Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/4774e8e2-fec7-3ec6-af35-b9a0cc054a96.roa
File:                     4774e8e2-fec7-3ec6-af35-b9a0cc054a96.roa (raw, json)
Hash identifier:          0Hp0vsgr7jv1pY8a5sdXQ9h1bQuUrynKK7VUqLBSASg=
Subject key identifier:   6C:07:09:A8:44:5E:E5:7D:6E:26:29:93:FC:F0:55:50:70:13:BC:E9
Certificate issuer:       /CN=b0ca02e7-7a12-4d90-8feb-8f130aaea380
Certificate serial:       010D0C9F4328584A90A0BBCE1C7CCED08694F580
Authority key identifier: EF:E8:C5:96:3E:3D:66:15:2E:A7:51:BE:9C:66:0C:95:32:89:A4:5B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/4774e8e2-fec7-3ec6-af35-b9a0cc054a96.roa
Signing time:             Sat 19 Jul 2025 01:00:49 +0000
ROA not before:           Sat 19 Jul 2025 01:00:49 +0000
ROA not after:            Fri 17 Oct 2025 01:00:49 +0000
asID:                     16509
IP address blocks:        164.55.229.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/b0ca02e7-7a12-4d90-8feb-8f130aaea380.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/b0ca02e7-7a12-4d90-8feb-8f130aaea380.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Jul 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:90:a0:bb:ce:1c:7c:ce:d0:86:94:f5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0ca02e7-7a12-4d90-8feb-8f130aaea380
        Validity
            Not Before: Jul 19 01:00:49 2025 GMT
            Not After : Oct 17 01:00:49 2025 GMT
        Subject: CN=06951674-19cf-4ff7-af80-9b806b8e5867
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:37:cc:66:25:e6:69:ec:87:8f:3a:b9:10:4e:
                    5c:e7:29:fe:79:28:a1:bc:bd:54:2e:71:67:44:9f:
                    55:c7:a4:33:12:3b:d4:16:27:c7:a5:b8:a5:a5:99:
                    b9:8d:26:e5:82:76:58:af:ff:11:4b:c1:2e:e8:b8:
                    a6:17:32:2b:32:68:7b:5a:0b:e2:72:16:21:7e:a7:
                    0c:0d:d4:29:f3:b8:f5:06:4e:2f:bf:bd:63:45:2c:
                    1c:d9:67:32:12:59:51:b3:8c:fc:19:f7:04:b9:23:
                    2e:4c:d8:79:7b:58:34:5d:6b:75:74:d8:f6:a3:46:
                    4b:da:89:83:a4:d2:18:fc:d3:93:c8:6d:59:28:f2:
                    42:f9:38:b2:ca:d6:14:b1:c4:ad:2f:53:1b:76:62:
                    d1:46:26:68:e0:85:ba:47:9f:75:b1:e7:32:5a:bb:
                    65:d1:29:c6:53:c4:4a:6d:07:99:6c:5b:09:71:c4:
                    74:cd:cf:e6:77:12:75:5b:16:f5:10:22:f0:29:08:
                    cd:77:48:21:2e:ec:a4:93:72:7d:48:34:b1:f5:ef:
                    5b:52:f5:36:56:1a:41:23:7f:61:30:2b:1e:ec:fd:
                    ee:8b:fb:77:18:0f:04:16:07:fa:5b:10:4d:ca:e3:
                    cc:d9:f0:eb:b2:ac:2d:7f:06:e5:49:ef:28:ed:01:
                    4c:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:07:09:A8:44:5E:E5:7D:6E:26:29:93:FC:F0:55:50:70:13:BC:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/4774e8e2-fec7-3ec6-af35-b9a0cc054a96.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/b0ca02e7-7a12-4d90-8feb-8f130aaea380.crl

            X509v3 Authority Key Identifier:
                keyid:EF:E8:C5:96:3E:3D:66:15:2E:A7:51:BE:9C:66:0C:95:32:89:A4:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.55.229.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:3d:35:29:73:2d:8f:b7:64:a1:95:8c:13:a5:0d:ac:fb:83:
         cf:42:7c:48:75:14:ae:00:80:50:ad:d0:1d:51:cd:90:3a:95:
         55:a8:f3:65:0c:36:e0:68:b1:f9:15:89:29:56:83:83:8e:4e:
         4c:b2:f3:60:1d:37:9a:84:89:07:a4:02:0b:3d:24:17:2e:39:
         73:0e:f1:a5:a4:0b:18:37:74:af:bb:5d:1e:58:40:ac:29:88:
         3d:e2:69:a4:72:a1:79:be:11:b6:40:ae:b0:d8:b5:d9:0a:cb:
         ad:bd:5f:d6:79:33:ec:37:08:8d:d8:25:3e:d3:2b:8b:48:6c:
         19:95:8a:84:30:af:4f:62:e8:b7:98:dd:27:e2:8c:88:dc:a7:
         b6:b7:90:af:a4:62:0d:1f:e7:f6:38:ff:a0:b5:89:23:b5:50:
         8c:f9:61:98:59:d7:a0:b5:a8:30:6e:ba:2c:17:85:57:d2:13:
         0e:80:ae:ae:3c:83:ec:f0:99:da:96:48:cf:73:73:18:1f:72:
         90:18:25:eb:ac:7b:fa:de:5f:54:34:f3:bf:d2:f4:bd:54:8e:
         d8:b6:a5:86:da:f5:f8:54:08:15:cf:be:98:09:69:af:a6:15:
         2f:8b:a0:15:72:e6:10:97:57:53:eb:ad:1e:6c:68:8f:72:84:
         05:08:d8:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 20:58:40 2025 by rpki-client