Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/215e3977-3e20-30b0-a29b-55e9e0df0433.roa
File:                     215e3977-3e20-30b0-a29b-55e9e0df0433.roa (raw, json)
Hash identifier:          1Z80VpU1rzzuZh0bvJDRzvaiR1WjzJPO76b8vV8WdMM=
Subject key identifier:   89:D6:10:CE:66:48:7D:51:20:04:98:30:8D:E4:64:42:D2:45:F1:9A
Certificate issuer:       /CN=b0ca02e7-7a12-4d90-8feb-8f130aaea380
Certificate serial:       010D0C9F4328584A6C55CC941565DA17CAA89A00
Authority key identifier: EF:E8:C5:96:3E:3D:66:15:2E:A7:51:BE:9C:66:0C:95:32:89:A4:5B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/215e3977-3e20-30b0-a29b-55e9e0df0433.roa
Signing time:             Sun 06 Jul 2025 01:00:49 +0000
ROA not before:           Sun 06 Jul 2025 01:00:49 +0000
ROA not after:            Sat 04 Oct 2025 01:00:49 +0000
asID:                     14618
IP address blocks:        164.55.238.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/b0ca02e7-7a12-4d90-8feb-8f130aaea380.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/b0ca02e7-7a12-4d90-8feb-8f130aaea380.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Jul 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:6c:55:cc:94:15:65:da:17:ca:a8:9a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0ca02e7-7a12-4d90-8feb-8f130aaea380
        Validity
            Not Before: Jul  6 01:00:49 2025 GMT
            Not After : Oct  4 01:00:49 2025 GMT
        Subject: CN=0930e3ab-7dbc-4ca3-82d9-24d5c93f3cb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:90:c2:ff:a9:19:07:8e:ea:02:9c:94:d4:88:
                    0f:1e:92:44:f2:9d:87:fb:4a:cc:c3:46:e7:4c:fe:
                    52:6c:8c:f0:b0:f8:c9:de:ed:d3:05:6e:ea:5d:9b:
                    1d:f6:16:20:b4:22:1c:56:84:8f:f5:65:77:10:0e:
                    43:a2:bb:bc:89:eb:00:f3:f7:b6:58:8d:b7:67:0e:
                    49:e2:f2:3f:b1:88:95:4d:4c:57:b5:75:6a:f0:e8:
                    e3:39:e5:59:45:13:4a:fa:f5:cb:0f:d2:27:f1:b9:
                    44:59:7e:50:3f:59:10:65:6c:b8:9f:22:06:82:a8:
                    3b:2c:20:2d:13:63:46:96:8b:e2:2c:f9:c5:63:a8:
                    ca:3f:54:c7:d9:7e:e5:54:6a:5e:7b:34:f0:dc:ef:
                    7a:ac:a8:56:02:b3:5c:e6:40:f0:66:05:97:1b:b2:
                    ee:96:b9:34:cf:f6:47:af:53:6c:1f:e1:ab:5f:45:
                    dc:2d:09:ae:77:cb:08:b8:bd:13:ce:01:2b:46:44:
                    15:cc:0c:de:8a:fc:a6:b1:4f:fd:ee:36:d6:83:11:
                    c7:24:be:fb:ad:86:d3:16:0d:11:0f:8c:63:04:5e:
                    84:80:c7:e7:cb:a4:ef:42:25:af:91:95:4f:91:96:
                    8e:96:af:78:09:39:51:17:b8:7c:dc:97:42:e9:88:
                    6b:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:D6:10:CE:66:48:7D:51:20:04:98:30:8D:E4:64:42:D2:45:F1:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/215e3977-3e20-30b0-a29b-55e9e0df0433.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/b0ca02e7-7a12-4d90-8feb-8f130aaea380.crl

            X509v3 Authority Key Identifier:
                keyid:EF:E8:C5:96:3E:3D:66:15:2E:A7:51:BE:9C:66:0C:95:32:89:A4:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.55.238.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:1c:52:a3:de:e9:5a:5a:b3:03:5d:c5:57:c0:7d:7b:e6:55:
         a0:85:e4:30:66:7f:0d:b4:3f:f8:13:7f:55:fe:88:4c:ed:b0:
         7a:a0:d7:81:a7:85:66:11:04:28:6b:94:bb:16:f7:c1:fd:89:
         e2:e2:05:36:0c:3c:30:0a:b5:d1:49:67:87:d9:58:3a:9e:3b:
         d8:23:e8:4e:67:a1:90:4f:59:3a:10:aa:55:35:f4:21:79:66:
         62:1f:08:4b:fc:3d:e7:d1:51:bb:5f:7b:e7:63:58:c7:44:8d:
         61:e2:13:11:60:06:40:aa:aa:8a:8e:a0:57:08:a8:6d:49:b3:
         93:a9:8d:22:ed:34:6a:86:f1:ed:7f:e2:60:c7:40:45:3b:cb:
         22:8e:bf:ce:41:a8:10:e7:5b:b2:30:f8:65:d2:b9:fa:f8:f6:
         50:75:bd:bd:e8:13:22:fb:87:dc:d8:12:a1:9a:9b:22:62:6c:
         fd:1f:62:24:65:a6:3d:fe:ee:d3:ea:53:3b:d9:03:51:7b:33:
         1a:38:12:d3:9e:a1:9c:e1:32:d1:b1:dd:44:d1:07:f1:4e:d1:
         14:a5:e6:9c:20:8d:64:83:fd:ae:d6:34:f6:2c:ed:67:4f:ce:
         96:c9:13:d3:75:ec:61:a3:2e:b1:bf:f1:aa:3e:b1:83:f3:a5:
         aa:79:c0:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 21:05:11 2025 by rpki-client