Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/52fce1ba-c12a-327a-9545-c46f73eef05c.roa
File:                     52fce1ba-c12a-327a-9545-c46f73eef05c.roa (raw, json)
Hash identifier:          6SqIOFStIML6HA6qzNM7lCrtsVMjpANwf82DSaBLB1g=
Subject key identifier:   A2:52:A6:6E:6F:13:83:13:82:7E:0F:9A:E3:14:4B:86:87:01:4F:2A
Certificate issuer:       /CN=b0ca02e7-7a12-4d90-8feb-8f130aaea380
Certificate serial:       010D0C9F4328584AD23BACF1116D0B84634E1A80
Authority key identifier: EF:E8:C5:96:3E:3D:66:15:2E:A7:51:BE:9C:66:0C:95:32:89:A4:5B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/52fce1ba-c12a-327a-9545-c46f73eef05c.roa
Signing time:             Mon 11 Aug 2025 13:00:40 +0000
ROA not before:           Mon 11 Aug 2025 13:00:40 +0000
ROA not after:            Sun 09 Nov 2025 14:00:40 +0000
asID:                     14618
IP address blocks:        164.55.235.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/b0ca02e7-7a12-4d90-8feb-8f130aaea380.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/b0ca02e7-7a12-4d90-8feb-8f130aaea380.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d2:3b:ac:f1:11:6d:0b:84:63:4e:1a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0ca02e7-7a12-4d90-8feb-8f130aaea380
        Validity
            Not Before: Aug 11 13:00:40 2025 GMT
            Not After : Nov  9 14:00:40 2025 GMT
        Subject: CN=bead8fd4-4353-4a87-8118-6ad7414a17e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:2f:03:5d:57:01:70:99:98:2f:ec:1b:ad:c1:
                    0c:5c:a0:fc:f7:27:d9:44:d7:53:c9:e7:61:26:7d:
                    53:2b:3a:9d:21:4c:8f:06:c6:d4:00:d1:79:aa:6f:
                    5a:34:7f:50:99:37:63:ff:00:c5:0b:10:19:e9:e5:
                    e5:fa:15:be:83:41:07:88:f2:e1:db:71:3e:24:25:
                    d2:5b:61:ef:cc:b9:bd:98:17:b1:36:31:aa:e3:0b:
                    d7:df:63:ec:85:8d:43:6f:3c:ae:b9:31:b4:1f:68:
                    61:b4:28:83:f6:5f:a5:7f:d6:8c:cd:90:83:35:d0:
                    bb:ff:dd:69:26:ff:06:f8:c7:1e:7e:cf:32:c7:15:
                    91:83:63:17:86:33:2c:3c:e6:b4:db:95:07:7e:12:
                    80:a7:17:bc:07:ac:5b:08:00:88:d8:ee:77:68:ee:
                    65:dd:0c:06:9e:79:cf:f0:8b:99:85:7c:a5:f1:01:
                    f5:b3:33:4e:66:d0:97:ef:0e:37:8a:bc:68:1b:6b:
                    76:78:37:66:22:7e:7a:15:75:5d:92:f0:37:90:66:
                    f6:61:32:a7:db:d6:7d:83:b9:4d:7e:fc:3b:cc:43:
                    63:16:83:11:ac:ae:7e:f3:07:be:74:c8:63:1b:a6:
                    e1:f7:20:28:fd:ab:36:26:4e:ce:64:ca:9c:d7:23:
                    c8:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:52:A6:6E:6F:13:83:13:82:7E:0F:9A:E3:14:4B:86:87:01:4F:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/52fce1ba-c12a-327a-9545-c46f73eef05c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/b0ca02e7-7a12-4d90-8feb-8f130aaea380.crl

            X509v3 Authority Key Identifier:
                keyid:EF:E8:C5:96:3E:3D:66:15:2E:A7:51:BE:9C:66:0C:95:32:89:A4:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.55.235.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:3e:24:a7:43:7d:71:a4:96:39:1f:fa:e5:2d:ae:f3:af:f1:
         b7:65:20:85:f3:d9:d7:b0:0e:1c:75:db:95:0a:22:62:4e:d2:
         fc:e3:eb:58:f2:33:50:f2:a0:cd:f1:b3:2d:6c:b1:89:38:0b:
         89:62:e1:bb:8e:81:78:ce:f3:60:e2:e1:78:5c:0b:66:c4:6b:
         4d:f1:83:eb:85:7e:63:eb:7a:63:19:89:23:4f:12:ca:fc:00:
         33:9a:15:4c:1d:a6:27:b7:db:cb:ad:1e:b3:09:18:d4:0b:5b:
         d3:5a:57:54:0b:5f:d9:e5:5d:c8:16:75:d1:e7:a3:7b:ff:a6:
         e8:63:18:33:62:bd:2a:5f:f8:3c:b0:37:99:34:b1:3f:0b:ef:
         59:12:2d:aa:d4:98:2b:c0:cb:b3:2c:91:8f:0f:85:37:bd:52:
         a2:c8:28:f0:f5:c7:00:52:95:0e:da:91:92:e7:56:8b:2a:56:
         ef:d3:7f:3c:92:eb:69:d2:88:f9:d1:25:fc:10:49:2c:e2:93:
         6e:f6:c8:03:f6:cd:f2:2e:f3:8b:d3:af:f9:2d:c7:92:ca:5d:
         cb:dc:03:a3:e0:15:b9:5e:d5:17:04:fd:18:1d:49:13:9b:34:
         56:c5:1e:32:c6:f5:b3:31:ae:7f:74:bf:38:1d:ed:36:56:f4:
         e9:01:00:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 08:08:47 2025 by rpki-client