Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/63dc8163-abd2-4d81-9ad2-1adb867f4b33/026ba16c-1fee-30b7-af95-3de89cc94143.roa
File:                     026ba16c-1fee-30b7-af95-3de89cc94143.roa (raw, json)
Hash identifier:          Gbl3JgVhryWFyw7bWlLPZrsf/4fraVJihv5cmELS57Q=
Subject key identifier:   74:B2:F3:28:53:C8:E6:C9:B6:58:33:8D:38:61:D3:C7:3C:24:78:FE
Certificate issuer:       /CN=63dc8163-abd2-4d81-9ad2-1adb867f4b33
Certificate serial:       010D0C9F432858495C243B2E2761F96F4155CE00
Authority key identifier: C5:CC:7F:57:B0:B1:95:65:22:A9:18:2A:E1:F2:67:7C:11:24:41:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/63dc8163-abd2-4d81-9ad2-1adb867f4b33.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/63dc8163-abd2-4d81-9ad2-1adb867f4b33/026ba16c-1fee-30b7-af95-3de89cc94143.roa
Signing time:             Sun 30 Mar 2025 13:01:02 +0000
ROA not before:           Sun 30 Mar 2025 13:01:02 +0000
ROA not after:            Sat 28 Jun 2025 13:01:02 +0000
asID:                     54053
IP address blocks:        167.182.6.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/63dc8163-abd2-4d81-9ad2-1adb867f4b33/63dc8163-abd2-4d81-9ad2-1adb867f4b33.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/63dc8163-abd2-4d81-9ad2-1adb867f4b33/63dc8163-abd2-4d81-9ad2-1adb867f4b33.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/63dc8163-abd2-4d81-9ad2-1adb867f4b33.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5c:24:3b:2e:27:61:f9:6f:41:55:ce:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63dc8163-abd2-4d81-9ad2-1adb867f4b33
        Validity
            Not Before: Mar 30 13:01:02 2025 GMT
            Not After : Jun 28 13:01:02 2025 GMT
        Subject: CN=65f923a7-95cf-4a34-b90b-d0c1a5161c76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:82:bc:d6:4d:6b:04:da:24:e0:f7:9e:48:5a:
                    a3:a2:e9:93:2a:9b:8c:f0:2c:8f:52:b3:c7:05:44:
                    bc:36:ff:c5:29:77:01:c6:61:e3:e3:eb:5c:da:50:
                    cc:47:31:09:c7:04:e1:27:23:bf:a5:bb:e5:b4:38:
                    00:7a:28:58:d8:27:05:63:1f:96:55:69:10:2f:12:
                    0a:ab:c5:96:0b:b0:19:d9:88:aa:b5:21:35:66:82:
                    6a:13:b4:ae:51:04:9f:6e:33:75:a1:2a:af:00:f9:
                    fc:64:70:37:b7:8b:a0:a2:59:0c:f3:30:87:a6:63:
                    48:19:f3:37:ba:83:67:9e:00:77:2d:9f:ec:e8:e1:
                    8c:57:a3:44:ec:63:b0:38:ba:43:e7:8c:65:c2:f6:
                    a6:33:c3:be:93:1d:3a:39:a5:eb:3e:a1:45:1c:f3:
                    5b:4f:b7:e7:d5:d3:87:bd:01:65:de:c8:12:95:a2:
                    39:5d:f1:c2:86:aa:e6:a8:ae:9b:da:3f:8f:e6:47:
                    4c:ae:a2:be:4e:ff:a7:36:5d:8d:d7:5c:9f:33:f0:
                    75:b4:8a:1f:66:4d:fe:d5:d4:99:a7:ce:fd:29:f0:
                    df:d3:ca:21:0e:d5:6c:d1:0e:ca:7e:1c:05:b3:24:
                    22:d7:b3:8d:f1:8d:d5:ca:25:a9:0d:cb:1f:a8:37:
                    38:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:B2:F3:28:53:C8:E6:C9:B6:58:33:8D:38:61:D3:C7:3C:24:78:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/63dc8163-abd2-4d81-9ad2-1adb867f4b33/026ba16c-1fee-30b7-af95-3de89cc94143.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/63dc8163-abd2-4d81-9ad2-1adb867f4b33/63dc8163-abd2-4d81-9ad2-1adb867f4b33.crl

            X509v3 Authority Key Identifier:
                keyid:C5:CC:7F:57:B0:B1:95:65:22:A9:18:2A:E1:F2:67:7C:11:24:41:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/63dc8163-abd2-4d81-9ad2-1adb867f4b33.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.182.6.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:fe:ab:8f:90:e2:a1:14:42:7b:b7:18:67:4f:b1:43:84:6a:
         b3:3b:00:7e:f6:14:a3:b8:98:e2:de:c8:5b:fe:df:44:70:31:
         38:87:42:dd:4c:37:91:ef:df:2f:15:a2:5d:ef:71:c2:37:81:
         78:db:09:80:a7:b6:c0:d7:2d:45:67:89:dc:71:cc:e8:e4:7e:
         58:08:11:fd:3e:e6:61:a2:e3:00:6b:6a:58:b5:3e:fd:db:04:
         12:2c:db:7f:89:24:95:89:23:f3:82:37:4c:37:13:b3:e9:5f:
         a8:fb:fe:8a:77:59:1b:e6:0d:11:ca:a5:cd:47:bf:92:a0:84:
         3b:46:44:a2:3b:47:cc:fb:9f:be:c6:6d:73:71:c6:f3:a4:15:
         d5:f4:6a:78:52:b4:36:af:1b:d2:3b:59:b7:70:92:80:8f:7d:
         61:c5:1a:da:9e:db:db:c7:88:e0:b7:4e:af:bb:3c:58:24:63:
         48:c4:a8:f1:83:ab:76:85:90:bc:68:88:ae:af:e2:43:c8:1f:
         ad:df:30:04:de:41:d8:ec:59:39:11:38:b1:40:b2:c6:c1:f4:
         d0:c5:e5:c3:16:4d:5f:6f:79:3e:77:f9:3a:53:15:ef:46:2b:
         c9:7a:c1:68:5c:38:bb:6a:41:89:39:84:f2:bf:d0:f4:61:bb:
         a3:8a:e0:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:50:21 2025 by rpki-client