Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7875058f-5363-4bbc-9de7-bfd669c88bd9/6e84ed7b-3df5-3929-82e8-5dbf0e916a2f.roa
File:                     6e84ed7b-3df5-3929-82e8-5dbf0e916a2f.roa (raw, json)
Hash identifier:          MfuZ87up6ymnEdgE373xbSfTVn6oWUnXRLM4Hn7OCHQ=
Subject key identifier:   F1:44:98:21:76:CF:FE:E6:E1:03:B7:B5:AC:30:97:64:70:23:12:40
Certificate issuer:       /CN=7875058f-5363-4bbc-9de7-bfd669c88bd9
Certificate serial:       010D0C9F4328584EA5AA789B8178713F03172B40
Authority key identifier: 60:F8:59:9A:79:56:37:4D:45:E0:02:ED:58:C0:8D:19:18:5B:AC:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7875058f-5363-4bbc-9de7-bfd669c88bd9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7875058f-5363-4bbc-9de7-bfd669c88bd9/6e84ed7b-3df5-3929-82e8-5dbf0e916a2f.roa
Signing time:             Tue 28 Jul 2026 09:00:11 +0000
ROA not before:           Tue 28 Jul 2026 09:00:11 +0000
ROA not after:            Mon 26 Oct 2026 09:00:11 +0000
asID:                     174
IP address blocks:        137.155.0.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7875058f-5363-4bbc-9de7-bfd669c88bd9/7875058f-5363-4bbc-9de7-bfd669c88bd9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7875058f-5363-4bbc-9de7-bfd669c88bd9/7875058f-5363-4bbc-9de7-bfd669c88bd9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7875058f-5363-4bbc-9de7-bfd669c88bd9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a5:aa:78:9b:81:78:71:3f:03:17:2b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7875058f-5363-4bbc-9de7-bfd669c88bd9
        Validity
            Not Before: Jul 28 09:00:11 2026 GMT
            Not After : Oct 26 09:00:11 2026 GMT
        Subject: CN=e3634c0d-d14d-4b28-a0c1-47a1392c8d5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:5f:3d:58:8d:ca:95:a8:45:99:32:f3:d4:df:
                    fe:c9:13:66:32:3f:fe:ff:3a:f0:17:8f:f3:26:11:
                    58:93:87:45:78:d0:15:0c:e4:a9:71:62:af:30:10:
                    8d:bd:04:1b:28:07:a6:a3:59:37:5d:ef:8c:60:e5:
                    79:3e:1b:75:82:98:13:96:1b:c4:ee:93:04:cc:38:
                    fc:1f:db:6a:06:28:8d:a5:7c:ea:94:71:83:2d:a2:
                    ad:52:7a:34:5f:36:43:c9:91:50:1a:c9:70:1a:31:
                    ea:9a:88:60:77:05:6d:5a:88:98:63:90:8e:6e:07:
                    9d:93:e1:6d:33:9a:9a:0a:70:77:66:6d:9d:15:ba:
                    8f:e1:f3:49:56:34:74:a1:a1:6b:49:cb:95:6f:d9:
                    17:95:7b:f0:94:e0:20:68:7a:a5:37:9f:44:0b:75:
                    e8:87:bd:7c:0b:a0:dc:c7:9a:f6:16:c4:28:a5:96:
                    7c:96:5e:fd:31:99:30:e1:9f:d4:25:a6:ef:3a:c0:
                    b1:20:24:e7:51:23:e7:74:be:32:8f:a0:e8:2f:f7:
                    e2:83:56:40:45:7a:31:53:74:b0:5e:15:ce:9b:d4:
                    6c:32:9b:29:b9:41:44:b6:64:9e:aa:21:e6:bf:8b:
                    da:3e:50:d7:98:d0:00:de:3a:48:2a:55:c1:79:09:
                    54:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:44:98:21:76:CF:FE:E6:E1:03:B7:B5:AC:30:97:64:70:23:12:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7875058f-5363-4bbc-9de7-bfd669c88bd9/6e84ed7b-3df5-3929-82e8-5dbf0e916a2f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7875058f-5363-4bbc-9de7-bfd669c88bd9/7875058f-5363-4bbc-9de7-bfd669c88bd9.crl

            X509v3 Authority Key Identifier:
                keyid:60:F8:59:9A:79:56:37:4D:45:E0:02:ED:58:C0:8D:19:18:5B:AC:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7875058f-5363-4bbc-9de7-bfd669c88bd9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.155.0.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:c8:f4:1c:a1:e1:0e:d4:bf:31:2d:d3:16:6c:23:cc:3e:3e:
         05:59:24:b5:11:e7:4a:1a:69:86:c0:04:42:19:e9:d8:f5:1c:
         8c:09:f1:06:db:b6:20:81:ce:0d:cc:d6:90:8f:6b:74:bd:a6:
         10:ac:07:d1:ba:34:0d:cb:5f:1f:a6:d5:38:8b:41:7d:00:75:
         e8:60:7a:27:80:79:c8:3f:1d:93:8a:a1:e5:89:ac:f4:48:f3:
         22:4c:56:d1:f9:71:e3:f1:ef:c8:0e:47:51:30:b3:6c:00:89:
         31:c9:2a:88:7e:b2:f4:d2:30:94:5a:7e:a7:43:7a:d2:0f:4f:
         5a:e0:c1:42:d3:cf:b6:5f:ce:2b:bd:c5:5b:73:08:2a:82:09:
         e3:04:34:f1:ad:1d:27:15:fb:79:d0:21:4b:7c:c4:1c:0a:c4:
         d2:f5:d3:e3:b5:73:1b:69:2d:b1:72:98:a2:26:8d:98:31:22:
         0e:54:8a:1f:3e:70:4f:52:6f:e7:e0:46:0b:84:16:3b:f9:64:
         e1:e9:d3:1d:59:ea:28:47:53:0b:fe:27:fb:8a:09:ce:d7:3e:
         b2:1e:30:64:62:9b:49:4f:d0:6c:e3:e9:46:e9:81:a5:d5:25:
         72:b2:b0:0d:87:42:e8:12:cd:cf:91:3c:19:2c:b5:c0:30:51:
         3b:26:d0:49
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6lqnibgXhxPwMXK0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzg3NTA1OGYtNTM2My00YmJjLTlkZTctYmZkNjY5Yzg4
YmQ5MB4XDTI2MDcyODA5MDAxMVoXDTI2MTAyNjA5MDAxMVowLzEtMCsGA1UEAxMk
ZTM2MzRjMGQtZDE0ZC00YjI4LWEwYzEtNDdhMTM5MmM4ZDVlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0V89WI3KlahFmTLz1N/+yRNmMj/+/zrwF4/z
JhFYk4dFeNAVDOSpcWKvMBCNvQQbKAemo1k3Xe+MYOV5Pht1gpgTlhvE7pMEzDj8
H9tqBiiNpXzqlHGDLaKtUno0XzZDyZFQGslwGjHqmohgdwVtWoiYY5CObgedk+Ft
M5qaCnB3Zm2dFbqP4fNJVjR0oaFrScuVb9kXlXvwlOAgaHqlN59EC3Xoh718C6Dc
x5r2FsQopZZ8ll79MZkw4Z/UJabvOsCxICTnUSPndL4yj6DoL/fig1ZARXoxU3Sw
XhXOm9RsMpspuUFEtmSeqiHmv4vaPlDXmNAA3jpIKlXBeQlU0wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPFEmCF2z/7m4QO3tawwl2RwIxJAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ODc1
MDU4Zi01MzYzLTRiYmMtOWRlNy1iZmQ2NjljODhiZDkvNmU4NGVkN2ItM2RmNS0z
OTI5LTgyZTgtNWRiZjBlOTE2YTJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNzg3NTA1OGYtNTM2My00YmJjLTlk
ZTctYmZkNjY5Yzg4YmQ5Lzc4NzUwNThmLTUzNjMtNGJiYy05ZGU3LWJmZDY2OWM4
OGJkOS5jcmwwHwYDVR0jBBgwFoAUYPhZmnlWN01F4ALtWMCNGRhbrAMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy83ODc1MDU4Zi01MzYzLTRiYmMtOWRlNy1iZmQ2
NjljODhiZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFiZsAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJHI9Byh4Q7UvzEt0xZsI8w+PgVZJLUR50oaaYbABEIZ6dj1HIwJ8Qbb
tiCBzg3M1pCPa3S9phCsB9G6NA3LXx+m1TiLQX0AdehgeieAecg/HZOKoeWJrPRI
8yJMVtH5cePx78gOR1Ews2wAiTHJKoh+svTSMJRafqdDetIPT1rgwULTz7Zfziu9
xVtzCCqCCeMENPGtHScV+3nQIUt8xBwKxNL10+O1cxtpLbFymKImjZgxIg5Uih8+
cE9Sb+fgRguEFjv5ZOHp0x1Z6ihHUwv+J/uKCc7XPrIeMGRim0lP0Gzj6UbpgaXV
JXKysA2HQugSzc+RPBkstcAwUTsm0Ek=
-----END CERTIFICATE-----
Generated at Tue Jul 28 18:19:12 2026 by rpki-client