Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/b4a7d965-70dc-3531-a1ae-a45e975c1b0c.roa
File:                     b4a7d965-70dc-3531-a1ae-a45e975c1b0c.roa (raw, json)
Hash identifier:          rikXEnm6mix30qztH3soDsMZe8m2DqfVTS5hreV5CtU=
Subject key identifier:   68:44:EB:D1:1B:F2:5F:1B:D6:04:64:43:0E:8B:C5:F6:35:D9:A9:A4
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584A94D0D22CE66994738523F660
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/b4a7d965-70dc-3531-a1ae-a45e975c1b0c.roa
Signing time:             Sun 20 Jul 2025 13:01:04 +0000
ROA not before:           Sun 20 Jul 2025 13:01:04 +0000
ROA not after:            Sat 18 Oct 2025 13:01:04 +0000
asID:                     20115
IP address blocks:        192.55.216.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Jul 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:94:d0:d2:2c:e6:69:94:73:85:23:f6:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Jul 20 13:01:04 2025 GMT
            Not After : Oct 18 13:01:04 2025 GMT
        Subject: CN=27e83923-321b-4838-9dd7-a802a4d33a87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:a2:82:85:96:8e:a6:fc:58:5d:24:9a:25:28:
                    b3:e1:4e:fc:45:25:e0:86:0b:7e:fe:1c:54:6b:14:
                    ef:99:50:43:f5:21:ac:91:18:a8:d1:3a:c9:c4:38:
                    28:3e:27:13:e2:46:f1:6f:0b:97:b1:97:4f:b6:03:
                    3f:41:3a:d3:8e:05:11:1d:9d:98:bd:cb:38:6b:78:
                    d0:d7:e1:64:10:f2:9b:7d:d4:d6:f0:bb:4f:db:a5:
                    8b:b9:70:99:62:1d:f4:85:a3:be:43:74:79:a1:5c:
                    95:67:66:77:0f:a8:dc:5a:7d:e2:b5:c4:56:c7:35:
                    40:04:d0:27:53:c2:c4:04:76:68:69:b9:4f:ac:62:
                    e2:a6:90:e8:18:8c:2b:5d:27:3c:ee:27:0b:c4:3a:
                    06:5c:2b:59:75:92:8c:0d:56:17:38:8a:05:3b:6d:
                    0d:bf:af:55:97:7c:40:f1:c0:5c:ed:c7:f5:f0:d6:
                    70:8a:5c:3c:1a:3a:ca:57:ae:f7:bf:c3:6a:50:58:
                    b4:89:75:95:bc:08:eb:69:8d:8c:86:54:38:c3:9d:
                    fd:bf:a3:2c:f5:cb:2b:45:94:b5:9f:cb:d5:3a:54:
                    08:76:3d:e7:47:54:ad:56:83:80:62:43:a3:e3:e4:
                    9b:49:5d:a9:b8:74:cd:13:19:6c:77:ee:a0:02:ca:
                    d5:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:44:EB:D1:1B:F2:5F:1B:D6:04:64:43:0E:8B:C5:F6:35:D9:A9:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/b4a7d965-70dc-3531-a1ae-a45e975c1b0c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.55.216.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:4d:ee:61:d9:e3:c5:a9:67:69:60:f3:0c:60:39:9a:9b:4e:
         a8:ad:00:e8:62:94:4b:19:0e:80:e1:cb:22:58:25:02:6c:8e:
         e5:52:b8:11:d6:15:b1:da:ac:c8:21:a0:44:25:03:78:c5:5c:
         a5:10:58:81:b6:24:1c:1b:57:39:ff:4e:49:39:e5:c0:24:de:
         25:1d:ba:aa:9a:19:46:8b:3f:c0:20:93:be:11:f5:eb:eb:90:
         4a:4e:fb:9b:9e:00:74:72:07:de:94:89:98:ee:34:e1:ee:d8:
         ae:08:50:fb:ea:c6:8e:d6:66:40:1a:a4:d2:95:1b:e7:37:3d:
         8b:68:98:e7:f6:65:81:a7:aa:26:67:0d:97:e0:fe:f4:d8:0d:
         3c:bd:86:97:48:9a:b1:cb:6f:d7:83:d9:16:16:b9:19:3d:6c:
         9a:6a:a6:b2:ef:07:df:d1:f3:d1:0d:c3:92:52:80:8d:66:20:
         97:a7:2c:0d:16:99:fb:57:56:c2:d6:e6:d8:13:19:f3:2d:bb:
         36:ee:31:15:a3:16:ba:10:f1:e4:cd:41:e1:fa:8e:e2:7e:13:
         53:a5:36:01:a8:8e:83:30:a0:54:f1:aa:c5:9a:cd:48:4b:84:
         eb:27:12:2e:85:d5:d7:04:79:16:1a:2b:d6:4b:4f:d9:4f:39:
         46:ec:8d:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 19:27:16 2025 by rpki-client