Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/762ccf37-8de8-37bd-9ce9-b4a4dbe1ccf5.roa
File:                     762ccf37-8de8-37bd-9ce9-b4a4dbe1ccf5.roa (raw, json)
Hash identifier:          dbRlREjAmbUwFo/cos9HAB798BPYiXhRVNocvmPlhac=
Subject key identifier:   FD:ED:E1:76:2B:FE:1E:06:E8:0E:D9:91:4E:D7:BF:35:AA:32:C0:9C
Certificate issuer:       /CN=b0ca02e7-7a12-4d90-8feb-8f130aaea380
Certificate serial:       010D0C9F4328584AFC1BF7413C906A55ADC3E900
Authority key identifier: EF:E8:C5:96:3E:3D:66:15:2E:A7:51:BE:9C:66:0C:95:32:89:A4:5B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/762ccf37-8de8-37bd-9ce9-b4a4dbe1ccf5.roa
Signing time:             Tue 26 Aug 2025 13:00:41 +0000
ROA not before:           Tue 26 Aug 2025 13:00:41 +0000
ROA not after:            Mon 24 Nov 2025 14:00:41 +0000
asID:                     14618
IP address blocks:        164.55.244.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/b0ca02e7-7a12-4d90-8feb-8f130aaea380.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/b0ca02e7-7a12-4d90-8feb-8f130aaea380.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 09 Sep 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:fc:1b:f7:41:3c:90:6a:55:ad:c3:e9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0ca02e7-7a12-4d90-8feb-8f130aaea380
        Validity
            Not Before: Aug 26 13:00:41 2025 GMT
            Not After : Nov 24 14:00:41 2025 GMT
        Subject: CN=b539e4c7-ee5d-422b-bc01-15cd7ae78c10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:15:b3:71:6b:94:fb:91:b3:8e:23:11:e2:f7:
                    39:81:de:17:3d:e8:4d:e1:95:6c:b7:9d:56:6e:f4:
                    c5:c6:50:7f:f5:3e:c0:38:ca:a9:25:20:fc:05:95:
                    fb:2a:1d:34:3a:6b:a3:fb:b8:f4:f0:c3:1d:7b:e8:
                    b6:50:12:2f:3e:8d:9a:40:c7:da:cd:f0:d6:59:de:
                    99:52:9d:db:5a:db:aa:de:01:be:26:0f:08:35:fd:
                    5e:32:2f:06:b6:4d:b4:59:02:18:4d:f2:3a:9f:90:
                    dc:fc:18:c3:a6:ff:9b:1b:d6:17:0e:24:78:11:94:
                    09:fe:9b:3e:57:79:c1:92:73:f5:dc:83:5b:a8:27:
                    93:37:82:30:33:7e:4c:61:40:45:86:eb:50:3f:55:
                    b7:73:b7:08:bf:d9:00:56:3d:ec:9c:f0:f4:14:03:
                    59:6f:e8:59:49:20:9c:35:b8:8a:28:96:0d:96:66:
                    4c:f1:b6:81:21:a4:86:e6:a5:14:bf:b8:90:3f:82:
                    df:f8:5e:c4:68:68:0f:a7:f0:f6:4e:6f:aa:c8:96:
                    f3:9a:84:97:5c:68:fb:65:d4:af:81:6e:b4:14:24:
                    ef:7b:f3:0e:7c:b4:a2:51:78:e3:47:aa:39:1e:8d:
                    7a:b9:c1:99:8e:1b:fc:4b:a4:44:67:1f:2b:84:bd:
                    73:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:ED:E1:76:2B:FE:1E:06:E8:0E:D9:91:4E:D7:BF:35:AA:32:C0:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/762ccf37-8de8-37bd-9ce9-b4a4dbe1ccf5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/b0ca02e7-7a12-4d90-8feb-8f130aaea380.crl

            X509v3 Authority Key Identifier:
                keyid:EF:E8:C5:96:3E:3D:66:15:2E:A7:51:BE:9C:66:0C:95:32:89:A4:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.55.244.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:67:8f:f5:1a:4a:2f:f8:57:4e:be:67:3d:1a:a1:06:5f:c7:
         cc:58:8c:1a:40:95:63:f4:12:45:2a:d8:74:2e:cb:e9:4d:bf:
         4e:75:55:6b:8d:4a:97:03:2c:d9:e5:ff:e3:e8:e5:86:23:82:
         8b:d6:ce:e6:f2:6d:2a:a1:71:da:b5:32:bf:93:ed:55:4f:c0:
         d7:5c:3f:4d:53:d5:30:9d:80:39:e2:f2:10:b2:48:e2:23:ff:
         f7:cf:ee:5f:36:f1:d2:6e:c9:be:ea:d4:88:61:9f:3e:f3:01:
         60:94:b5:a8:4b:01:c7:86:ae:44:57:ba:17:a4:a7:7f:f0:51:
         9d:81:ab:b6:5d:56:85:00:d6:46:fa:5e:ba:70:a5:05:52:6b:
         02:61:ae:ac:0a:59:db:bc:ba:37:5e:75:f0:61:90:20:fd:58:
         a2:40:e9:f5:13:aa:a7:f9:48:f6:d2:57:8a:64:ce:65:b8:c4:
         e1:f6:93:ca:25:ac:26:09:7a:5e:c5:99:f7:27:a5:c3:63:74:
         b5:9e:1c:f5:a7:11:b6:8c:97:36:f1:c0:97:c9:06:14:c1:2f:
         40:56:b9:25:c4:78:9b:52:be:a7:97:72:2e:e5:8f:41:20:7c:
         98:55:2a:80:2a:01:13:dc:00:07:c8:94:48:56:61:32:0a:a9:
         49:49:ff:78
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr8G/dBPJBqVa3D6QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjBjYTAyZTctN2ExMi00ZDkwLThmZWItOGYxMzBhYWVh
MzgwMB4XDTI1MDgyNjEzMDA0MVoXDTI1MTEyNDE0MDA0MVowLzEtMCsGA1UEAxMk
YjUzOWU0YzctZWU1ZC00MjJiLWJjMDEtMTVjZDdhZTc4YzEwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoBWzcWuU+5GzjiMR4vc5gd4XPehN4ZVst51W
bvTFxlB/9T7AOMqpJSD8BZX7Kh00Omuj+7j08MMde+i2UBIvPo2aQMfazfDWWd6Z
Up3bWtuq3gG+Jg8INf1eMi8Gtk20WQIYTfI6n5Dc/BjDpv+bG9YXDiR4EZQJ/ps+
V3nBknP13INbqCeTN4IwM35MYUBFhutQP1W3c7cIv9kAVj3snPD0FANZb+hZSSCc
NbiKKJYNlmZM8baBIaSG5qUUv7iQP4Lf+F7EaGgPp/D2Tm+qyJbzmoSXXGj7ZdSv
gW60FCTve/MOfLSiUXjjR6o5Ho16ucGZjhv8S6REZx8rhL1ztQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFP3t4XYr/h4G6A7ZkU7XvzWqMsCcMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMGNh
MDJlNy03YTEyLTRkOTAtOGZlYi04ZjEzMGFhZWEzODAvNzYyY2NmMzctOGRlOC0z
N2JkLTljZTktYjRhNGRiZTFjY2Y1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjBjYTAyZTctN2ExMi00ZDkwLThm
ZWItOGYxMzBhYWVhMzgwL2IwY2EwMmU3LTdhMTItNGQ5MC04ZmViLThmMTMwYWFl
YTM4MC5jcmwwHwYDVR0jBBgwFoAU7+jFlj49ZhUup1G+nGYMlTKJpFswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMGNhMDJlNy03YTEyLTRkOTAtOGZlYi04ZjEz
MGFhZWEzODAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApDf0MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADJnj/UaSi/4V06+Zz0aoQZfx8xYjBpAlWP0EkUq2HQuy+lNv051VWuN
SpcDLNnl/+Po5YYjgovWzubybSqhcdq1Mr+T7VVPwNdcP01T1TCdgDni8hCySOIj
//fP7l828dJuyb7q1Ihhnz7zAWCUtahLAceGrkRXuhekp3/wUZ2Bq7ZdVoUA1kb6
XrpwpQVSawJhrqwKWdu8ujdedfBhkCD9WKJA6fUTqqf5SPbSV4pkzmW4xOH2k8ol
rCYJel7FmfcnpcNjdLWeHPWnEbaMlzbxwJfJBhTBL0BWuSXEeJtSvqeXci7lj0Eg
fJhVKoAqARPcAAfIlEhWYTIKqUlJ/3g=
-----END CERTIFICATE-----
Generated at Mon Sep 8 01:45:04 2025 by rpki-client