Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/78f0722d-57e1-30e0-9060-df4d7fec3ed2.roa
File:                     78f0722d-57e1-30e0-9060-df4d7fec3ed2.roa (raw, json)
Hash identifier:          bwsbg2hAvjBbF9F/tUgdy0U3vNBMjLD4yMJP5j/LX88=
Subject key identifier:   85:2A:B3:F8:CF:CE:5E:22:F2:32:4E:73:70:10:84:11:32:84:92:D2
Certificate issuer:       /CN=b0ca02e7-7a12-4d90-8feb-8f130aaea380
Certificate serial:       010D0C9F4328584ECD372E385E50EF00A58E68F0
Authority key identifier: EF:E8:C5:96:3E:3D:66:15:2E:A7:51:BE:9C:66:0C:95:32:89:A4:5B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/78f0722d-57e1-30e0-9060-df4d7fec3ed2.roa
Signing time:             Tue 11 Aug 2026 13:00:11 +0000
ROA not before:           Tue 11 Aug 2026 13:00:11 +0000
ROA not after:            Mon 09 Nov 2026 14:00:11 +0000
asID:                     14618
IP address blocks:        164.55.225.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/b0ca02e7-7a12-4d90-8feb-8f130aaea380.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/b0ca02e7-7a12-4d90-8feb-8f130aaea380.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:cd:37:2e:38:5e:50:ef:00:a5:8e:68:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0ca02e7-7a12-4d90-8feb-8f130aaea380
        Validity
            Not Before: Aug 11 13:00:11 2026 GMT
            Not After : Nov  9 14:00:11 2026 GMT
        Subject: CN=37a50b7d-5894-4366-b7cb-df5c41791d90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:6a:14:41:d6:97:d9:5c:59:22:a1:5d:c0:1f:
                    52:4f:6d:5d:c3:f5:f2:ac:64:f3:f4:da:2d:1f:dc:
                    47:5e:7c:86:21:01:f9:5e:15:b5:d3:2d:f4:3b:4f:
                    b5:2b:3b:bc:91:dc:65:c5:11:44:02:63:ac:41:4b:
                    bf:b1:a9:86:bd:b1:5a:c7:d7:22:45:1c:dc:2d:e3:
                    39:2a:57:20:43:49:f3:4c:60:be:b2:aa:d0:76:6f:
                    78:b0:f4:f1:26:8f:cd:b6:70:90:b6:a7:6e:f9:7b:
                    de:0d:c6:a4:71:11:8e:20:c8:c6:d3:ae:88:5f:03:
                    cd:19:a9:05:c9:cd:42:cf:24:5d:11:03:f8:69:3a:
                    ad:60:3a:ab:d6:49:52:81:72:1f:94:1d:e0:ac:7b:
                    94:01:b6:b0:99:e0:0a:44:ca:d8:aa:c9:14:4e:ba:
                    af:57:d8:69:aa:1a:de:56:ef:df:31:7e:d6:3a:8a:
                    1e:95:e5:e3:63:fa:c3:c0:96:e9:f1:29:62:63:e2:
                    47:e3:f4:d5:ee:ca:ac:88:15:00:63:d4:31:94:e0:
                    0d:f5:9c:fc:7d:a3:6f:36:15:32:4b:80:54:96:c7:
                    d6:5b:f0:46:a5:68:05:ff:8e:3f:a6:fc:be:1c:75:
                    2b:c5:91:29:de:3a:4f:d9:9a:db:25:9b:1d:f2:b9:
                    a1:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:2A:B3:F8:CF:CE:5E:22:F2:32:4E:73:70:10:84:11:32:84:92:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/78f0722d-57e1-30e0-9060-df4d7fec3ed2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/b0ca02e7-7a12-4d90-8feb-8f130aaea380.crl

            X509v3 Authority Key Identifier:
                keyid:EF:E8:C5:96:3E:3D:66:15:2E:A7:51:BE:9C:66:0C:95:32:89:A4:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.55.225.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:a2:30:4a:71:1f:3c:4c:2a:74:af:8d:25:fd:20:a5:cb:c3:
         d8:b1:61:c0:34:8f:1b:75:86:e3:20:60:1b:64:dc:d6:09:bb:
         5f:52:5b:a4:9b:f9:10:81:0e:6d:8f:d7:8d:3d:eb:e2:e3:4e:
         52:ef:cf:14:e4:e4:1a:f0:ac:3d:2f:d4:9e:32:0c:46:b6:51:
         9b:01:3b:bb:d7:9a:26:3c:7f:5d:8f:76:75:19:f7:85:f9:a7:
         bd:d3:81:89:3f:f3:b5:d1:6c:88:e3:26:05:49:ce:68:86:c4:
         6c:0f:c4:ff:3e:dc:33:5b:2a:50:55:a8:0d:e0:44:79:af:88:
         58:cf:24:8c:d9:e7:8e:16:62:2d:6f:99:7f:24:56:de:f8:a7:
         3a:2b:f6:37:30:28:e1:4e:66:48:8c:c0:46:ba:55:7f:86:01:
         46:5e:3b:52:df:d2:64:a8:32:5c:7a:88:8a:f1:e5:fa:bd:bb:
         47:bf:3e:49:fa:38:33:67:2d:41:a7:af:78:cb:5d:36:94:bd:
         ce:de:19:ad:59:b4:c7:72:bb:c8:76:d7:18:2f:9d:ef:8a:44:
         7c:72:6d:0f:25:ab:45:67:fe:fc:b8:b5:78:41:18:68:b7:ec:
         1a:30:f4:85:83:d6:d9:3b:b3:0d:ba:fe:1d:52:6a:1d:d3:4e:
         5c:f5:cf:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 21:57:32 2026 by rpki-client