Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/0409117d-54a8-39ec-bb51-017bc80bd644.roa
File:                     0409117d-54a8-39ec-bb51-017bc80bd644.roa (raw, json)
Hash identifier:          kRY0UBdzBUv+OrkZHzu4aXVEQKJeEypU89BAKpw9RGU=
Subject key identifier:   7C:6A:78:61:08:76:F7:D1:0F:32:D5:81:3D:D3:AB:DA:31:0F:8B:5A
Certificate issuer:       /CN=b0ca02e7-7a12-4d90-8feb-8f130aaea380
Certificate serial:       010D0C9F4328584B0E414A8482A0A6FB61D7BB00
Authority key identifier: EF:E8:C5:96:3E:3D:66:15:2E:A7:51:BE:9C:66:0C:95:32:89:A4:5B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/0409117d-54a8-39ec-bb51-017bc80bd644.roa
Signing time:             Tue 02 Sep 2025 01:00:32 +0000
ROA not before:           Tue 02 Sep 2025 01:00:32 +0000
ROA not after:            Mon 01 Dec 2025 02:00:32 +0000
asID:                     16509
IP address blocks:        164.55.233.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/b0ca02e7-7a12-4d90-8feb-8f130aaea380.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/b0ca02e7-7a12-4d90-8feb-8f130aaea380.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 09 Sep 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0e:41:4a:84:82:a0:a6:fb:61:d7:bb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0ca02e7-7a12-4d90-8feb-8f130aaea380
        Validity
            Not Before: Sep  2 01:00:32 2025 GMT
            Not After : Dec  1 02:00:32 2025 GMT
        Subject: CN=e16a97e1-09fc-4e74-bc1f-3f1645436a11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:e5:2f:52:51:39:ff:4d:e7:10:00:04:4c:ea:
                    f9:ba:60:19:76:e8:34:42:84:9f:3a:7e:28:3f:cd:
                    d9:dd:ce:48:eb:92:39:fa:05:59:65:c3:22:d5:d6:
                    f5:47:68:4b:fc:94:dd:0c:6b:0a:72:13:a7:94:7a:
                    7b:cd:63:2b:32:fd:1c:5b:8e:d7:4a:5f:ee:fe:b6:
                    26:8e:12:9c:9d:6d:66:79:64:35:18:57:a3:8b:7d:
                    a1:7e:40:8a:5c:a1:8a:68:fb:50:8b:0e:72:ae:a5:
                    8a:41:27:1d:38:4a:ae:19:43:71:f6:d0:f7:21:c0:
                    95:a3:33:7c:ff:95:5c:95:b5:00:61:6a:4b:e0:1a:
                    12:23:46:ba:4d:a3:71:a3:ca:93:97:ba:be:bf:11:
                    5b:b7:54:d6:ed:0a:92:b9:c1:a5:19:f5:6e:f3:64:
                    24:1a:cb:aa:12:8f:4b:89:ec:ac:c5:e6:68:01:38:
                    e1:17:2b:a5:e7:e5:9e:fe:c5:51:c2:01:f8:59:06:
                    24:a5:31:de:2c:d2:7d:bd:59:10:83:0b:c2:02:a2:
                    14:67:07:07:20:51:cd:f9:85:a8:20:42:87:37:a8:
                    1a:f9:63:c9:21:ca:d6:e8:c8:64:2c:6c:ac:84:f1:
                    45:82:01:ee:2c:b4:25:b5:e9:89:ff:af:a8:e9:a4:
                    61:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:6A:78:61:08:76:F7:D1:0F:32:D5:81:3D:D3:AB:DA:31:0F:8B:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/0409117d-54a8-39ec-bb51-017bc80bd644.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/b0ca02e7-7a12-4d90-8feb-8f130aaea380.crl

            X509v3 Authority Key Identifier:
                keyid:EF:E8:C5:96:3E:3D:66:15:2E:A7:51:BE:9C:66:0C:95:32:89:A4:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.55.233.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:42:51:b3:11:04:36:9d:dc:5f:55:bc:03:ad:fb:49:09:a0:
         38:58:ee:38:5b:cc:ad:2c:58:04:80:9d:14:e0:2e:60:ce:e9:
         5c:f2:11:82:73:a6:e0:2c:e3:96:6f:ad:d2:79:51:5b:39:ef:
         3f:6b:07:dd:98:b7:f5:f4:36:25:82:18:ed:71:7a:81:07:bb:
         d2:b9:a3:ff:f4:6e:d7:b4:1f:8e:c9:40:15:ec:16:55:09:0f:
         17:14:76:61:f6:96:2c:39:cf:ce:3e:c5:e4:2a:31:88:d1:7b:
         b7:51:46:35:51:30:b0:73:8c:22:ed:fb:d5:2a:76:60:eb:aa:
         d6:cb:af:65:bb:35:32:0c:98:67:db:57:16:c3:fa:6e:0a:57:
         a3:05:e4:fb:19:41:23:7b:37:50:49:8c:e3:d6:e2:e9:a6:21:
         a3:e1:27:1a:58:d5:95:0e:da:6a:59:26:63:90:e0:8b:67:a3:
         1a:9f:62:76:31:4c:0b:4b:d5:85:58:64:03:5b:be:3f:af:e2:
         a7:56:2f:f7:31:ed:4b:3a:82:9c:fb:16:78:5a:44:05:20:43:
         63:40:ab:ed:ca:33:fc:7d:e3:61:0f:41:62:62:e5:5f:3a:b2:
         67:ba:85:44:3f:9b:b7:aa:36:48:0f:ec:b1:57:0c:c0:58:90:
         22:40:79:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 01:50:22 2025 by rpki-client