:ee:3f:1c:83:d5:fe:
                    5a:9b:e0:4b:13:de:ea:2a:fa:05:51:bf:d9:71:19:
                    d5:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:D8:99:F5:49:F1:66:45:A2:18:91:45:95:86:08:9E:C0:6F:8E:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7875058f-5363-4bbc-9de7-bfd669c88bd9/0da84f32-a3b7-325e-8e88-4a1bb36616de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7875058f-5363-4bbc-9de7-bfd669c88bd9/7875058f-5363-4bbc-9de7-bfd669c88bd9.crl

            X509v3 Authority Key Identifier:
                keyid:60:F8:59:9A:79:56:37:4D:45:E0:02:ED:58:C0:8D:19:18:5B:AC:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7875058f-5363-4bbc-9de7-bfd669c88bd9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.155.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:ef:08:71:8f:f9:33:f2:b4:e8:2f:45:54:bd:ce:eb:9b:40:
         a1:03:9c:2b:35:50:57:c2:3c:6d:79:91:58:b0:0f:06:59:92:
         ef:dd:3e:1e:f9:11:ed:8e:e7:93:3d:64:a2:85:85:1f:70:a2:
         25:53:13:61:31:1c:e4:db:54:d7:c2:72:09:83:35:2b:0a:ca:
         0f:74:30:69:27:ad:e9:b4:5e:b7:71:13:6a:19:48:31:cd:0f:
         b9:66:07:4a:16:04:68:e8:23:01:69:23:65:67:16:1a:ea:e8:
         d9:02:c2:3f:74:39:33:a2:ae:e5:2a:34:f3:c0:d0:09:7b:ea:
         e0:79:7c:f7:b4:1a:b6:f7:d1:fc:6d:5d:18:e6:c5:a3:bc:94:
         f4:6e:d6:87:52:ee:6d:55:bb:a1:c4:b7:4b:14:c7:2e:90:23:
         c2:8a:05:0e:9d:52:57:aa:bf:90:32:e0:e4:fa:06:0d:74:8c:
         50:29:b4:06:20:ab:b3:08:30:66:ed:0f:1b:5d:46:5a:a9:1f:
         18:90:3e:f5:9e:dd:5f:0a:a4:d9:c5:23:2b:46:df:19:fb:f3:
         0d:28:1a:cd:68:74:2c:da:b6:e3:af:40:bb:df:77:b4:34:ba:
         11:e9:12:c5:4d:bd:11:ba:6b:fc:f6:54:22:70:69:bd:de:a9:
         f0:4e:43:a6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElkhEustWdmc1PP+sAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzg3NTA1OGYtNTM2My00YmJjLTlkZTctYmZkNjY5Yzg4
YmQ5MB4XDTI1MDQwMjEzMDEwMVoXDTI1MDcwMTEzMDEwMVowLzEtMCsGA1UEAxMk
N2ZmZGVjM2YtNDM5NS00YjMzLTgwMGEtNTI1MGNkNjIwMTQ1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkChj5J1+hjaLajzySuvOTWsUnOkurjTEmLKm
uuCF7AfPU8nj07oaKuJEUxxkf8U5zJxuCRwO68t3rxiZkGtxdOjcZa3MMMbwUI/y
OZLDWmzXTSOBHVCXhAqFHglx98RJSUqtkNj6h5dWuzvNmTuqTUkR8SmWY91IX8aV
/CE5WoaGNAp7s7PSmr/EkZROl5mMeplYjWnHdSGgW7mLgj7hCYL8+DrcywA/nO6X
ppfUVhF1CuTPr3GCd0wR+I7wqWguJw8jmzcSUplgQKZvDJhho9XihOqFy6NeZDdL
VLqEaVTKdmXuQtWzKAHuPxyD1f5am+BLE97qKvoFUb/ZcRnVMwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPvYmfVJ8WZFohiRRZWGCJ7Ab44aMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ODc1
MDU4Zi01MzYzLTRiYmMtOWRlNy1iZmQ2NjljODhiZDkvMGRhODRmMzItYTNiNy0z
MjVlLThlODgtNGExYmIzNjYxNmRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNzg3NTA1OGYtNTM2My00YmJjLTlk
ZTctYmZkNjY5Yzg4YmQ5Lzc4NzUwNThmLTUzNjMtNGJiYy05ZGU3LWJmZDY2OWM4
OGJkOS5jcmwwHwYDVR0jBBgwFoAUYPhZmnlWN01F4ALtWMCNGRhbrAMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy83ODc1MDU4Zi01MzYzLTRiYmMtOWRlNy1iZmQ2
NjljODhiZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFiZsgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEfvCHGP+TPytOgvRVS9zuubQKEDnCs1UFfCPG15kViwDwZZku/dPh75
Ee2O55M9ZKKFhR9woiVTE2ExHOTbVNfCcgmDNSsKyg90MGknrem0XrdxE2oZSDHN
D7lmB0oWBGjoIwFpI2VnFhrq6NkCwj90OTOiruUqNPPA0Al76uB5fPe0Grb30fxt
XRjmxaO8lPRu1odS7m1Vu6HEt0sUxy6QI8KKBQ6dUleqv5Ay4OT6Bg10jFAptAYg
q7MIMGbtDxtdRlqpHxiQPvWe3V8KpNnFIytG3xn78w0oGs1odCzatuOvQLvfd7Q0
uhHpEsVNvRG6a/z2VCJwab3eqfBOQ6Y=
-----END CERTIFICATE-----
Generated at Fri Apr 4 19:23:48 2025 by rpki-client