Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/22b92cd7-bcca-3714-a73c-a4a3e7c4df6d.roa
File:                     22b92cd7-bcca-3714-a73c-a4a3e7c4df6d.roa (raw, json)
Hash identifier:          YL5v57Zm+e2MfMsp0qUXwVIzNRA2zGoo9RcgcFBcdzw=
Subject key identifier:   E9:16:EE:05:9A:0D:38:0A:2D:D9:2F:7E:BB:88:8B:D0:5B:B9:7A:13
Certificate issuer:       /CN=b0ca02e7-7a12-4d90-8feb-8f130aaea380
Certificate serial:       010D0C9F4328584BC2704FE679EA03C24FD91B00
Authority key identifier: EF:E8:C5:96:3E:3D:66:15:2E:A7:51:BE:9C:66:0C:95:32:89:A4:5B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/22b92cd7-bcca-3714-a73c-a4a3e7c4df6d.roa
Signing time:             Wed 05 Nov 2025 14:00:38 +0000
ROA not before:           Wed 05 Nov 2025 14:00:38 +0000
ROA not after:            Tue 03 Feb 2026 14:00:38 +0000
asID:                     16509
IP address blocks:        164.55.236.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/b0ca02e7-7a12-4d90-8feb-8f130aaea380.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/b0ca02e7-7a12-4d90-8feb-8f130aaea380.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 19 Nov 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:c2:70:4f:e6:79:ea:03:c2:4f:d9:1b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0ca02e7-7a12-4d90-8feb-8f130aaea380
        Validity
            Not Before: Nov  5 14:00:38 2025 GMT
            Not After : Feb  3 14:00:38 2026 GMT
        Subject: CN=9e76460f-f91a-4c42-9239-473f9642554b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:43:fd:54:bb:cc:52:c2:04:64:c4:25:dd:e8:
                    34:de:de:a2:17:ec:c0:ac:19:ab:b3:22:3a:d7:b4:
                    9d:4e:fd:94:a8:d9:43:ca:ec:ed:78:a0:80:41:fa:
                    9f:45:3b:44:68:88:ba:06:17:d1:fc:60:31:a3:70:
                    79:0b:d7:8e:18:fb:3c:f5:b5:d0:5c:03:dc:1b:4c:
                    fe:dc:38:74:a8:1e:8d:65:09:6d:b4:18:99:bf:2a:
                    d9:c6:ac:83:f9:8a:c9:4b:0e:6d:0a:94:85:ea:f0:
                    cf:a9:1e:96:5e:f2:15:5b:cf:59:37:15:17:2d:82:
                    db:a8:b5:97:6f:31:80:58:76:a7:98:00:7e:9a:18:
                    b0:6f:b6:69:1a:b8:76:8f:b3:75:b1:c1:2c:ce:38:
                    22:94:5e:3d:1b:9a:5c:b6:a7:9d:9a:ea:b0:33:a1:
                    a4:8b:96:f2:25:29:e7:72:c9:1d:76:30:32:93:a9:
                    f2:b2:01:63:6c:28:51:4f:c8:0c:98:1f:4d:5a:7c:
                    d2:27:23:4b:0a:1d:1f:f6:fd:c2:34:3a:3a:02:37:
                    82:56:dc:09:a3:16:79:c7:47:fc:de:15:a8:2e:45:
                    d7:0a:d4:d9:5e:38:a4:48:bc:ed:50:fe:41:2c:46:
                    f7:18:a9:97:28:18:50:cf:ac:1e:c3:d9:69:f1:28:
                    d2:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:16:EE:05:9A:0D:38:0A:2D:D9:2F:7E:BB:88:8B:D0:5B:B9:7A:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/22b92cd7-bcca-3714-a73c-a4a3e7c4df6d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/b0ca02e7-7a12-4d90-8feb-8f130aaea380.crl

            X509v3 Authority Key Identifier:
                keyid:EF:E8:C5:96:3E:3D:66:15:2E:A7:51:BE:9C:66:0C:95:32:89:A4:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.55.236.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:98:c8:41:4e:bd:00:95:9c:30:f8:4c:08:57:ff:9b:c5:67:
         2a:9b:c7:ac:75:de:47:30:99:dd:b2:b2:7c:7f:9d:86:75:5d:
         c4:24:ec:95:58:ca:01:61:b3:fc:27:af:dd:44:57:1e:51:59:
         87:0c:13:5c:4b:1f:cc:d0:65:be:bb:dd:2b:5b:de:3f:a6:63:
         d0:4a:53:1a:d8:dd:08:21:0c:4f:fb:0d:01:c8:42:4d:77:d0:
         49:fc:03:45:58:68:cd:e5:19:b3:a8:19:5c:53:f7:8c:ad:bb:
         09:4b:24:55:05:0b:e9:49:50:6f:78:9e:37:c0:e9:cc:e1:4d:
         80:84:da:b1:4e:c0:4d:e7:47:90:8f:84:2f:15:fa:ff:fa:fd:
         7b:67:69:7e:57:94:5a:d5:b0:8c:53:09:2c:f0:e7:e6:8b:2d:
         c8:06:34:93:ac:d9:da:fa:24:19:ac:58:80:9f:53:40:c4:68:
         e6:7e:4f:9c:33:58:ff:e8:1a:77:aa:ee:b4:22:be:c0:7f:c2:
         64:be:7a:7c:98:4b:0f:4e:88:bb:37:d9:a1:25:70:31:0f:e3:
         08:5e:f2:dd:d6:1e:73:cb:ae:62:b4:53:fc:62:75:1e:d7:02:
         1c:b4:bf:9a:e9:70:b8:f8:6a:ae:15:0d:07:66:71:2b:a1:3c:
         0e:b8:a5:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 18 10:40:22 2025 by rpki-client