Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/29d7f2ee-35a4-363c-8c1a-da701a4a3066.roa
File:                     29d7f2ee-35a4-363c-8c1a-da701a4a3066.roa (raw, json)
Hash identifier:          wICVKNbr/3JskU7wvgSOD/0sAkTlUoaP65Ib9ddvGvQ=
Subject key identifier:   41:CF:A0:C5:B6:48:69:AC:FA:76:11:E5:56:94:A8:5B:F0:64:C2:D9
Certificate issuer:       /CN=b0ca02e7-7a12-4d90-8feb-8f130aaea380
Certificate serial:       010D0C9F4328584A90A0BBDC2F7D1571B7C0A980
Authority key identifier: EF:E8:C5:96:3E:3D:66:15:2E:A7:51:BE:9C:66:0C:95:32:89:A4:5B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/29d7f2ee-35a4-363c-8c1a-da701a4a3066.roa
Signing time:             Sat 19 Jul 2025 01:00:49 +0000
ROA not before:           Sat 19 Jul 2025 01:00:49 +0000
ROA not after:            Fri 17 Oct 2025 01:00:49 +0000
asID:                     14618
IP address blocks:        164.55.229.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/b0ca02e7-7a12-4d90-8feb-8f130aaea380.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/b0ca02e7-7a12-4d90-8feb-8f130aaea380.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Jul 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:90:a0:bb:dc:2f:7d:15:71:b7:c0:a9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0ca02e7-7a12-4d90-8feb-8f130aaea380
        Validity
            Not Before: Jul 19 01:00:49 2025 GMT
            Not After : Oct 17 01:00:49 2025 GMT
        Subject: CN=e8c1c617-a86b-4ef0-8815-ce7861e522b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:3b:17:58:e7:cd:8a:64:60:ba:32:53:30:d4:
                    65:14:98:3f:0b:05:bf:c5:58:68:93:d0:5d:1d:be:
                    71:21:51:b4:9f:4c:18:04:dd:a0:40:11:06:e2:53:
                    fd:73:84:ad:14:34:0e:1d:8d:ae:be:91:1c:4e:2c:
                    b1:20:8a:7b:62:5d:cd:62:38:01:3b:ca:ed:57:74:
                    15:22:a2:8d:e2:88:70:d9:96:39:81:47:3d:97:65:
                    d8:66:6e:a9:6b:78:d4:e9:01:22:f3:56:1f:46:03:
                    7d:20:36:6a:70:21:80:ae:54:7a:e5:bc:2e:4e:fd:
                    ad:98:4f:14:2e:4d:3d:12:ba:23:df:7b:a9:37:16:
                    a7:77:3d:87:b3:77:08:ac:1f:2a:74:a2:12:04:73:
                    ff:f1:58:4b:1a:cb:5c:8c:c5:55:5c:4d:69:3e:a8:
                    6f:34:5f:79:73:e4:68:e0:bc:cd:ee:1f:58:1f:7e:
                    0c:31:0d:dd:c6:73:fb:e0:0f:6b:43:b7:f7:a9:ef:
                    b3:e1:54:4a:db:98:81:e7:b0:d7:0d:6b:7a:44:d6:
                    14:2a:7d:c3:c5:77:c4:92:53:75:b5:44:7d:70:f2:
                    3a:a2:a0:67:d9:7d:97:37:8f:69:e8:08:30:2b:45:
                    fe:c5:5e:30:03:54:ea:1f:86:00:4b:3a:70:dc:b2:
                    08:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:CF:A0:C5:B6:48:69:AC:FA:76:11:E5:56:94:A8:5B:F0:64:C2:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/29d7f2ee-35a4-363c-8c1a-da701a4a3066.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/b0ca02e7-7a12-4d90-8feb-8f130aaea380.crl

            X509v3 Authority Key Identifier:
                keyid:EF:E8:C5:96:3E:3D:66:15:2E:A7:51:BE:9C:66:0C:95:32:89:A4:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.55.229.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:06:7f:bb:cc:1b:57:3d:1b:f1:96:0e:60:e2:e5:d6:ec:46:
         fc:8f:ab:f2:55:3c:f8:d9:5e:97:da:a0:06:71:b9:8d:d7:47:
         d4:40:7b:86:c7:e8:0c:c7:7c:20:19:93:b9:09:f9:a2:2d:89:
         37:31:fb:6b:01:62:c4:be:35:68:9e:f9:4b:5d:80:d1:06:e2:
         27:4d:19:c6:a3:58:b4:fb:b7:40:5e:ea:ae:48:d6:c3:60:be:
         22:04:27:d8:a1:79:b8:c6:14:70:0f:b0:51:b4:b6:08:d5:d5:
         57:1c:60:d4:1a:d6:2f:ef:6a:c7:92:08:58:3b:b9:48:36:53:
         0b:bc:09:41:9e:07:08:e0:e9:a5:a1:fd:ba:44:75:25:1d:2b:
         78:c4:95:b9:31:6a:31:fd:f2:76:71:ce:55:b0:dd:10:0b:6d:
         ab:97:91:f8:75:16:f2:2a:88:77:c6:4b:db:1f:c5:9e:44:63:
         9e:9d:ce:5d:59:44:a3:c7:12:09:46:8e:ac:66:b1:43:de:66:
         67:84:2c:87:7b:7a:4d:05:21:11:18:1e:d3:b4:93:2b:3e:b1:
         9e:39:ee:82:16:38:65:46:4d:5b:54:e8:f5:a0:4f:cd:6a:71:
         c3:e6:90:ad:b0:73:a2:d5:8a:81:ee:dc:68:33:3a:e3:83:b7:
         6c:af:96:a7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqQoLvcL30VcbfAqYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjBjYTAyZTctN2ExMi00ZDkwLThmZWItOGYxMzBhYWVh
MzgwMB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk
ZThjMWM2MTctYTg2Yi00ZWYwLTg4MTUtY2U3ODYxZTUyMmI5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApTsXWOfNimRgujJTMNRlFJg/CwW/xVhok9Bd
Hb5xIVG0n0wYBN2gQBEG4lP9c4StFDQOHY2uvpEcTiyxIIp7Yl3NYjgBO8rtV3QV
IqKN4ohw2ZY5gUc9l2XYZm6pa3jU6QEi81YfRgN9IDZqcCGArlR65bwuTv2tmE8U
Lk09Eroj33upNxandz2Hs3cIrB8qdKISBHP/8VhLGstcjMVVXE1pPqhvNF95c+Ro
4LzN7h9YH34MMQ3dxnP74A9rQ7f3qe+z4VRK25iB57DXDWt6RNYUKn3DxXfEklN1
tUR9cPI6oqBn2X2XN49p6AgwK0X+xV4wA1TqH4YASzpw3LIIbQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEHPoMW2SGms+nYR5VaUqFvwZMLZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMGNh
MDJlNy03YTEyLTRkOTAtOGZlYi04ZjEzMGFhZWEzODAvMjlkN2YyZWUtMzVhNC0z
NjNjLThjMWEtZGE3MDFhNGEzMDY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjBjYTAyZTctN2ExMi00ZDkwLThm
ZWItOGYxMzBhYWVhMzgwL2IwY2EwMmU3LTdhMTItNGQ5MC04ZmViLThmMTMwYWFl
YTM4MC5jcmwwHwYDVR0jBBgwFoAU7+jFlj49ZhUup1G+nGYMlTKJpFswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMGNhMDJlNy03YTEyLTRkOTAtOGZlYi04ZjEz
MGFhZWEzODAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApDflMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADcGf7vMG1c9G/GWDmDi5dbsRvyPq/JVPPjZXpfaoAZxuY3XR9RAe4bH
6AzHfCAZk7kJ+aItiTcx+2sBYsS+NWie+UtdgNEG4idNGcajWLT7t0Be6q5I1sNg
viIEJ9ihebjGFHAPsFG0tgjV1VccYNQa1i/vaseSCFg7uUg2Uwu8CUGeBwjg6aWh
/bpEdSUdK3jElbkxajH98nZxzlWw3RALbauXkfh1FvIqiHfGS9sfxZ5EY56dzl1Z
RKPHEglGjqxmsUPeZmeELId7ek0FIREYHtO0kys+sZ457oIWOGVGTVtU6PWgT81q
ccPmkK2wc6LVioHu3GgzOuODt2yvlqc=
-----END CERTIFICATE-----
Generated at Sun Jul 20 21:02:26 2025 by rpki-client