Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/6695148f-1f3f-34ca-9c1f-8043f95966a8.roa
File:                     6695148f-1f3f-34ca-9c1f-8043f95966a8.roa (raw, json)
Hash identifier:          /fBsi5hVkWLMjcwV16iuURnj3oj7yzITAfq0pLq5mSo=
Subject key identifier:   D7:11:B7:F5:A4:69:F8:FC:6E:1C:8F:36:AA:0B:B5:F0:92:A8:3F:8D
Certificate issuer:       /CN=b0ca02e7-7a12-4d90-8feb-8f130aaea380
Certificate serial:       010D0C9F4328584A6C55D368E4304789E95B0600
Authority key identifier: EF:E8:C5:96:3E:3D:66:15:2E:A7:51:BE:9C:66:0C:95:32:89:A4:5B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/6695148f-1f3f-34ca-9c1f-8043f95966a8.roa
Signing time:             Sun 06 Jul 2025 01:00:49 +0000
ROA not before:           Sun 06 Jul 2025 01:00:49 +0000
ROA not after:            Sat 04 Oct 2025 01:00:49 +0000
asID:                     16509
IP address blocks:        164.55.227.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/b0ca02e7-7a12-4d90-8feb-8f130aaea380.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/b0ca02e7-7a12-4d90-8feb-8f130aaea380.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Jul 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:6c:55:d3:68:e4:30:47:89:e9:5b:06:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0ca02e7-7a12-4d90-8feb-8f130aaea380
        Validity
            Not Before: Jul  6 01:00:49 2025 GMT
            Not After : Oct  4 01:00:49 2025 GMT
        Subject: CN=a6902b2c-0ddd-46eb-ac90-6c39a25284a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:2c:4f:79:0e:7c:ee:67:2b:83:d0:cc:2f:19:
                    ab:cc:3e:88:d5:2d:e0:16:cc:02:5b:35:69:67:de:
                    27:37:3f:0a:aa:fe:81:9f:07:ac:0f:97:83:11:a0:
                    d6:a7:82:da:88:ab:3a:a6:a7:71:14:13:45:dd:3e:
                    b1:f5:4f:f9:87:d9:3b:a2:e6:a1:8b:e5:32:ef:ab:
                    b8:b7:ab:d2:c3:b3:f2:84:8e:d0:87:bb:cb:4e:96:
                    02:14:c1:09:c9:cc:9e:de:f5:7f:ff:35:0c:7b:c8:
                    a8:16:2c:05:e6:9c:f5:4b:4f:94:66:f9:10:c9:2f:
                    99:a6:72:8c:56:60:d9:5f:2d:bd:4a:3f:f3:2c:b9:
                    55:c7:89:ab:36:76:b4:bc:72:da:da:13:2a:04:80:
                    45:7f:1e:d1:33:0f:db:7c:00:81:fb:d3:5b:90:68:
                    a4:11:d6:53:fe:72:dc:a3:a5:1f:0f:39:78:dc:b5:
                    c0:89:6d:d0:51:7e:dc:01:2a:bf:b7:6f:64:db:61:
                    55:eb:db:d1:a6:46:11:66:7a:2a:e1:f0:89:32:bc:
                    25:2d:42:de:1e:be:7d:5d:8c:48:37:db:83:ae:7a:
                    d3:fb:63:31:27:98:52:02:12:7b:6d:0d:55:90:96:
                    80:a9:41:10:d3:14:d7:63:72:66:45:93:fb:a6:54:
                    c2:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:11:B7:F5:A4:69:F8:FC:6E:1C:8F:36:AA:0B:B5:F0:92:A8:3F:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/6695148f-1f3f-34ca-9c1f-8043f95966a8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/b0ca02e7-7a12-4d90-8feb-8f130aaea380.crl

            X509v3 Authority Key Identifier:
                keyid:EF:E8:C5:96:3E:3D:66:15:2E:A7:51:BE:9C:66:0C:95:32:89:A4:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.55.227.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:13:66:2c:fe:c7:94:33:dc:3a:68:b8:30:f6:69:43:39:02:
         b8:8d:37:76:eb:9d:d2:fe:7d:12:6d:f9:68:03:30:ae:0b:f0:
         4f:e7:79:62:64:3b:78:be:7f:74:b8:7d:57:9e:df:0a:4f:65:
         10:eb:09:cd:49:8d:cc:5b:2d:96:ab:53:54:61:0b:59:05:da:
         a6:2f:a9:a8:d5:6f:b8:62:62:87:8d:41:7a:7a:1d:60:b4:1f:
         71:43:21:b2:9d:96:d2:25:db:2c:38:b9:88:29:c2:ab:db:75:
         f1:bf:14:8c:44:98:c6:13:80:69:58:af:9f:08:f4:bc:71:07:
         2c:e9:fb:4b:1c:4f:51:97:5f:d4:6c:0a:26:83:81:4e:df:3a:
         48:43:30:b7:ed:86:a2:5e:ba:10:84:8e:9f:9a:e1:8e:87:78:
         4e:2e:77:18:44:47:39:8f:54:c4:5d:e4:6d:42:ca:17:2a:b0:
         fd:cc:01:3c:40:49:07:30:05:0f:99:d2:93:3c:7a:65:b8:ad:
         e9:36:99:67:a9:de:25:64:4f:46:07:d4:0b:45:05:54:b9:1c:
         c0:90:c2:19:1b:71:8a:a4:00:6e:8c:c1:fa:9b:1b:55:96:a5:
         d4:88:81:a9:40:6c:2e:c2:e5:f3:10:7a:67:b2:32:63:51:95:
         2c:85:89:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 21:04:19 2025 by rpki-client