Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/2933802b-551b-31b7-9d2a-71696f02cf24.roa
File:                     2933802b-551b-31b7-9d2a-71696f02cf24.roa (raw, json)
Hash identifier:          ipDxPKDbiT12TG8vwrqAJNSznHM8OeFikkz1QummvZs=
Subject key identifier:   7A:D9:E2:E9:78:F3:74:A4:DB:73:98:7A:B8:4E:51:7A:C4:F4:1E:65
Certificate issuer:       /CN=b0ca02e7-7a12-4d90-8feb-8f130aaea380
Certificate serial:       010D0C9F4328584B4D11CF948EAAC7CE5F30D080
Authority key identifier: EF:E8:C5:96:3E:3D:66:15:2E:A7:51:BE:9C:66:0C:95:32:89:A4:5B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/2933802b-551b-31b7-9d2a-71696f02cf24.roa
Signing time:             Wed 24 Sep 2025 13:00:41 +0000
ROA not before:           Wed 24 Sep 2025 13:00:41 +0000
ROA not after:            Tue 23 Dec 2025 14:00:41 +0000
asID:                     14618
IP address blocks:        164.55.239.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/b0ca02e7-7a12-4d90-8feb-8f130aaea380.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/b0ca02e7-7a12-4d90-8feb-8f130aaea380.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:4d:11:cf:94:8e:aa:c7:ce:5f:30:d0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0ca02e7-7a12-4d90-8feb-8f130aaea380
        Validity
            Not Before: Sep 24 13:00:41 2025 GMT
            Not After : Dec 23 14:00:41 2025 GMT
        Subject: CN=5c8e42c9-239d-47be-9a6d-bf27046a9e76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:90:53:f2:61:d4:7b:70:bd:29:dd:c0:b9:10:
                    75:f5:e5:7e:cd:31:4f:47:19:b0:e4:4d:b1:c4:43:
                    b6:ff:aa:a1:0c:4d:50:4c:51:72:77:75:e6:26:ae:
                    03:d6:df:46:56:9c:c9:a1:66:b1:34:f9:ea:c1:38:
                    7c:39:5b:02:41:86:17:55:e4:ff:4c:21:7e:f1:0e:
                    32:a6:d0:73:1f:13:45:9a:99:7a:8e:76:0f:d3:09:
                    b1:16:5d:a2:6c:27:87:0c:51:8c:d6:d0:25:c6:2e:
                    fa:2c:a6:d3:32:41:59:dc:8e:d4:65:22:e2:4e:9f:
                    de:c3:b9:56:f7:a1:8c:ea:4f:16:66:db:50:ec:71:
                    66:a9:48:55:23:6e:70:e9:e9:bd:34:22:47:5a:d1:
                    a3:90:63:a1:17:7d:e8:f1:ac:6f:1d:71:d6:21:bf:
                    ad:e6:86:1e:41:68:74:19:e8:57:69:84:b2:02:83:
                    42:b2:0a:16:8b:af:d6:23:8e:ee:d0:60:5d:28:d6:
                    2d:97:92:e5:62:8e:68:05:39:54:e0:3e:00:2c:c8:
                    76:9e:3f:a7:75:e1:51:3c:82:b5:3d:bd:8b:ba:19:
                    84:85:ee:ff:fa:34:c3:9c:42:29:0d:66:6e:b0:21:
                    4b:a7:47:88:94:a6:11:8b:08:13:9c:23:27:3f:f5:
                    e4:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:D9:E2:E9:78:F3:74:A4:DB:73:98:7A:B8:4E:51:7A:C4:F4:1E:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/2933802b-551b-31b7-9d2a-71696f02cf24.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/b0ca02e7-7a12-4d90-8feb-8f130aaea380.crl

            X509v3 Authority Key Identifier:
                keyid:EF:E8:C5:96:3E:3D:66:15:2E:A7:51:BE:9C:66:0C:95:32:89:A4:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.55.239.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:1d:b3:fc:cb:98:0f:d4:f3:e3:0c:00:9a:93:80:1e:06:3e:
         f5:7b:54:48:29:ea:01:43:9d:b4:32:57:5e:a5:e7:53:5a:fc:
         fe:f3:d7:53:45:80:76:3c:bf:bf:0d:ab:eb:9d:04:c2:57:bc:
         55:4d:32:00:73:4a:17:52:bd:36:8c:4d:39:15:17:b5:58:48:
         98:0c:49:5f:9b:ae:07:78:3b:4c:44:ca:57:f1:ae:e8:23:01:
         c3:32:ec:0e:a0:d0:8d:c6:10:a0:b3:07:49:ad:69:3f:2c:5d:
         05:63:fc:dd:6b:12:50:02:09:14:47:38:74:c6:da:fe:1c:03:
         92:a2:3c:2b:64:b1:92:ba:78:eb:98:db:09:7b:88:11:0f:85:
         1f:a4:a2:25:26:f7:2c:56:f2:cd:94:c6:64:cd:86:0f:62:91:
         a2:ff:09:12:26:c8:a1:64:97:a9:39:0d:96:08:6f:62:44:4a:
         1f:b9:9f:d3:36:60:f3:4c:a8:31:46:3a:4e:81:54:cc:46:50:
         f6:8c:4d:4b:39:a2:11:93:14:55:3c:30:59:d2:c6:e8:75:ca:
         3c:91:cd:03:c0:0d:ad:2c:1a:01:5a:c1:69:a0:4f:85:48:2d:
         64:d7:03:80:a4:75:5e:eb:ef:be:23:23:b7:da:e4:19:8b:31:
         a5:44:8d:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:43:37 2025 by rpki-client