Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/2933802b-551b-31b7-9d2a-71696f02cf24.roa
File:                     2933802b-551b-31b7-9d2a-71696f02cf24.roa (raw, json)
Hash identifier:          +W9Lf8Z+F5pSlBPLhJOoyflCjMHeWEIQm1XeYsZ6cb4=
Subject key identifier:   76:B6:93:D3:19:10:B3:80:00:97:B0:BB:67:07:37:3F:C9:D8:EA:63
Certificate issuer:       /CN=b0ca02e7-7a12-4d90-8feb-8f130aaea380
Certificate serial:       010D0C9F432858498CFF0E29489AC484E14BF380
Authority key identifier: EF:E8:C5:96:3E:3D:66:15:2E:A7:51:BE:9C:66:0C:95:32:89:A4:5B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/2933802b-551b-31b7-9d2a-71696f02cf24.roa
Signing time:             Thu 17 Apr 2025 01:00:45 +0000
ROA not before:           Thu 17 Apr 2025 01:00:45 +0000
ROA not after:            Wed 16 Jul 2025 01:00:45 +0000
asID:                     14618
IP address blocks:        164.55.239.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/b0ca02e7-7a12-4d90-8feb-8f130aaea380.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/b0ca02e7-7a12-4d90-8feb-8f130aaea380.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:8c:ff:0e:29:48:9a:c4:84:e1:4b:f3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0ca02e7-7a12-4d90-8feb-8f130aaea380
        Validity
            Not Before: Apr 17 01:00:45 2025 GMT
            Not After : Jul 16 01:00:45 2025 GMT
        Subject: CN=53916fc3-fe45-41c5-b321-124c7c62c56e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:bb:82:de:7f:a5:1a:da:0d:96:6e:cf:b6:84:
                    a3:ae:d2:77:ce:b8:b5:fa:bc:1e:7e:71:5c:64:98:
                    82:3f:14:f6:bd:d5:ea:d9:15:45:a1:cb:d0:6c:41:
                    83:96:45:ac:e3:61:72:c5:64:08:8c:97:df:47:31:
                    33:94:d0:c7:a1:b1:df:65:ad:55:62:8a:dc:e4:2a:
                    79:b7:00:26:c6:77:7e:17:69:d4:ed:a9:e7:24:df:
                    01:0e:d3:2c:56:cd:a5:32:b6:e2:86:ac:16:55:34:
                    f2:74:20:e1:42:bd:08:32:6b:49:22:94:f5:6c:5d:
                    5a:dd:6c:60:cd:d0:7c:4b:5b:a6:a9:a6:49:2f:35:
                    d0:8e:09:f5:1d:3e:9b:74:d9:3b:85:de:91:f1:3a:
                    8e:de:ed:69:2a:fd:ef:fd:4d:a3:5d:d8:4e:ae:db:
                    93:3f:ca:cc:7d:ac:79:d8:ef:2f:ad:dc:ae:71:d8:
                    85:a6:87:bc:29:5c:45:48:b3:a7:6b:4b:10:6d:f5:
                    f5:cb:ce:ee:69:98:1f:90:83:be:1a:fa:c3:24:c0:
                    cd:83:ce:f9:6d:62:27:c3:a2:f3:47:84:1d:80:b6:
                    eb:7d:11:50:c8:9e:33:72:89:77:51:17:12:2c:eb:
                    db:9b:ac:f4:50:6b:8d:d3:05:08:5d:07:e2:f6:8f:
                    9a:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:B6:93:D3:19:10:B3:80:00:97:B0:BB:67:07:37:3F:C9:D8:EA:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/2933802b-551b-31b7-9d2a-71696f02cf24.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/b0ca02e7-7a12-4d90-8feb-8f130aaea380.crl

            X509v3 Authority Key Identifier:
                keyid:EF:E8:C5:96:3E:3D:66:15:2E:A7:51:BE:9C:66:0C:95:32:89:A4:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.55.239.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:1c:c4:ed:8a:68:11:cd:61:ae:8f:a4:74:ca:0a:8c:1e:89:
         42:fa:2c:58:95:b5:aa:c0:2f:f5:0d:8e:95:93:2f:96:24:67:
         69:54:d8:5b:ea:06:54:cb:46:b5:07:b5:c5:8c:80:dc:a1:be:
         47:44:65:85:08:86:16:e2:c3:26:2e:8a:70:83:19:c5:33:31:
         f0:69:30:a1:f1:fd:8e:38:fb:b8:32:24:3f:bd:4f:40:d1:18:
         4d:0f:71:62:1e:57:aa:51:af:c7:58:84:d7:d6:05:ae:af:e1:
         ee:7e:73:de:8e:ca:78:28:11:40:c6:34:47:3a:0c:1c:f4:4d:
         6f:f9:78:9d:99:d6:45:e8:41:7b:c5:17:3e:ce:52:36:58:75:
         38:a6:34:d8:ac:d3:33:95:2c:d0:cc:99:6e:e9:3c:5a:f8:7b:
         ec:24:ca:e6:8b:18:0d:df:9a:29:18:07:4e:40:25:f4:1c:b5:
         2a:2e:e3:dc:11:24:86:74:1a:98:b7:5f:c9:54:54:af:34:2a:
         6b:72:6b:4c:e6:c1:b3:9e:63:e9:25:08:0b:1c:e6:4a:be:93:
         01:ef:f0:f4:51:c8:cf:7a:17:2d:4e:51:c6:3e:5e:ec:4c:6d:
         1e:6e:53:fe:3b:7c:96:d0:33:c4:06:6d:3c:25:5d:f0:33:bc:
         16:87:b5:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:24:30 2025 by rpki-client