Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7875058f-5363-4bbc-9de7-bfd669c88bd9/6e84ed7b-3df5-3929-82e8-5dbf0e916a2f.roa
File:                     6e84ed7b-3df5-3929-82e8-5dbf0e916a2f.roa (raw, json)
Hash identifier:          XRdA/WzVlkkdJL66EJqBJme9gVlktWyH/e4opO4ztS8=
Subject key identifier:   FA:48:81:44:A7:F2:70:97:A6:48:FA:24:4B:B1:BF:2D:07:C1:0F:66
Certificate issuer:       /CN=7875058f-5363-4bbc-9de7-bfd669c88bd9
Certificate serial:       010D0C9F4328584B2496DB4FBB642DCF054FB300
Authority key identifier: 60:F8:59:9A:79:56:37:4D:45:E0:02:ED:58:C0:8D:19:18:5B:AC:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7875058f-5363-4bbc-9de7-bfd669c88bd9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7875058f-5363-4bbc-9de7-bfd669c88bd9/6e84ed7b-3df5-3929-82e8-5dbf0e916a2f.roa
Signing time:             Wed 10 Sep 2025 01:00:33 +0000
ROA not before:           Wed 10 Sep 2025 01:00:33 +0000
ROA not after:            Tue 09 Dec 2025 02:00:33 +0000
asID:                     174
IP address blocks:        137.155.0.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7875058f-5363-4bbc-9de7-bfd669c88bd9/7875058f-5363-4bbc-9de7-bfd669c88bd9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7875058f-5363-4bbc-9de7-bfd669c88bd9/7875058f-5363-4bbc-9de7-bfd669c88bd9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7875058f-5363-4bbc-9de7-bfd669c88bd9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 18 Sep 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:24:96:db:4f:bb:64:2d:cf:05:4f:b3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7875058f-5363-4bbc-9de7-bfd669c88bd9
        Validity
            Not Before: Sep 10 01:00:33 2025 GMT
            Not After : Dec  9 02:00:33 2025 GMT
        Subject: CN=05d1fd56-1aba-49f9-9eb1-92420b6880cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:b7:ea:ee:27:f7:91:35:fb:d5:70:8d:c3:8d:
                    bd:7c:f1:c7:2c:7f:d1:09:d6:49:fd:c0:03:63:cc:
                    08:75:5c:84:4f:d8:49:8e:0f:e8:15:f2:67:de:49:
                    c5:ff:bc:69:7f:a4:3a:3a:21:5c:31:15:4e:93:21:
                    60:62:11:46:da:fc:51:43:eb:7e:ee:89:01:94:66:
                    20:d9:b5:10:e3:49:3b:c2:ba:5e:1c:d7:1d:68:1f:
                    cb:d0:63:42:f2:44:ac:a2:80:6a:58:e7:6e:06:9a:
                    1b:69:51:14:f0:57:f8:9f:2d:ef:5c:67:f4:46:0d:
                    6c:c4:49:27:b7:4f:3b:d3:66:2a:16:a1:2c:ec:29:
                    3b:41:08:87:bb:bb:b2:ad:23:8e:ba:23:9d:c9:bc:
                    a4:b3:8e:97:41:b9:aa:59:d9:64:e2:9a:5c:18:a7:
                    7a:b0:df:0f:af:b3:f3:f6:6f:a1:d6:6d:b6:4d:15:
                    e8:4d:6c:68:b5:a4:12:b1:88:13:ed:50:3f:97:d0:
                    dd:f7:c9:c3:61:21:17:61:64:ea:01:2e:b0:44:a0:
                    eb:ac:5e:f0:6d:a3:b8:83:6c:cb:c0:9f:bb:4b:1a:
                    97:e0:8d:6a:4f:23:e9:c2:19:e9:ce:5e:c7:e5:3d:
                    73:88:42:de:f5:4c:e0:0e:a2:e1:4f:ca:5b:5e:75:
                    a5:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:48:81:44:A7:F2:70:97:A6:48:FA:24:4B:B1:BF:2D:07:C1:0F:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7875058f-5363-4bbc-9de7-bfd669c88bd9/6e84ed7b-3df5-3929-82e8-5dbf0e916a2f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7875058f-5363-4bbc-9de7-bfd669c88bd9/7875058f-5363-4bbc-9de7-bfd669c88bd9.crl

            X509v3 Authority Key Identifier:
                keyid:60:F8:59:9A:79:56:37:4D:45:E0:02:ED:58:C0:8D:19:18:5B:AC:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7875058f-5363-4bbc-9de7-bfd669c88bd9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.155.0.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:07:f7:c0:50:82:73:81:22:fe:0d:e9:f9:bd:65:b7:13:28:
         10:44:89:7d:40:85:c5:bb:cd:6d:b6:72:e5:1a:8a:82:e2:8b:
         5a:4f:6b:c8:dc:af:b1:c1:1d:5b:38:53:df:67:ca:ad:77:50:
         8d:e7:ab:ee:58:f7:72:bd:1e:e1:6c:8a:b1:9c:37:86:9e:51:
         7b:8e:08:70:ad:be:54:d2:76:e5:39:33:61:26:81:e7:5b:91:
         8c:45:b9:72:ca:58:12:d5:4f:9b:2a:dd:8a:c8:5f:23:c8:4c:
         7e:32:de:ff:31:39:12:e9:68:c7:21:48:10:61:52:ce:a4:86:
         13:bf:13:e6:8a:2d:17:c8:fd:d5:be:4d:d8:1a:66:1d:86:7d:
         d4:7e:a7:b4:5f:8b:82:4d:9b:23:75:be:df:a5:7d:01:73:aa:
         9a:f1:b2:e7:88:97:7f:5b:c7:c0:4a:a5:9d:b9:d6:4f:87:d0:
         c7:fa:1b:92:fe:ea:8a:06:91:d9:79:e3:f4:6a:5e:ef:1f:8b:
         75:bb:94:67:50:71:e9:1f:b0:a0:16:ca:ab:5e:e2:b9:cd:2f:
         4d:ca:91:c7:2d:8f:44:f7:0b:5b:6d:20:03:8d:74:d9:85:3b:
         5a:f8:88:7a:21:67:2c:10:52:03:95:a2:11:32:07:7a:e2:e8:
         04:20:fc:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 17 01:21:40 2025 by rpki-client