Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/2933802b-551b-31b7-9d2a-71696f02cf24.roa
File:                     2933802b-551b-31b7-9d2a-71696f02cf24.roa (raw, json)
Hash identifier:          Ygf4wsYgk/I5S53VU2lkv1qz8ExJmeONErEBTIbqAw4=
Subject key identifier:   27:00:F1:3E:EE:D5:4D:00:2E:B1:7B:48:6B:9F:70:19:78:B3:A8:F3
Certificate issuer:       /CN=b0ca02e7-7a12-4d90-8feb-8f130aaea380
Certificate serial:       010D0C9F43285848ADC612FB3D17C2818A32C800
Authority key identifier: EF:E8:C5:96:3E:3D:66:15:2E:A7:51:BE:9C:66:0C:95:32:89:A4:5B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/2933802b-551b-31b7-9d2a-71696f02cf24.roa
Signing time:             Mon 27 Jan 2025 02:00:39 +0000
ROA not before:           Mon 27 Jan 2025 02:00:39 +0000
ROA not after:            Sun 27 Apr 2025 01:00:39 +0000
asID:                     14618
IP address blocks:        164.55.239.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/b0ca02e7-7a12-4d90-8feb-8f130aaea380.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/b0ca02e7-7a12-4d90-8feb-8f130aaea380.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ad:c6:12:fb:3d:17:c2:81:8a:32:c8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0ca02e7-7a12-4d90-8feb-8f130aaea380
        Validity
            Not Before: Jan 27 02:00:39 2025 GMT
            Not After : Apr 27 01:00:39 2025 GMT
        Subject: CN=fa183336-f0c3-49d6-8be3-1d60cbf2198f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:34:1b:a4:6e:85:f1:67:13:30:0e:ef:81:31:
                    a4:9b:d3:89:3e:ff:75:09:1b:9f:80:e2:81:7d:8c:
                    00:30:12:ee:bd:00:99:f1:bb:25:8e:d7:9a:34:fa:
                    fe:d6:99:0c:0a:18:63:eb:b4:ed:d8:33:dc:62:bb:
                    44:16:08:3c:2b:be:59:79:94:2a:4b:32:1d:a4:4e:
                    d1:4b:d3:f1:0a:36:30:df:c0:50:f3:97:fd:3c:87:
                    e7:f1:61:e1:4f:24:06:24:df:ea:f3:81:a9:91:3f:
                    9c:46:87:0a:76:27:6c:6b:ce:62:e4:2b:5e:21:31:
                    11:5f:89:50:71:65:9f:21:98:93:a2:9c:5a:71:23:
                    45:99:07:64:25:71:6b:9f:b5:26:2e:18:eb:e2:bf:
                    e0:7c:29:f7:88:00:44:57:a4:f2:a1:2c:3e:40:26:
                    cc:88:40:29:e3:41:f7:6c:65:cf:04:f3:b6:92:34:
                    5c:73:d0:18:17:2e:04:d2:5b:ee:55:ea:96:37:9e:
                    06:e8:0a:64:41:6a:08:2c:94:e3:0c:3a:a9:2f:10:
                    29:0f:45:cc:a2:67:b6:5e:18:44:ad:89:06:02:fd:
                    51:0a:dd:9a:1c:44:5f:cf:dd:56:41:0d:aa:f1:1b:
                    88:ab:f6:2f:af:55:40:c9:29:af:03:4e:67:8b:a3:
                    19:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:00:F1:3E:EE:D5:4D:00:2E:B1:7B:48:6B:9F:70:19:78:B3:A8:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/2933802b-551b-31b7-9d2a-71696f02cf24.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/b0ca02e7-7a12-4d90-8feb-8f130aaea380.crl

            X509v3 Authority Key Identifier:
                keyid:EF:E8:C5:96:3E:3D:66:15:2E:A7:51:BE:9C:66:0C:95:32:89:A4:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.55.239.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:f7:f0:be:be:e3:83:63:62:7f:c4:87:3d:74:bc:69:a2:4a:
         4f:c2:50:4f:28:d6:bd:54:7b:59:05:9b:49:9b:9f:14:ec:8c:
         04:af:22:4a:33:bb:5a:69:10:bb:bf:80:b2:76:ab:50:de:9f:
         50:b7:e4:02:a3:0f:70:f4:cb:2b:03:c0:7d:ce:71:71:6c:82:
         2d:9e:9e:b8:68:e8:94:07:28:97:ca:c3:c3:5c:6b:17:56:01:
         b8:00:71:91:b5:14:64:0a:ed:e1:e0:52:6f:a7:22:64:c1:f3:
         e0:30:68:fd:50:24:57:26:ab:67:8d:f8:cd:09:99:92:07:a9:
         e2:96:c7:f3:c0:85:89:78:13:67:6d:e0:ea:51:32:7e:9e:4f:
         e5:88:b0:e1:48:02:67:a5:16:d6:c2:1e:be:71:1f:20:f9:1f:
         da:cb:9c:ff:8b:20:2a:ce:6e:c8:ae:31:f5:1c:d1:92:f9:28:
         a3:ac:53:2a:7a:2b:5e:23:48:53:f7:f1:60:19:3b:f9:dd:5a:
         d5:ab:3d:3d:2e:2e:fe:2a:54:3d:d4:eb:84:13:9d:d1:62:e8:
         93:cf:fc:b1:81:44:da:97:7a:ba:cb:ee:7b:55:b8:d9:5e:dc:
         17:1c:6e:0d:0c:58:96:cc:e6:9a:3e:91:b8:79:5b:f3:8f:4f:
         c6:a7:45:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:07:31 2025 by rpki-client