Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7875058f-5363-4bbc-9de7-bfd669c88bd9/0da84f32-a3b7-325e-8e88-4a1bb36616de.roa
File:                     0da84f32-a3b7-325e-8e88-4a1bb36616de.roa (raw, json)
Hash identifier:          Y/lQCbiwjWch/+qWrkMRYI2wrzM2TUgJgKrePcd4tJA=
Subject key identifier:   46:DC:42:8B:D5:05:75:DC:C2:0E:DD:21:E3:67:F0:10:49:2B:20:EC
Certificate issuer:       /CN=7875058f-5363-4bbc-9de7-bfd669c88bd9
Certificate serial:       010D0C9F4328584B2496DB7639A730C4665D8800
Authority key identifier: 60:F8:59:9A:79:56:37:4D:45:E0:02:ED:58:C0:8D:19:18:5B:AC:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7875058f-5363-4bbc-9de7-bfd669c88bd9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7875058f-5363-4bbc-9de7-bfd669c88bd9/0da84f32-a3b7-325e-8e88-4a1bb36616de.roa
Signing time:             Wed 10 Sep 2025 01:00:33 +0000
ROA not before:           Wed 10 Sep 2025 01:00:33 +0000
ROA not after:            Tue 09 Dec 2025 02:00:33 +0000
asID:                     7018
IP address blocks:        137.155.32.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7875058f-5363-4bbc-9de7-bfd669c88bd9/7875058f-5363-4bbc-9de7-bfd669c88bd9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7875058f-5363-4bbc-9de7-bfd669c88bd9/7875058f-5363-4bbc-9de7-bfd669c88bd9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7875058f-5363-4bbc-9de7-bfd669c88bd9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 18 Sep 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:24:96:db:76:39:a7:30:c4:66:5d:88:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7875058f-5363-4bbc-9de7-bfd669c88bd9
        Validity
            Not Before: Sep 10 01:00:33 2025 GMT
            Not After : Dec  9 02:00:33 2025 GMT
        Subject: CN=9dd90ec7-b5e7-4b18-8640-ebc33ee085c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:21:d2:6a:d6:6e:fd:14:31:8b:72:bc:b2:d4:
                    60:26:40:d6:85:cc:05:c6:9b:19:dd:d2:89:ae:9a:
                    02:dc:d2:49:8a:4b:ba:7a:b9:6a:cd:a1:e1:fd:1f:
                    1a:c5:c9:1d:b9:65:fd:12:e6:5f:ce:e8:04:fb:a1:
                    9a:b4:de:b4:af:02:e5:53:65:3f:4a:3c:ea:84:eb:
                    d0:47:b7:f6:7c:17:20:13:ab:d8:70:b2:19:54:e4:
                    72:f0:22:08:5f:23:97:e6:38:d3:a5:08:0e:e6:a4:
                    03:fe:71:c3:fd:c3:3c:67:4a:c1:a7:97:c6:78:02:
                    39:91:fa:1f:1d:ea:61:53:8e:23:af:1a:ed:1d:dd:
                    04:d1:e8:68:87:25:51:e5:f0:a3:cc:0f:01:de:4d:
                    de:50:ce:f0:06:09:29:b4:9a:8a:02:26:5d:26:39:
                    40:f8:34:0a:f2:3c:32:cb:70:24:ee:1b:72:be:52:
                    b6:c9:22:8a:42:c8:19:50:df:87:d7:f5:de:13:aa:
                    a2:4f:2c:af:6f:77:5c:95:cd:d6:ac:57:47:20:d3:
                    95:61:15:d2:36:8e:19:c5:71:1d:70:63:d6:d9:6f:
                    3b:07:32:7c:e7:04:21:f4:94:df:74:a7:10:17:9c:
                    44:e5:82:35:0f:5a:fb:29:0f:0c:c0:d2:ad:e6:86:
                    a2:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:DC:42:8B:D5:05:75:DC:C2:0E:DD:21:E3:67:F0:10:49:2B:20:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7875058f-5363-4bbc-9de7-bfd669c88bd9/0da84f32-a3b7-325e-8e88-4a1bb36616de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7875058f-5363-4bbc-9de7-bfd669c88bd9/7875058f-5363-4bbc-9de7-bfd669c88bd9.crl

            X509v3 Authority Key Identifier:
                keyid:60:F8:59:9A:79:56:37:4D:45:E0:02:ED:58:C0:8D:19:18:5B:AC:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7875058f-5363-4bbc-9de7-bfd669c88bd9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.155.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:fe:3c:95:81:77:4a:5c:0b:2d:1d:32:9d:50:1f:e1:76:d4:
         51:4e:3a:1c:31:8e:f9:10:3c:64:69:9d:ac:72:4b:3d:b5:12:
         f8:f3:e5:33:8f:b1:ec:25:37:94:50:4c:27:01:24:7a:a1:e1:
         2c:41:be:90:3b:33:99:fe:c7:53:68:93:eb:77:07:f2:6f:8e:
         a5:0c:a9:ac:ae:a1:1d:a3:fc:df:1f:bf:b2:6b:ac:7a:cb:9a:
         1c:87:b4:28:40:b7:5e:98:6b:6a:d4:a5:c5:c9:de:16:51:47:
         b1:13:fb:92:1e:ec:99:dd:19:24:91:ea:b3:f5:47:ea:0e:6a:
         eb:bf:8d:a4:9b:1f:aa:51:bf:dc:28:30:56:55:9e:f3:a1:a8:
         81:c9:80:2a:05:1d:8d:f3:9f:05:2d:9f:2e:ba:bf:3c:0b:63:
         28:18:df:e3:75:ec:e9:11:3a:8d:89:fa:2e:19:08:9d:a6:5d:
         7a:16:c7:fc:bf:c7:ad:85:08:4a:17:92:25:d4:6a:02:a6:7f:
         a3:cc:cd:c5:0c:2d:77:7b:d9:11:02:86:32:83:f0:3b:91:04:
         a5:19:f7:fa:0b:f8:e0:a3:c3:ad:e3:fc:36:27:58:82:61:d0:
         d8:b9:f3:43:5b:7a:f4:bf:9c:d0:02:bb:f0:6b:56:19:23:ca:
         a9:50:c8:fe
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEskltt2OacwxGZdiAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzg3NTA1OGYtNTM2My00YmJjLTlkZTctYmZkNjY5Yzg4
YmQ5MB4XDTI1MDkxMDAxMDAzM1oXDTI1MTIwOTAyMDAzM1owLzEtMCsGA1UEAxMk
OWRkOTBlYzctYjVlNy00YjE4LTg2NDAtZWJjMzNlZTA4NWMwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhSHSatZu/RQxi3K8stRgJkDWhcwFxpsZ3dKJ
rpoC3NJJiku6erlqzaHh/R8axckduWX9EuZfzugE+6GatN60rwLlU2U/SjzqhOvQ
R7f2fBcgE6vYcLIZVORy8CIIXyOX5jjTpQgO5qQD/nHD/cM8Z0rBp5fGeAI5kfof
HephU44jrxrtHd0E0ehohyVR5fCjzA8B3k3eUM7wBgkptJqKAiZdJjlA+DQK8jwy
y3Ak7htyvlK2ySKKQsgZUN+H1/XeE6qiTyyvb3dclc3WrFdHINOVYRXSNo4ZxXEd
cGPW2W87BzJ85wQh9JTfdKcQF5xE5YI1D1r7KQ8MwNKt5oaihwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEbcQovVBXXcwg7dIeNn8BBJKyDsMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ODc1
MDU4Zi01MzYzLTRiYmMtOWRlNy1iZmQ2NjljODhiZDkvMGRhODRmMzItYTNiNy0z
MjVlLThlODgtNGExYmIzNjYxNmRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNzg3NTA1OGYtNTM2My00YmJjLTlk
ZTctYmZkNjY5Yzg4YmQ5Lzc4NzUwNThmLTUzNjMtNGJiYy05ZGU3LWJmZDY2OWM4
OGJkOS5jcmwwHwYDVR0jBBgwFoAUYPhZmnlWN01F4ALtWMCNGRhbrAMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy83ODc1MDU4Zi01MzYzLTRiYmMtOWRlNy1iZmQ2
NjljODhiZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFiZsgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHD+PJWBd0pcCy0dMp1QH+F21FFOOhwxjvkQPGRpnaxySz21Evjz5TOP
sewlN5RQTCcBJHqh4SxBvpA7M5n+x1Nok+t3B/JvjqUMqayuoR2j/N8fv7JrrHrL
mhyHtChAt16Ya2rUpcXJ3hZRR7ET+5Ie7JndGSSR6rP1R+oOauu/jaSbH6pRv9wo
MFZVnvOhqIHJgCoFHY3znwUtny66vzwLYygY3+N17OkROo2J+i4ZCJ2mXXoWx/y/
x62FCEoXkiXUagKmf6PMzcUMLXd72REChjKD8DuRBKUZ9/oL+OCjw63j/DYnWIJh
0Ni580NbevS/nNACu/BrVhkjyqlQyP4=
-----END CERTIFICATE-----
Generated at Wed Sep 17 01:21:44 2025 by rpki-client