Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/e93ca3b3-5ccf-3d37-b699-9b00626e5df0.roa
File:                     e93ca3b3-5ccf-3d37-b699-9b00626e5df0.roa (raw, json)
Hash identifier:          DiZNW5AwAW3kboEE5Oh/L4Dq+6cMucKr78hcY93jOPs=
Subject key identifier:   BC:00:7C:0B:25:65:F1:03:0A:44:42:90:27:DA:5A:AB:0F:58:38:91
Certificate issuer:       /CN=b0ca02e7-7a12-4d90-8feb-8f130aaea380
Certificate serial:       010D0C9F4328584D0D424FB94ACD4995099F5400
Authority key identifier: EF:E8:C5:96:3E:3D:66:15:2E:A7:51:BE:9C:66:0C:95:32:89:A4:5B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/e93ca3b3-5ccf-3d37-b699-9b00626e5df0.roa
Signing time:             Wed 04 Mar 2026 02:00:32 +0000
ROA not before:           Wed 04 Mar 2026 02:00:32 +0000
ROA not after:            Tue 02 Jun 2026 01:00:32 +0000
asID:                     16509
IP address blocks:        164.55.224.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/b0ca02e7-7a12-4d90-8feb-8f130aaea380.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/b0ca02e7-7a12-4d90-8feb-8f130aaea380.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:0d:42:4f:b9:4a:cd:49:95:09:9f:54:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0ca02e7-7a12-4d90-8feb-8f130aaea380
        Validity
            Not Before: Mar  4 02:00:32 2026 GMT
            Not After : Jun  2 01:00:32 2026 GMT
        Subject: CN=dfe528db-5774-406c-b848-2899c53dfcbf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:5d:4c:49:99:ff:44:8a:2d:46:ca:2a:97:57:
                    52:78:22:7c:82:59:7c:52:74:c9:08:24:fe:11:a6:
                    09:eb:3f:28:ba:48:bf:57:3a:b7:56:be:70:af:5c:
                    c5:a7:f5:b0:7d:78:c0:38:3f:e6:22:97:53:83:88:
                    73:80:0b:de:d9:37:83:30:00:5d:3d:88:48:ca:3c:
                    3f:74:2d:c4:84:52:39:f6:0c:6d:14:c1:39:4c:56:
                    79:10:e6:99:06:ee:50:a7:a4:28:d5:41:20:fb:e5:
                    e5:c4:88:ca:04:20:b4:a6:97:29:52:65:cf:f2:a2:
                    f7:eb:80:5d:10:0d:8e:1f:f4:f0:f2:75:5e:96:b3:
                    2e:da:80:b1:19:da:23:a1:76:6d:ae:41:17:d7:79:
                    96:5c:98:d2:b3:79:2a:a4:4f:f0:27:20:9c:17:9f:
                    3f:17:1b:f5:cd:4d:0d:cf:e4:65:6b:f8:b7:b4:aa:
                    97:78:b2:a4:8c:41:a6:a8:cb:5c:05:d6:04:c4:f3:
                    7d:b6:c2:2a:48:2f:ff:05:f1:05:69:d2:1b:bf:24:
                    16:f0:ee:45:1c:a2:6f:3a:88:3f:8c:2e:24:ab:d3:
                    51:8b:c6:23:7a:d5:ee:ef:15:a7:8e:9e:8e:dd:32:
                    fe:92:b8:0f:75:3d:5e:e9:05:7b:fa:73:42:80:62:
                    6d:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:00:7C:0B:25:65:F1:03:0A:44:42:90:27:DA:5A:AB:0F:58:38:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/e93ca3b3-5ccf-3d37-b699-9b00626e5df0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/b0ca02e7-7a12-4d90-8feb-8f130aaea380.crl

            X509v3 Authority Key Identifier:
                keyid:EF:E8:C5:96:3E:3D:66:15:2E:A7:51:BE:9C:66:0C:95:32:89:A4:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.55.224.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:77:73:20:dc:3a:1d:a5:cc:1f:27:61:6e:5f:e1:7d:33:ac:
         34:19:32:b2:fa:0e:a6:54:72:52:16:6f:3a:b2:d2:3e:1e:30:
         01:fd:37:26:2b:8e:5f:fd:92:7b:6d:cc:06:fd:9a:f8:fb:ac:
         73:33:5b:b4:84:49:61:2a:04:a4:2a:ae:e9:66:0f:f2:62:82:
         a8:2b:39:48:7f:1a:7e:94:2b:d5:d9:3c:c1:ca:4a:66:34:82:
         1f:46:16:35:3a:22:b5:a9:d3:eb:6e:f7:c4:6b:a3:1b:4c:71:
         1d:2c:2d:55:29:9e:6f:03:65:f5:76:cf:53:b1:d1:b3:c8:df:
         a0:a4:f6:b0:b8:88:b3:70:60:b9:a5:3b:b1:51:70:15:4b:08:
         eb:1f:99:af:5c:b9:9b:df:e8:96:71:ed:dd:54:e8:5d:f7:52:
         16:2b:40:3c:cb:03:56:2d:bf:30:30:49:e3:59:2d:af:a8:c7:
         77:6c:07:74:2c:b2:61:20:fe:a8:f6:aa:74:ec:d5:c4:33:6f:
         8b:12:81:ad:17:ad:3f:63:be:ee:e3:d6:6c:ed:23:84:6b:e6:
         b5:35:61:5d:59:72:a2:5e:63:a3:ea:3e:2b:f0:6d:b9:88:39:
         25:36:3d:9d:aa:0e:6d:95:72:9e:07:b7:fc:e4:fc:06:10:36:
         43:c3:5a:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:45:33 2026 by rpki-client