Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/3d7eecbf-fa1b-36f8-af1f-85713bbeb9c8.roa
File:                     3d7eecbf-fa1b-36f8-af1f-85713bbeb9c8.roa (raw, json)
Hash identifier:          GWqKHHKL5KIQQ0SR+L9HSup8sq/x4+NcbQnKDVNbAMM=
Subject key identifier:   86:4A:5A:74:B2:DF:2C:AC:6F:25:EC:C2:2D:91:45:A0:7B:80:CA:2D
Certificate issuer:       /CN=b0ca02e7-7a12-4d90-8feb-8f130aaea380
Certificate serial:       010D0C9F4328584B4D11CFAA3C69C512BF198780
Authority key identifier: EF:E8:C5:96:3E:3D:66:15:2E:A7:51:BE:9C:66:0C:95:32:89:A4:5B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/3d7eecbf-fa1b-36f8-af1f-85713bbeb9c8.roa
Signing time:             Wed 24 Sep 2025 13:00:41 +0000
ROA not before:           Wed 24 Sep 2025 13:00:41 +0000
ROA not after:            Tue 23 Dec 2025 14:00:41 +0000
asID:                     14618
IP address blocks:        164.55.227.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/b0ca02e7-7a12-4d90-8feb-8f130aaea380.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/b0ca02e7-7a12-4d90-8feb-8f130aaea380.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:4d:11:cf:aa:3c:69:c5:12:bf:19:87:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0ca02e7-7a12-4d90-8feb-8f130aaea380
        Validity
            Not Before: Sep 24 13:00:41 2025 GMT
            Not After : Dec 23 14:00:41 2025 GMT
        Subject: CN=1e7d3993-f951-4484-a898-cd9bd98d9724
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:52:f3:07:d7:e3:c4:1a:a1:8c:2e:5e:b2:a9:
                    b5:f6:ff:f8:4d:d4:cb:a5:c0:8d:3d:0b:d6:5d:f0:
                    46:05:3c:a9:16:cd:46:df:7a:4b:fd:88:9e:73:41:
                    06:55:b7:38:0e:d4:85:9e:80:5f:d5:f3:3f:88:7d:
                    c7:01:b2:66:1c:b1:1f:1f:0a:d3:d8:4f:e6:88:60:
                    94:f2:bb:26:b7:4b:28:e5:52:46:ff:76:e3:e8:eb:
                    73:57:c0:72:70:52:53:66:48:5c:85:34:ae:83:5f:
                    67:5d:69:10:6b:81:86:28:4a:eb:62:5f:dd:50:52:
                    25:2a:6d:9a:66:cf:71:4f:a1:ec:52:f2:8e:06:02:
                    0d:ce:b9:b4:6e:c4:49:fb:87:2e:bf:86:9f:db:34:
                    5d:c3:16:a9:03:12:6d:ff:aa:4e:7a:5c:04:c9:81:
                    3e:8a:30:0b:f2:4b:c4:af:25:3f:e3:02:42:6d:5c:
                    79:cc:c2:73:28:ff:79:9b:1a:49:46:b8:e9:f7:84:
                    b8:3e:60:9b:37:6b:02:32:06:2c:02:13:a1:b3:5d:
                    7c:9d:3a:72:c9:12:f1:35:2a:df:89:1a:d6:7a:94:
                    4d:07:9d:f3:2c:35:b0:91:2d:97:d2:3c:17:5b:8a:
                    2f:e4:34:aa:4f:a6:79:d9:d8:c0:c8:01:3d:7f:bd:
                    28:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:4A:5A:74:B2:DF:2C:AC:6F:25:EC:C2:2D:91:45:A0:7B:80:CA:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/3d7eecbf-fa1b-36f8-af1f-85713bbeb9c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/b0ca02e7-7a12-4d90-8feb-8f130aaea380.crl

            X509v3 Authority Key Identifier:
                keyid:EF:E8:C5:96:3E:3D:66:15:2E:A7:51:BE:9C:66:0C:95:32:89:A4:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.55.227.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:86:ad:db:01:cb:f8:eb:71:23:f0:c1:6c:48:15:9d:36:2b:
         8d:d8:57:27:68:26:b7:35:10:91:93:e0:40:6f:a2:93:6b:cf:
         01:e5:9a:cb:c7:51:40:3a:34:7d:94:2f:f7:69:25:a8:5c:33:
         80:a9:64:3f:f0:5c:be:1e:3d:12:2d:76:f5:1a:a0:e4:c9:02:
         70:7f:b5:fd:de:a2:f1:3c:9c:dd:f4:c9:31:76:22:25:07:68:
         80:5e:ff:1d:8b:ee:9b:13:b2:83:50:33:21:44:15:47:ef:43:
         c6:94:66:bd:cd:26:a5:ad:45:2b:b4:6f:75:1c:9c:b4:2e:73:
         b4:00:3c:c2:a6:d7:a1:a7:a1:33:f6:27:47:82:82:59:33:cf:
         55:74:26:94:cd:8f:15:62:70:9a:de:12:c5:34:56:d1:69:70:
         3b:21:25:f4:cb:a1:99:af:1c:16:66:df:16:3d:82:b0:cb:5b:
         42:6c:9f:a5:73:d2:5a:86:9b:e0:40:4c:22:e7:63:19:1c:bf:
         3f:c1:55:df:04:f9:e0:a5:25:4f:a1:88:fe:a5:ed:f9:c2:2a:
         95:99:5c:dd:f6:8a:55:a6:64:36:42:d8:60:db:cd:73:0f:a5:
         a2:6f:43:05:9a:3a:c9:b5:0c:dc:37:69:17:b9:9b:ed:a2:6c:
         5f:54:88:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:05:02 2025 by rpki-client