Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/47012d0e-274b-350f-ab7b-7277a2556e5e.roa
File:                     47012d0e-274b-350f-ab7b-7277a2556e5e.roa (raw, json)
Hash identifier:          QV03R8V0YXCKjYWMgXBh2MVToRV6CDEU71RTBhpdPek=
Subject key identifier:   6A:AD:44:EF:F0:98:42:56:76:F0:F2:C0:C0:A6:3E:A2:D6:B0:06:0F
Certificate issuer:       /CN=b0ca02e7-7a12-4d90-8feb-8f130aaea380
Certificate serial:       010D0C9F432858486EF5B874E5B88D137A70BAC0
Authority key identifier: EF:E8:C5:96:3E:3D:66:15:2E:A7:51:BE:9C:66:0C:95:32:89:A4:5B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/47012d0e-274b-350f-ab7b-7277a2556e5e.roa
Signing time:             Sat 04 Jan 2025 14:00:51 +0000
ROA not before:           Sat 04 Jan 2025 14:00:51 +0000
ROA not after:            Fri 04 Apr 2025 13:00:51 +0000
asID:                     14618
IP address blocks:        164.55.233.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/b0ca02e7-7a12-4d90-8feb-8f130aaea380.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/b0ca02e7-7a12-4d90-8feb-8f130aaea380.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:6e:f5:b8:74:e5:b8:8d:13:7a:70:ba:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0ca02e7-7a12-4d90-8feb-8f130aaea380
        Validity
            Not Before: Jan  4 14:00:51 2025 GMT
            Not After : Apr  4 13:00:51 2025 GMT
        Subject: CN=d1748dd6-bff0-4baa-81f3-79ea5cc90e6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:24:f2:07:b5:13:a8:82:62:94:be:f6:86:a7:
                    7b:b8:c1:a2:4d:ae:54:14:e4:82:a9:9d:b3:d3:74:
                    72:e5:f9:6c:9f:60:7a:f8:a9:3e:e0:18:31:b5:ac:
                    73:ea:3c:57:3a:c6:ea:35:89:df:68:9a:39:9a:b5:
                    74:ab:11:f0:fb:a7:9a:43:4a:77:8c:a9:dc:33:5b:
                    90:76:ca:a9:f8:0d:32:38:f6:c0:69:63:93:da:8c:
                    ee:92:bc:27:a0:52:ff:60:74:1e:91:84:1b:52:71:
                    56:fc:96:cc:63:ea:3f:1a:12:42:81:26:b0:42:d5:
                    34:67:ff:eb:62:79:00:c0:af:f1:9f:74:95:66:7c:
                    82:82:74:31:05:d6:36:b4:c4:09:cc:3e:f8:8e:9f:
                    0b:6b:b5:69:9f:1e:e1:56:27:53:86:2b:e4:a1:6e:
                    2b:72:41:6b:d1:80:03:8e:35:2b:3d:8e:b5:6c:e7:
                    ad:cc:82:b9:40:4e:c0:3e:e1:ac:19:03:24:f4:d5:
                    44:11:b1:f0:34:53:c4:dd:3e:9c:31:b0:bb:16:82:
                    19:12:19:a3:a6:9d:21:ea:90:c0:da:7b:22:46:6d:
                    6e:04:52:45:37:29:52:77:f0:f9:93:ef:86:18:f9:
                    76:cf:23:a5:04:86:d7:99:8e:62:ba:12:9d:98:ef:
                    b8:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:AD:44:EF:F0:98:42:56:76:F0:F2:C0:C0:A6:3E:A2:D6:B0:06:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/47012d0e-274b-350f-ab7b-7277a2556e5e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/b0ca02e7-7a12-4d90-8feb-8f130aaea380.crl

            X509v3 Authority Key Identifier:
                keyid:EF:E8:C5:96:3E:3D:66:15:2E:A7:51:BE:9C:66:0C:95:32:89:A4:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.55.233.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:8e:d8:f7:4f:91:c0:e5:fd:b2:7f:d9:e8:67:95:ad:0c:ae:
         cb:28:34:0b:ce:80:a0:d4:68:37:25:66:83:fa:b2:df:0e:cf:
         b1:c0:40:58:1a:3c:db:50:c3:4d:75:77:c7:e6:0a:f9:34:73:
         5c:f8:3d:dd:4b:43:f2:9f:eb:cd:94:93:ad:c2:c7:a9:d1:b4:
         d5:70:b8:cd:85:92:16:13:55:ae:b2:99:f3:27:5f:89:ad:d8:
         0a:7a:a7:f2:59:5e:e9:16:eb:d2:ee:44:0f:19:d7:4c:64:cc:
         65:77:f7:73:2d:07:68:14:ff:67:ac:91:f6:a8:9c:63:c8:7a:
         81:61:ef:e5:1b:5a:18:fe:ba:94:47:cb:fd:9d:40:87:17:9c:
         e1:c1:56:95:41:ce:02:5e:f1:3f:74:3a:21:97:7c:31:8a:e7:
         27:0a:6e:d2:21:75:f9:fd:fd:d4:57:d9:57:e8:9a:4f:16:c0:
         47:ab:c7:d2:f4:03:15:10:d5:0e:c1:48:d0:f7:84:5c:28:35:
         ed:46:09:36:e4:9f:a6:fd:f1:f5:dc:6a:4e:5b:8d:07:fb:f9:
         50:25:ac:0a:6c:2d:9c:bf:8a:91:f0:f4:c1:19:46:b0:5e:07:
         ec:7b:cc:de:86:a4:57:ff:75:c3:ff:a7:5e:8d:01:87:0b:ed:
         58:2a:a8:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 08:19:06 2025 by rpki-client