Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/96525ac2-3951-316b-b1c6-8b0b84089950.roa
File:                     96525ac2-3951-316b-b1c6-8b0b84089950.roa (raw, json)
Hash identifier:          5wl62xByPIgu/ca7wHitXlQ8vr0xN+s7WxLhbxcB5Rs=
Subject key identifier:   EE:58:67:1E:F8:18:E7:AC:90:48:F6:CE:21:12:71:43:4D:9D:78:80
Certificate issuer:       /CN=b0ca02e7-7a12-4d90-8feb-8f130aaea380
Certificate serial:       010D0C9F432858486EF5BB92DBC094EA7620CDA0
Authority key identifier: EF:E8:C5:96:3E:3D:66:15:2E:A7:51:BE:9C:66:0C:95:32:89:A4:5B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/96525ac2-3951-316b-b1c6-8b0b84089950.roa
Signing time:             Sat 04 Jan 2025 14:00:51 +0000
ROA not before:           Sat 04 Jan 2025 14:00:51 +0000
ROA not after:            Fri 04 Apr 2025 13:00:51 +0000
asID:                     14618
IP address blocks:        164.55.237.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/b0ca02e7-7a12-4d90-8feb-8f130aaea380.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/b0ca02e7-7a12-4d90-8feb-8f130aaea380.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:6e:f5:bb:92:db:c0:94:ea:76:20:cd:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0ca02e7-7a12-4d90-8feb-8f130aaea380
        Validity
            Not Before: Jan  4 14:00:51 2025 GMT
            Not After : Apr  4 13:00:51 2025 GMT
        Subject: CN=4cf209f9-ddfe-4993-9754-b81ad5de7a47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:f8:33:48:c7:95:c6:f2:19:fe:59:10:ca:ff:
                    9b:c1:eb:cc:2f:29:1a:a5:fd:81:2a:a9:ca:22:31:
                    20:3d:22:bd:1c:be:56:1a:1a:e6:7b:78:9c:df:18:
                    44:3f:58:9c:66:0c:4b:de:9e:61:58:75:e5:78:2f:
                    a4:22:b9:c4:93:5c:04:f2:78:25:ef:3e:ff:5b:05:
                    2e:73:b7:9a:23:ce:fc:10:a0:37:f8:51:98:77:d4:
                    5c:85:d7:35:b4:85:46:f4:08:ed:be:b3:0f:58:c1:
                    67:df:fa:a6:1c:c4:8e:0b:63:6f:b6:90:8d:4f:e7:
                    af:43:ac:6f:57:08:b6:d2:26:7a:7a:a2:f3:ee:8a:
                    2e:2c:45:f2:f4:c1:19:9d:09:07:dc:30:0d:20:e2:
                    7d:bc:92:16:41:de:25:49:55:e8:f1:88:04:6c:92:
                    42:55:f2:86:73:19:f6:d9:dc:5f:b7:c0:0d:13:a1:
                    a9:f2:b5:52:42:ff:b5:89:ad:4f:47:2c:1b:94:aa:
                    22:08:fd:d9:67:63:c7:f2:b9:99:be:6a:b7:6d:ed:
                    7e:60:8f:ac:d2:0e:91:d4:cf:4d:93:fc:04:12:e8:
                    ca:91:8d:44:e5:00:af:1f:cf:81:85:05:8b:06:95:
                    83:a6:63:36:cd:2f:0a:0d:cc:9e:3a:77:fb:dd:fe:
                    e2:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:58:67:1E:F8:18:E7:AC:90:48:F6:CE:21:12:71:43:4D:9D:78:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/96525ac2-3951-316b-b1c6-8b0b84089950.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/b0ca02e7-7a12-4d90-8feb-8f130aaea380.crl

            X509v3 Authority Key Identifier:
                keyid:EF:E8:C5:96:3E:3D:66:15:2E:A7:51:BE:9C:66:0C:95:32:89:A4:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.55.237.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:1c:bc:98:82:9f:e5:60:28:9b:91:cb:fb:22:c8:b1:ee:94:
         89:93:3f:71:3c:ef:5c:b2:6e:4e:10:da:00:a7:6d:5e:3c:bb:
         85:1c:27:8d:e5:63:1f:9c:61:9b:71:6a:4a:12:48:ac:fe:c3:
         25:70:23:c3:ff:46:f3:8f:3d:a8:fd:23:dc:f5:e0:03:93:d5:
         c6:ad:32:e8:f2:51:59:68:83:f9:de:22:40:59:65:5c:91:93:
         10:bc:bc:1e:81:a4:52:d3:8a:37:e8:1e:99:4f:57:7f:ef:8b:
         e0:a8:0e:3d:5b:80:48:a9:64:66:e5:62:86:31:16:0f:7c:07:
         71:db:bb:29:21:5a:dd:d4:0d:0c:e4:3e:88:9f:20:77:37:c6:
         8f:71:20:1d:b3:bc:88:1f:48:df:12:c3:d6:cb:41:d9:31:22:
         38:25:de:c3:e9:c5:0d:e2:93:e4:11:86:2e:9f:2a:d5:59:a8:
         fb:69:5e:4f:ec:23:ed:d2:6c:6a:a9:3f:ff:c9:67:92:fb:e8:
         cf:73:1d:5f:0d:20:37:de:97:69:3c:8e:52:25:e8:c3:c4:6f:
         8e:d0:9a:53:91:ce:71:7c:26:ef:83:9d:09:1d:e4:5b:f8:d1:
         d0:6c:f8:ee:68:d8:95:20:19:d0:7f:47:43:7d:ff:74:b6:dd:
         5b:de:ca:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:37:53 2025 by rpki-client