Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/f268b02d-43e0-37ff-84eb-09008a5b9cf9.roa
File:                     f268b02d-43e0-37ff-84eb-09008a5b9cf9.roa (raw, json)
Hash identifier:          /fTg2D+Aj4zg8tubajif6aETLC0x0/OaW2qqims9cuo=
Subject key identifier:   96:D0:77:FD:BB:96:34:FE:6E:5A:2B:4A:9E:93:18:75:0F:38:AD:01
Certificate issuer:       /CN=b0ca02e7-7a12-4d90-8feb-8f130aaea380
Certificate serial:       010D0C9F43285849FE0FE69A630088DD3E763700
Authority key identifier: EF:E8:C5:96:3E:3D:66:15:2E:A7:51:BE:9C:66:0C:95:32:89:A4:5B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/f268b02d-43e0-37ff-84eb-09008a5b9cf9.roa
Signing time:             Tue 27 May 2025 13:01:05 +0000
ROA not before:           Tue 27 May 2025 13:01:05 +0000
ROA not after:            Mon 25 Aug 2025 13:01:05 +0000
asID:                     16509
IP address blocks:        164.55.234.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/b0ca02e7-7a12-4d90-8feb-8f130aaea380.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/b0ca02e7-7a12-4d90-8feb-8f130aaea380.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:fe:0f:e6:9a:63:00:88:dd:3e:76:37:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0ca02e7-7a12-4d90-8feb-8f130aaea380
        Validity
            Not Before: May 27 13:01:05 2025 GMT
            Not After : Aug 25 13:01:05 2025 GMT
        Subject: CN=fef81e5e-f8e5-4e60-a1d1-147d72d10c64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:61:10:7f:af:4d:8f:8d:f3:8d:6d:83:92:ae:
                    78:aa:c3:c8:5d:c5:49:bd:fd:25:66:94:cf:18:4e:
                    b2:ed:f2:fe:d3:c1:5c:d4:06:be:cc:92:c0:31:8d:
                    0e:c8:59:b9:8a:6b:6e:d3:72:11:60:23:fa:23:63:
                    6e:a8:fc:a8:66:27:d6:39:6c:53:a4:90:50:bc:8f:
                    da:1f:2a:1a:6c:75:71:94:8e:30:92:0c:15:4e:0f:
                    3a:0a:56:d7:df:46:24:00:40:1e:08:95:b6:df:7f:
                    dd:32:70:f4:6a:ea:c1:05:9c:d6:89:73:b8:5e:94:
                    f0:bf:e1:a8:f1:6a:1f:66:a2:d5:62:ab:b4:cb:69:
                    8a:87:2f:e8:75:35:66:30:4f:c5:03:30:14:b0:1f:
                    32:5b:8d:a4:e8:55:c8:55:3f:6d:c9:13:16:3d:be:
                    68:cf:2e:e2:e2:16:77:32:d4:ef:73:7f:b1:43:72:
                    75:a9:f3:6a:b6:58:38:6b:5c:0d:f0:93:d1:8d:77:
                    3e:11:8b:f6:b9:ea:cc:f0:c1:7d:76:57:51:05:8f:
                    5b:c4:23:c8:5b:f0:06:92:fe:87:7d:37:ba:7a:bb:
                    73:21:9b:75:51:94:74:8b:f4:75:ba:3e:c1:5f:df:
                    b6:f1:ae:57:26:fb:24:a8:2f:6a:cc:4a:57:3e:50:
                    7d:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:D0:77:FD:BB:96:34:FE:6E:5A:2B:4A:9E:93:18:75:0F:38:AD:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/f268b02d-43e0-37ff-84eb-09008a5b9cf9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/b0ca02e7-7a12-4d90-8feb-8f130aaea380.crl

            X509v3 Authority Key Identifier:
                keyid:EF:E8:C5:96:3E:3D:66:15:2E:A7:51:BE:9C:66:0C:95:32:89:A4:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.55.234.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:9c:1c:7a:ca:8e:61:a8:9d:c0:b4:bf:d9:ce:93:f2:a3:2b:
         1a:62:41:ff:bc:9d:2f:b8:7c:e8:ef:7b:01:1b:96:3f:9f:99:
         a1:c4:9b:3d:7c:3b:ce:82:ff:b7:24:45:68:ee:15:6c:d9:d7:
         e1:89:82:ac:69:27:85:d6:d9:cb:94:3b:67:3b:a6:05:2d:00:
         10:bf:33:72:dd:1c:ff:46:76:94:13:5d:28:c3:07:a6:7e:c7:
         28:d2:e8:56:d1:7a:d4:1d:1e:e7:ed:b4:26:6b:59:51:44:c4:
         ba:06:de:7a:5f:79:e6:e2:de:14:3e:0f:15:98:af:16:fe:e0:
         cd:5e:2c:c9:ff:b9:31:15:20:bb:e2:ac:2c:78:5a:36:ef:c2:
         9d:cc:bc:46:0c:ab:02:c7:bc:c1:f3:65:94:7e:f5:bd:20:df:
         12:97:8f:6d:84:45:53:81:91:18:76:2c:90:f0:a8:fd:e3:07:
         ea:09:e0:93:3a:df:eb:a6:77:13:49:e1:02:1e:c2:b9:12:98:
         ae:a1:73:83:c3:11:70:ec:bd:97:88:d0:27:fd:ba:95:56:78:
         5d:52:60:6a:03:88:f9:af:ac:10:74:3b:e6:41:d1:02:51:e8:
         90:e3:79:b8:af:d6:68:8f:35:2d:d9:ce:0f:bc:90:cf:4b:83:
         52:24:34:3c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn+D+aaYwCI3T52NwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjBjYTAyZTctN2ExMi00ZDkwLThmZWItOGYxMzBhYWVh
MzgwMB4XDTI1MDUyNzEzMDEwNVoXDTI1MDgyNTEzMDEwNVowLzEtMCsGA1UEAxMk
ZmVmODFlNWUtZjhlNS00ZTYwLWExZDEtMTQ3ZDcyZDEwYzY0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1WEQf69Nj43zjW2Dkq54qsPIXcVJvf0lZpTP
GE6y7fL+08Fc1Aa+zJLAMY0OyFm5imtu03IRYCP6I2NuqPyoZifWOWxTpJBQvI/a
HyoabHVxlI4wkgwVTg86ClbX30YkAEAeCJW233/dMnD0aurBBZzWiXO4XpTwv+Go
8WofZqLVYqu0y2mKhy/odTVmME/FAzAUsB8yW42k6FXIVT9tyRMWPb5ozy7i4hZ3
MtTvc3+xQ3J1qfNqtlg4a1wN8JPRjXc+EYv2uerM8MF9dldRBY9bxCPIW/AGkv6H
fTe6ertzIZt1UZR0i/R1uj7BX9+28a5XJvskqC9qzEpXPlB99wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJbQd/27ljT+blorSp6TGHUPOK0BMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMGNh
MDJlNy03YTEyLTRkOTAtOGZlYi04ZjEzMGFhZWEzODAvZjI2OGIwMmQtNDNlMC0z
N2ZmLTg0ZWItMDkwMDhhNWI5Y2Y5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjBjYTAyZTctN2ExMi00ZDkwLThm
ZWItOGYxMzBhYWVhMzgwL2IwY2EwMmU3LTdhMTItNGQ5MC04ZmViLThmMTMwYWFl
YTM4MC5jcmwwHwYDVR0jBBgwFoAU7+jFlj49ZhUup1G+nGYMlTKJpFswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMGNhMDJlNy03YTEyLTRkOTAtOGZlYi04ZjEz
MGFhZWEzODAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApDfqMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKGcHHrKjmGoncC0v9nOk/KjKxpiQf+8nS+4fOjvewEblj+fmaHEmz18
O86C/7ckRWjuFWzZ1+GJgqxpJ4XW2cuUO2c7pgUtABC/M3LdHP9GdpQTXSjDB6Z+
xyjS6FbRetQdHufttCZrWVFExLoG3npfeebi3hQ+DxWYrxb+4M1eLMn/uTEVILvi
rCx4Wjbvwp3MvEYMqwLHvMHzZZR+9b0g3xKXj22ERVOBkRh2LJDwqP3jB+oJ4JM6
3+umdxNJ4QIewrkSmK6hc4PDEXDsvZeI0Cf9upVWeF1SYGoDiPmvrBB0O+ZB0QJR
6JDjebiv1miPNS3Zzg+8kM9Lg1IkNDw=
-----END CERTIFICATE-----
Generated at Sat Jun 14 06:33:23 2025 by rpki-client