Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/52fce1ba-c12a-327a-9545-c46f73eef05c.roa
File:                     52fce1ba-c12a-327a-9545-c46f73eef05c.roa (raw, json)
Hash identifier:          pPaOJ74ztnyB0N/xtmkbBP4Hci8ZBFJKLvSjIW9ZXQA=
Subject key identifier:   EB:A6:10:FD:72:F5:2C:EC:6C:69:DB:38:71:CC:B6:1F:00:BE:1A:0E
Certificate issuer:       /CN=b0ca02e7-7a12-4d90-8feb-8f130aaea380
Certificate serial:       010D0C9F43285849F17FB326B18572C1F6A89570
Authority key identifier: EF:E8:C5:96:3E:3D:66:15:2E:A7:51:BE:9C:66:0C:95:32:89:A4:5B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/52fce1ba-c12a-327a-9545-c46f73eef05c.roa
Signing time:             Fri 23 May 2025 01:00:49 +0000
ROA not before:           Fri 23 May 2025 01:00:49 +0000
ROA not after:            Thu 21 Aug 2025 01:00:49 +0000
asID:                     14618
IP address blocks:        164.55.235.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/b0ca02e7-7a12-4d90-8feb-8f130aaea380.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/b0ca02e7-7a12-4d90-8feb-8f130aaea380.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f1:7f:b3:26:b1:85:72:c1:f6:a8:95:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0ca02e7-7a12-4d90-8feb-8f130aaea380
        Validity
            Not Before: May 23 01:00:49 2025 GMT
            Not After : Aug 21 01:00:49 2025 GMT
        Subject: CN=3b5528c2-f2fe-4d32-a19e-17e9ae967b52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:d9:5d:88:8c:63:56:10:89:33:a1:73:2a:b0:
                    23:67:29:b9:a0:4b:e2:f9:4a:84:a0:8b:88:74:23:
                    02:ab:86:ad:b3:d1:cd:1c:30:91:4b:82:26:97:4c:
                    d2:bb:81:41:a4:6b:f9:b8:85:39:04:8d:f4:87:2c:
                    f3:6c:59:42:91:07:2c:49:fa:da:e7:c5:39:e5:af:
                    7b:16:36:0c:43:f7:7c:d0:7a:f0:66:6e:9b:0c:92:
                    f4:fa:30:e5:33:c9:ce:d9:5f:d1:65:24:38:3c:ea:
                    20:ad:93:92:7e:5f:53:df:14:47:7b:b0:d5:54:73:
                    91:ac:67:e9:35:28:86:dd:89:87:4c:39:2d:f4:d2:
                    a5:ba:f3:31:37:5f:79:cf:63:68:6b:5e:ed:cc:64:
                    c9:74:ff:70:5e:4e:45:8b:25:b7:f4:d4:03:ec:44:
                    23:3f:c3:da:dd:eb:0b:6b:bc:b6:a0:67:c1:c8:58:
                    9b:4d:02:8a:73:65:2e:f9:1a:41:7f:57:0a:af:2f:
                    fe:a7:81:ee:b5:f9:d3:f2:16:9f:14:03:44:c4:48:
                    32:03:6e:ac:cb:c9:d0:b0:34:7e:50:e4:3e:bf:49:
                    03:f3:b8:9a:20:14:08:67:76:27:38:a2:96:78:2b:
                    53:62:86:44:18:5a:8a:90:73:71:bf:92:db:c1:42:
                    4d:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:A6:10:FD:72:F5:2C:EC:6C:69:DB:38:71:CC:B6:1F:00:BE:1A:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/52fce1ba-c12a-327a-9545-c46f73eef05c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/b0ca02e7-7a12-4d90-8feb-8f130aaea380.crl

            X509v3 Authority Key Identifier:
                keyid:EF:E8:C5:96:3E:3D:66:15:2E:A7:51:BE:9C:66:0C:95:32:89:A4:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.55.235.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:79:3f:53:07:61:0e:25:89:4f:26:e6:eb:10:ce:ff:68:1f:
         93:2b:24:70:80:2d:a9:4a:34:f8:35:d3:10:46:26:4d:81:6d:
         ce:66:c0:26:60:82:03:e0:2d:31:d1:f0:eb:14:11:81:17:22:
         b9:f0:cf:1d:6a:07:18:e6:2b:17:d5:c2:9a:32:41:a7:50:f1:
         ee:ef:c6:e5:3c:50:c9:f9:ad:40:9b:a1:65:fd:84:16:90:27:
         33:07:bd:8e:93:b2:79:44:60:9a:47:72:a9:7d:b4:17:77:f3:
         c9:93:93:cb:92:e8:1c:03:a8:b1:68:3a:35:0b:3d:76:c7:5d:
         10:96:d4:0b:61:bc:7d:17:6b:81:48:d8:f7:f3:78:e8:02:cb:
         01:e1:08:c8:a5:4d:52:a4:80:25:1c:0c:e7:67:7c:05:c1:65:
         92:32:b0:cb:3e:d0:32:10:1a:a1:df:3d:ec:aa:08:e2:f7:d8:
         96:be:31:69:32:fe:0a:94:e9:bf:bb:b3:15:7d:c5:4a:07:17:
         54:73:f6:64:33:df:e7:ac:ca:cd:ed:0c:fe:a7:d6:b2:57:6b:
         dc:07:4b:44:ca:57:82:30:8f:d9:01:73:2d:17:23:b8:9a:29:
         2a:50:cc:4f:ae:d0:69:1c:81:79:4e:ab:30:e1:60:cb:3a:7b:
         46:8a:04:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 23:59:07 2025 by rpki-client