Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7875058f-5363-4bbc-9de7-bfd669c88bd9/0da84f32-a3b7-325e-8e88-4a1bb36616de.roa
File:                     0da84f32-a3b7-325e-8e88-4a1bb36616de.roa (raw, json)
Hash identifier:          u7b5RT5rfMvmAq1wkRFchIGRPpa45Oa69OCj2a1ZMJc=
Subject key identifier:   D0:A7:88:C7:65:7B:BF:DC:6C:94:8F:C3:04:E3:82:64:DC:1C:81:BB
Certificate issuer:       /CN=7875058f-5363-4bbc-9de7-bfd669c88bd9
Certificate serial:       010D0C9F4328584A43DB0C021D13517F4EB3B180
Authority key identifier: 60:F8:59:9A:79:56:37:4D:45:E0:02:ED:58:C0:8D:19:18:5B:AC:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7875058f-5363-4bbc-9de7-bfd669c88bd9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7875058f-5363-4bbc-9de7-bfd669c88bd9/0da84f32-a3b7-325e-8e88-4a1bb36616de.roa
Signing time:             Sat 21 Jun 2025 13:01:03 +0000
ROA not before:           Sat 21 Jun 2025 13:01:03 +0000
ROA not after:            Fri 19 Sep 2025 13:01:03 +0000
asID:                     7018
IP address blocks:        137.155.32.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7875058f-5363-4bbc-9de7-bfd669c88bd9/7875058f-5363-4bbc-9de7-bfd669c88bd9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7875058f-5363-4bbc-9de7-bfd669c88bd9/7875058f-5363-4bbc-9de7-bfd669c88bd9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7875058f-5363-4bbc-9de7-bfd669c88bd9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:43:db:0c:02:1d:13:51:7f:4e:b3:b1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7875058f-5363-4bbc-9de7-bfd669c88bd9
        Validity
            Not Before: Jun 21 13:01:03 2025 GMT
            Not After : Sep 19 13:01:03 2025 GMT
        Subject: CN=05f38f85-6dd3-4b59-b647-cc2c6c4006fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:d5:43:d0:e6:7d:f8:65:d8:ba:74:71:a9:62:
                    eb:e8:33:fb:d2:8a:ae:aa:31:b0:b4:1d:83:f5:01:
                    83:36:6c:51:fd:55:fd:37:7d:d5:cd:27:23:d2:0a:
                    58:4e:1d:0b:42:db:17:da:64:1d:8a:3b:51:84:0a:
                    20:d3:46:b5:c9:df:c1:0c:6b:a6:13:80:4d:0d:84:
                    78:9e:f0:89:1b:34:01:07:d6:13:8d:9b:76:6c:89:
                    40:80:81:06:bc:7d:d7:1d:bb:cc:70:47:8f:45:2d:
                    87:82:b7:ba:54:6f:1a:5a:8b:67:38:94:99:56:31:
                    d6:20:3e:f4:1e:d4:76:46:d8:6c:f2:fb:37:ea:4a:
                    08:7f:2a:61:77:fe:c2:d1:87:41:72:85:4c:4b:2d:
                    2c:af:c2:bb:27:99:0a:39:dc:5c:ff:88:73:ed:a7:
                    40:ec:c2:7d:9e:29:f4:bc:bb:90:e5:e0:58:5e:63:
                    19:35:e6:da:01:9e:29:3d:41:53:3d:4f:fa:23:98:
                    78:da:94:71:10:7f:c1:d7:59:fb:6f:41:6c:ed:8a:
                    a5:dd:c7:71:ee:c0:0c:e7:b3:24:b7:e2:a3:57:3a:
                    2f:f8:93:3d:22:15:5c:69:59:db:29:86:b4:b2:4a:
                    c2:3e:98:4f:12:bc:bb:05:7d:9f:34:54:23:06:da:
                    13:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:A7:88:C7:65:7B:BF:DC:6C:94:8F:C3:04:E3:82:64:DC:1C:81:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7875058f-5363-4bbc-9de7-bfd669c88bd9/0da84f32-a3b7-325e-8e88-4a1bb36616de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7875058f-5363-4bbc-9de7-bfd669c88bd9/7875058f-5363-4bbc-9de7-bfd669c88bd9.crl

            X509v3 Authority Key Identifier:
                keyid:60:F8:59:9A:79:56:37:4D:45:E0:02:ED:58:C0:8D:19:18:5B:AC:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7875058f-5363-4bbc-9de7-bfd669c88bd9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.155.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:a0:13:5e:0a:cf:0d:61:6e:da:4c:f0:07:f9:1e:72:be:db:
         8a:4d:6f:ad:e6:a8:e1:e8:bf:28:f9:62:37:dd:85:fa:e2:d0:
         d6:f7:b4:ee:cd:1a:f0:f2:8b:5a:f2:06:d3:d8:1b:fc:57:0c:
         43:0a:61:5a:ba:99:ff:97:e7:70:eb:c0:f2:a2:da:e0:2f:82:
         b8:a9:e9:14:2e:9b:32:89:23:5b:1a:a4:9a:1f:86:c4:a7:fa:
         c6:57:84:01:be:0c:36:45:14:aa:8f:2e:18:8d:4a:0b:7d:47:
         74:80:bf:64:d3:eb:64:ea:2d:15:ea:f6:13:e7:52:3c:51:53:
         fc:af:2b:ea:64:37:45:b0:05:a7:7e:d9:04:da:de:a0:0f:1e:
         4a:bb:ff:b0:7b:01:3a:75:54:ad:67:39:04:50:9c:7f:95:c8:
         92:9e:36:f5:88:3c:4b:58:f6:44:0f:c7:15:1d:1e:ff:b8:36:
         55:ea:87:16:b5:ee:9e:ab:ba:a8:54:4c:65:5d:c0:c3:20:bf:
         ea:60:2f:f0:c0:75:e5:81:8e:82:c1:e8:28:85:55:72:77:db:
         e8:71:e9:5d:62:a7:be:dc:29:e9:64:3b:9d:65:e1:69:34:98:
         c2:44:6f:9b:63:3f:8d:8a:7a:e2:0f:d7:b6:86:ac:9e:61:65:
         50:2d:bb:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 11:39:49 2025 by rpki-client