Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7875058f-5363-4bbc-9de7-bfd669c88bd9/5df62d47-bccf-3b46-bdf0-3abad3b81786.roa
File:                     5df62d47-bccf-3b46-bdf0-3abad3b81786.roa (raw, json)
Hash identifier:          EQcM/rSlBt+cd9ICLk0xfT+VrShqboXA5meGR8POkjM=
Subject key identifier:   B0:E6:E2:8B:04:32:58:73:58:CE:19:AD:AD:A8:47:67:32:ED:82:D9
Certificate issuer:       /CN=7875058f-5363-4bbc-9de7-bfd669c88bd9
Certificate serial:       010D0C9F4328584DC565A2870991AF21EBA6C600
Authority key identifier: 60:F8:59:9A:79:56:37:4D:45:E0:02:ED:58:C0:8D:19:18:5B:AC:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7875058f-5363-4bbc-9de7-bfd669c88bd9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7875058f-5363-4bbc-9de7-bfd669c88bd9/5df62d47-bccf-3b46-bdf0-3abad3b81786.roa
Signing time:             Sat 09 May 2026 01:00:25 +0000
ROA not before:           Sat 09 May 2026 01:00:25 +0000
ROA not after:            Fri 07 Aug 2026 01:00:25 +0000
asID:                     6079
IP address blocks:        137.155.64.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7875058f-5363-4bbc-9de7-bfd669c88bd9/7875058f-5363-4bbc-9de7-bfd669c88bd9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7875058f-5363-4bbc-9de7-bfd669c88bd9/7875058f-5363-4bbc-9de7-bfd669c88bd9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7875058f-5363-4bbc-9de7-bfd669c88bd9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c5:65:a2:87:09:91:af:21:eb:a6:c6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7875058f-5363-4bbc-9de7-bfd669c88bd9
        Validity
            Not Before: May  9 01:00:25 2026 GMT
            Not After : Aug  7 01:00:25 2026 GMT
        Subject: CN=987f5af3-3c27-423b-abb7-7136a468c862
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:4f:ef:d4:36:cc:a4:b7:d2:1c:73:00:87:60:
                    d6:5e:cd:6e:ec:5e:42:eb:10:ca:ad:d4:42:20:71:
                    c4:77:d9:67:ab:df:db:57:28:ae:9a:23:85:6e:23:
                    48:37:2c:78:d5:ab:1d:57:51:dc:63:a2:f4:18:2f:
                    30:0d:e8:3b:c7:ec:e2:91:61:d0:b9:da:5d:9a:18:
                    3b:c7:f6:b0:56:c6:fa:e3:83:07:df:82:29:ee:7d:
                    28:01:47:29:cb:dd:43:6d:8f:cd:ff:af:da:ce:ca:
                    a5:b4:37:e2:84:08:13:b7:b9:d9:ac:01:b1:50:68:
                    f3:57:f3:a1:d7:96:e4:b8:03:40:8a:00:9b:53:07:
                    7e:95:04:40:73:4a:3f:45:ba:a7:a0:0e:d1:55:dd:
                    e9:a1:7f:2a:35:2a:68:28:38:43:cb:ff:cc:61:d2:
                    11:91:75:8b:c7:45:2c:09:7d:c0:ba:7f:fc:02:6e:
                    3f:7d:5c:2c:4d:96:44:2d:00:ed:5f:b8:7f:89:bf:
                    05:2d:7d:5e:b4:cc:1b:99:3d:e0:fe:71:73:07:d5:
                    de:36:aa:05:29:45:42:7e:b4:3a:37:98:bc:8a:e9:
                    bf:60:0b:30:8a:8b:e1:ea:a1:51:3f:a8:ec:51:9a:
                    eb:e5:73:eb:dc:7b:59:c7:f1:27:24:02:21:b0:d1:
                    35:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:E6:E2:8B:04:32:58:73:58:CE:19:AD:AD:A8:47:67:32:ED:82:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7875058f-5363-4bbc-9de7-bfd669c88bd9/5df62d47-bccf-3b46-bdf0-3abad3b81786.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7875058f-5363-4bbc-9de7-bfd669c88bd9/7875058f-5363-4bbc-9de7-bfd669c88bd9.crl

            X509v3 Authority Key Identifier:
                keyid:60:F8:59:9A:79:56:37:4D:45:E0:02:ED:58:C0:8D:19:18:5B:AC:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7875058f-5363-4bbc-9de7-bfd669c88bd9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.155.64.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:2a:66:28:6b:7f:4c:67:24:d7:95:da:5f:f8:31:99:75:af:
         b2:c9:1c:93:91:cf:bc:7a:69:ad:59:6f:65:b8:3b:56:9a:b1:
         23:3c:82:65:d0:97:97:f3:e3:94:ce:f6:d3:9c:4a:1d:30:51:
         15:56:b3:32:f9:f3:cf:05:3c:bf:9c:39:18:cb:f5:9f:42:2a:
         fa:c4:66:6a:9d:81:8d:69:a6:7f:47:3e:84:3b:47:33:d3:a1:
         bf:70:be:03:7b:1c:11:6c:69:45:99:c4:43:1d:60:77:d6:69:
         25:ab:a0:e3:7d:52:33:81:b5:e0:7d:fd:71:7c:90:90:8d:fc:
         30:d9:e0:e5:c4:b9:1d:e3:a1:1f:94:95:08:e8:21:5c:39:63:
         2b:62:1d:0c:48:69:62:df:fd:bc:dd:92:68:98:64:2f:cb:43:
         b2:21:aa:63:0a:1c:a9:bd:d8:06:a9:a6:4d:8e:89:d8:95:f4:
         d6:09:d7:6d:5e:46:d9:5d:45:3f:d9:e3:07:b2:c8:6c:a7:99:
         a8:3d:e2:24:f2:07:31:82:f1:ba:df:aa:40:20:35:84:2e:77:
         90:5a:b4:e0:79:97:ae:5c:91:28:35:72:d2:2d:57:0f:58:5a:
         72:c4:a5:fa:8f:49:80:3d:8a:69:3c:3e:99:69:34:98:de:f5:
         6c:36:a1:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:21:26 2026 by rpki-client