Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/6cbb2fe5-29ce-387b-aa07-6bb4fc99e94c.roa
File:                     6cbb2fe5-29ce-387b-aa07-6bb4fc99e94c.roa (raw, json)
Hash identifier:          RSy2zuRXbKP9QHLsD/VvsbwhOn9415P9d7clbM+X6hk=
Subject key identifier:   AA:46:95:DD:1C:2D:BE:3D:B8:84:65:5D:83:D7:E6:33:37:5D:D5:87
Certificate issuer:       /CN=b0ca02e7-7a12-4d90-8feb-8f130aaea380
Certificate serial:       010D0C9F4328584D869544B52FF923BDF0D84120
Authority key identifier: EF:E8:C5:96:3E:3D:66:15:2E:A7:51:BE:9C:66:0C:95:32:89:A4:5B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/6cbb2fe5-29ce-387b-aa07-6bb4fc99e94c.roa
Signing time:             Thu 16 Apr 2026 13:00:31 +0000
ROA not before:           Thu 16 Apr 2026 13:00:31 +0000
ROA not after:            Wed 15 Jul 2026 13:00:31 +0000
asID:                     16509
IP address blocks:        164.55.244.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/b0ca02e7-7a12-4d90-8feb-8f130aaea380.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/b0ca02e7-7a12-4d90-8feb-8f130aaea380.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:86:95:44:b5:2f:f9:23:bd:f0:d8:41:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0ca02e7-7a12-4d90-8feb-8f130aaea380
        Validity
            Not Before: Apr 16 13:00:31 2026 GMT
            Not After : Jul 15 13:00:31 2026 GMT
        Subject: CN=af4f15b4-47f2-428f-88f8-26d2b289d4b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:0d:f8:a4:9b:38:ee:11:2f:2b:7a:4b:0d:3d:
                    83:d5:9c:64:4b:f8:0e:cb:ea:10:f8:d8:45:fe:71:
                    dd:64:fa:94:1a:1d:64:e7:d1:2e:b5:e6:5b:72:21:
                    43:15:45:0d:cf:51:71:17:ae:ee:6e:36:04:1a:0c:
                    cd:60:ff:3a:20:30:bd:da:c4:00:e1:f0:a8:f3:62:
                    b7:24:f2:5a:b1:44:a9:26:fa:28:16:67:d3:69:04:
                    5d:fb:ed:91:df:2d:9c:be:8a:a5:77:17:6b:8c:c7:
                    74:02:b5:07:79:38:78:53:9f:c8:9e:04:8b:e5:29:
                    34:83:72:48:84:3a:b2:eb:68:2b:ca:f6:5f:d5:0a:
                    7d:a0:36:0b:7c:26:62:cf:1a:b0:af:08:88:01:35:
                    a1:4f:7f:db:f2:bd:9b:0d:fa:d1:05:ae:8a:be:58:
                    e3:da:ac:c3:55:7a:ae:2a:65:88:a5:d0:f8:18:b7:
                    96:94:a1:40:6e:15:13:2d:fc:c3:61:dc:30:10:40:
                    f7:2a:be:e8:66:a6:13:52:b5:9d:61:5f:c3:57:68:
                    8a:32:cc:d8:d1:80:72:9f:a1:72:bb:3d:c0:6d:a4:
                    f2:ec:51:7b:38:ce:3a:42:95:7a:8c:20:6c:5c:e3:
                    31:2d:ea:db:6d:15:01:a7:9b:38:74:10:9e:40:05:
                    98:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:46:95:DD:1C:2D:BE:3D:B8:84:65:5D:83:D7:E6:33:37:5D:D5:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/6cbb2fe5-29ce-387b-aa07-6bb4fc99e94c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/b0ca02e7-7a12-4d90-8feb-8f130aaea380.crl

            X509v3 Authority Key Identifier:
                keyid:EF:E8:C5:96:3E:3D:66:15:2E:A7:51:BE:9C:66:0C:95:32:89:A4:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.55.244.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:54:e9:a3:9c:a3:88:2a:7c:ac:24:87:b8:34:96:1b:91:5e:
         93:65:8f:dc:16:50:50:75:08:55:d9:b4:8d:1c:78:14:9e:49:
         d0:c1:f0:2b:28:17:c2:32:80:af:f9:30:e0:38:90:43:36:f1:
         83:64:94:ad:f6:29:cd:0e:2d:ba:66:60:24:19:12:8b:d1:75:
         31:30:45:e7:b4:22:6a:15:1e:2d:0f:a1:9f:a7:a8:27:64:ff:
         3c:08:d7:49:c6:18:ac:1e:7e:3c:87:31:54:ab:aa:e2:de:3d:
         5a:e4:1c:f9:54:34:05:e9:a2:6a:d0:65:ed:46:da:9b:4a:80:
         3f:30:ce:e9:e6:41:fe:6b:b4:4e:8e:57:c3:cf:56:8e:cf:7d:
         44:57:2d:52:fa:6c:47:76:fc:38:7e:bb:67:1c:4f:a1:69:d0:
         21:a9:ab:d7:2a:ea:c3:b7:d2:7b:26:7a:81:5e:5d:16:2a:f9:
         62:5f:6c:c8:f7:8e:29:75:fb:a9:6f:8f:5a:e0:85:fa:a4:4b:
         f9:23:82:04:91:2c:6b:f4:06:64:47:3b:14:35:fb:13:15:3d:
         33:f8:50:af:05:ae:7e:67:d7:e9:f1:4e:e5:60:b8:0a:51:16:
         3f:89:cc:ee:ad:5f:da:bc:e8:03:a0:ec:ac:05:ab:0c:b8:45:
         c1:ad:28:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:55:52 2026 by rpki-client