Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/b73daea2-b197-3437-85b0-f19adad31931.roa
File:                     b73daea2-b197-3437-85b0-f19adad31931.roa (raw, json)
Hash identifier:          +XewWTsR+9oMQqGzv61YQWOF9cnH8v1flq1CJVGFvc4=
Subject key identifier:   45:BB:81:1D:6D:91:38:9D:8A:82:31:FB:BD:89:2B:F1:8A:2A:AD:D2
Certificate issuer:       /CN=b0ca02e7-7a12-4d90-8feb-8f130aaea380
Certificate serial:       010D0C9F4328584E640F646417B4D213F95E85C0
Authority key identifier: EF:E8:C5:96:3E:3D:66:15:2E:A7:51:BE:9C:66:0C:95:32:89:A4:5B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/b73daea2-b197-3437-85b0-f19adad31931.roa
Signing time:             Sat 04 Jul 2026 21:00:12 +0000
ROA not before:           Sat 04 Jul 2026 21:00:12 +0000
ROA not after:            Fri 02 Oct 2026 21:00:12 +0000
asID:                     14618
IP address blocks:        164.55.236.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/b0ca02e7-7a12-4d90-8feb-8f130aaea380.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/b0ca02e7-7a12-4d90-8feb-8f130aaea380.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:64:0f:64:64:17:b4:d2:13:f9:5e:85:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0ca02e7-7a12-4d90-8feb-8f130aaea380
        Validity
            Not Before: Jul  4 21:00:12 2026 GMT
            Not After : Oct  2 21:00:12 2026 GMT
        Subject: CN=933adac2-1473-4c6d-addf-a9463a9da3fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:f4:ca:04:ad:58:e1:b7:39:d5:96:5e:f7:ce:
                    cb:64:eb:08:43:ef:43:30:bd:20:86:02:8d:84:47:
                    b6:af:6a:f2:e0:f2:d3:12:f4:d7:e8:aa:55:28:0e:
                    0d:7c:40:a2:cb:85:ff:ed:7b:13:ed:5e:9b:e3:9b:
                    8f:47:e1:af:c6:1a:fd:aa:9d:bd:dc:5a:76:4d:58:
                    16:9d:7e:73:79:e3:5c:91:b6:6f:9a:8c:9c:bd:01:
                    fe:10:99:b9:8d:5c:c1:6b:97:25:e4:4a:fa:c5:dd:
                    d8:2c:b4:73:b0:cb:7d:64:01:56:cd:2f:53:12:48:
                    0f:5f:71:9b:a1:6a:50:75:58:03:c1:35:1f:72:d2:
                    e4:28:22:8c:12:ad:b6:4b:e5:02:22:bb:ac:5f:39:
                    a1:1b:3a:cb:96:6a:07:39:2d:af:44:31:ee:4c:fb:
                    a6:76:dd:4a:f5:b4:0c:fc:44:50:65:1f:8f:a9:bd:
                    fe:48:cf:45:48:5f:d4:31:7b:83:2d:60:9b:90:9c:
                    b7:9a:fe:17:f9:7f:de:43:3a:45:64:12:16:49:d6:
                    ed:5e:a8:86:ed:c6:12:31:9c:a0:e5:2f:20:6b:c5:
                    e6:cb:fd:a3:ba:7a:9f:f3:90:72:a0:fd:48:fe:6b:
                    b2:37:3e:26:bc:bc:e4:52:e5:1e:64:21:6e:8a:3f:
                    b7:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:BB:81:1D:6D:91:38:9D:8A:82:31:FB:BD:89:2B:F1:8A:2A:AD:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/b73daea2-b197-3437-85b0-f19adad31931.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/b0ca02e7-7a12-4d90-8feb-8f130aaea380.crl

            X509v3 Authority Key Identifier:
                keyid:EF:E8:C5:96:3E:3D:66:15:2E:A7:51:BE:9C:66:0C:95:32:89:A4:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.55.236.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:05:54:16:58:a0:a5:2d:28:84:f5:4a:53:f1:15:0e:75:46:
         e3:c7:ed:7a:aa:78:5b:91:41:67:0b:47:17:5a:50:0a:f4:07:
         66:87:a4:fd:b7:ff:8d:5d:a0:5c:bd:e9:78:7b:66:36:5d:3f:
         8d:48:4a:29:2f:c2:ad:72:2a:a7:a1:61:d3:3c:1a:51:56:c1:
         fe:ee:ea:0e:ab:5c:99:cf:8a:80:17:6d:cc:16:03:e2:68:63:
         8f:e7:ef:a3:fe:58:2a:72:c1:8a:ea:d7:46:d6:fb:b4:2e:51:
         7c:f2:6e:da:48:18:03:33:49:95:da:3a:e2:c2:c4:b7:96:01:
         2b:de:d1:83:cc:14:d9:ae:b0:56:f7:1d:13:59:28:4c:af:99:
         c3:7b:b7:ff:b5:8a:5e:db:f1:80:8c:ea:3c:67:d5:62:70:1c:
         cb:2f:47:04:4d:df:2e:91:04:04:91:66:de:b4:16:83:4a:a4:
         b6:f2:c8:9d:11:5c:54:3e:1f:aa:55:0d:8b:fc:55:c7:55:a6:
         f3:4e:b9:13:55:8f:53:c9:e2:fd:7d:34:13:46:28:f8:02:39:
         e8:1a:c2:2a:b4:2f:fb:1f:b6:9d:28:42:23:22:c2:a0:68:58:
         7c:84:69:a1:2b:c7:eb:90:b2:1b:76:9d:93:af:bd:e5:5a:b5:
         7f:fa:4c:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:31:29 2026 by rpki-client