Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7875058f-5363-4bbc-9de7-bfd669c88bd9/0d0c3bbe-6b58-3307-978f-eb2c3631fe13.roa
File:                     0d0c3bbe-6b58-3307-978f-eb2c3631fe13.roa (raw, json)
Hash identifier:          mN9AfEMxpZep4v/kX/ljs9L+g07PaZ7T81t/r2z8SEc=
Subject key identifier:   3C:DA:75:5A:27:32:6D:A3:11:1C:19:7C:8D:F3:49:E2:48:7E:65:65
Certificate issuer:       /CN=7875058f-5363-4bbc-9de7-bfd669c88bd9
Certificate serial:       010D0C9F4328584B4D11D9B22536BB1A4765CF30
Authority key identifier: 60:F8:59:9A:79:56:37:4D:45:E0:02:ED:58:C0:8D:19:18:5B:AC:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7875058f-5363-4bbc-9de7-bfd669c88bd9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7875058f-5363-4bbc-9de7-bfd669c88bd9/0d0c3bbe-6b58-3307-978f-eb2c3631fe13.roa
Signing time:             Wed 24 Sep 2025 13:00:41 +0000
ROA not before:           Wed 24 Sep 2025 13:00:41 +0000
ROA not after:            Tue 23 Dec 2025 14:00:41 +0000
asID:                     7029
IP address blocks:        137.155.0.0/19 maxlen: 24
                          137.155.96.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7875058f-5363-4bbc-9de7-bfd669c88bd9/7875058f-5363-4bbc-9de7-bfd669c88bd9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7875058f-5363-4bbc-9de7-bfd669c88bd9/7875058f-5363-4bbc-9de7-bfd669c88bd9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7875058f-5363-4bbc-9de7-bfd669c88bd9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:4d:11:d9:b2:25:36:bb:1a:47:65:cf:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7875058f-5363-4bbc-9de7-bfd669c88bd9
        Validity
            Not Before: Sep 24 13:00:41 2025 GMT
            Not After : Dec 23 14:00:41 2025 GMT
        Subject: CN=fd356f1f-2844-4bd3-9366-b4ed40ef104a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:e3:a2:b8:d1:2e:8f:40:59:6d:b9:fa:36:d8:
                    0f:db:4c:e2:da:bd:47:8e:7f:3f:79:0f:86:88:97:
                    8d:ba:e2:42:32:38:a9:01:69:4a:6f:0e:6c:8c:6d:
                    de:43:9a:28:33:fb:5d:f9:22:a2:50:36:37:d5:8a:
                    b6:be:16:73:60:7d:08:f7:c1:59:bb:af:70:3d:30:
                    75:4a:2a:66:fb:27:04:61:55:a0:ed:05:18:49:f3:
                    91:75:92:62:55:3b:5e:a7:d8:c1:a8:57:03:6f:6e:
                    b0:c3:33:fe:95:91:de:1f:45:0c:99:3a:32:76:b2:
                    86:3e:7f:8b:4a:ef:f1:11:95:88:83:b7:03:a3:52:
                    fc:46:0d:10:f3:e6:f3:0f:6f:8f:97:44:6c:16:10:
                    e9:da:d5:17:3d:a1:a8:3f:eb:c9:76:c9:8c:7d:f1:
                    33:aa:ec:ec:96:ca:81:2f:0d:38:55:ab:32:03:c0:
                    33:24:78:9b:6c:91:37:63:46:7d:99:34:9d:b1:e0:
                    79:e6:cc:24:da:1e:28:70:29:b9:4b:69:bf:1e:da:
                    91:e6:af:8c:c2:f0:f1:e1:be:f2:2f:01:b2:74:bc:
                    a1:c0:bf:ee:4d:1d:32:6d:cf:0b:df:18:ab:47:6e:
                    b1:16:c0:14:87:59:95:a6:06:5c:bc:3e:3a:e1:65:
                    2f:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:DA:75:5A:27:32:6D:A3:11:1C:19:7C:8D:F3:49:E2:48:7E:65:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7875058f-5363-4bbc-9de7-bfd669c88bd9/0d0c3bbe-6b58-3307-978f-eb2c3631fe13.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7875058f-5363-4bbc-9de7-bfd669c88bd9/7875058f-5363-4bbc-9de7-bfd669c88bd9.crl

            X509v3 Authority Key Identifier:
                keyid:60:F8:59:9A:79:56:37:4D:45:E0:02:ED:58:C0:8D:19:18:5B:AC:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7875058f-5363-4bbc-9de7-bfd669c88bd9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.155.0.0/19
                  137.155.96.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:22:af:bf:7d:43:54:72:dd:d6:70:be:c0:cd:a6:0a:4c:43:
         22:4f:39:69:6d:ab:ba:32:81:48:c9:22:a6:02:f5:06:7b:cf:
         80:90:c6:f3:c7:dc:61:54:a7:46:a3:52:c4:94:11:1d:80:db:
         34:57:d7:83:76:e6:4c:3c:1a:e3:e5:c6:66:a8:ab:7e:03:c4:
         23:60:c8:f6:d2:59:2f:15:56:c0:0f:0b:a7:67:54:7e:4a:fd:
         fb:67:f4:b7:bf:db:a7:30:d1:05:83:f7:51:72:b8:b4:d2:c8:
         66:86:2c:6a:b6:9f:80:34:be:6b:2a:c5:cb:44:de:9a:f2:62:
         a2:8a:0c:6e:af:7f:fe:13:83:e4:8f:86:8a:05:f8:f8:3f:ce:
         1d:fe:a2:19:4d:09:31:e1:ac:7a:72:c8:b1:35:21:fe:51:27:
         09:11:e2:55:0c:fe:af:af:0e:9f:cd:69:14:c3:3e:1a:9c:87:
         de:19:3f:0d:30:ac:1a:37:6a:97:74:27:19:5a:48:0a:9d:39:
         e8:89:a2:bd:f2:fb:eb:3c:5b:27:70:1c:5c:60:8c:f6:98:9a:
         cf:b9:70:ee:cb:d9:73:97:1b:9f:6b:95:b1:4a:a9:dc:5d:a5:
         cd:4a:ff:cb:aa:9a:23:cc:6f:fd:a9:f4:a7:38:4a:53:27:4e:
         0e:b1:34:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 11:07:05 2025 by rpki-client