Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/63dc8163-abd2-4d81-9ad2-1adb867f4b33/0fbbe7fd-88d3-3646-8bda-bf505ddffe7f.roa
File:                     0fbbe7fd-88d3-3646-8bda-bf505ddffe7f.roa (raw, json)
Hash identifier:          VltK96F9Vg3sgOkW9n6Y5d4fGZwmVJ0Sv+J0mcTfmZU=
Subject key identifier:   2A:C1:99:B0:A3:5A:A1:21:CB:C5:46:EE:48:BF:3C:1E:B5:CF:02:8C
Certificate issuer:       /CN=63dc8163-abd2-4d81-9ad2-1adb867f4b33
Certificate serial:       010D0C9F4328584A3B7AF1548BB748F963FA2440
Authority key identifier: C5:CC:7F:57:B0:B1:95:65:22:A9:18:2A:E1:F2:67:7C:11:24:41:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/63dc8163-abd2-4d81-9ad2-1adb867f4b33.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/63dc8163-abd2-4d81-9ad2-1adb867f4b33/0fbbe7fd-88d3-3646-8bda-bf505ddffe7f.roa
Signing time:             Wed 18 Jun 2025 13:01:06 +0000
ROA not before:           Wed 18 Jun 2025 13:01:06 +0000
ROA not after:            Tue 16 Sep 2025 13:01:06 +0000
asID:                     22012
IP address blocks:        167.182.123.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/63dc8163-abd2-4d81-9ad2-1adb867f4b33/63dc8163-abd2-4d81-9ad2-1adb867f4b33.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/63dc8163-abd2-4d81-9ad2-1adb867f4b33/63dc8163-abd2-4d81-9ad2-1adb867f4b33.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/63dc8163-abd2-4d81-9ad2-1adb867f4b33.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 09 Jul 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3b:7a:f1:54:8b:b7:48:f9:63:fa:24:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63dc8163-abd2-4d81-9ad2-1adb867f4b33
        Validity
            Not Before: Jun 18 13:01:06 2025 GMT
            Not After : Sep 16 13:01:06 2025 GMT
        Subject: CN=47bdb10a-e418-4ebf-a90b-ca676e64d7d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:55:c3:65:62:eb:0c:75:04:0a:9d:4d:11:f9:
                    6a:03:cd:47:65:2b:bb:51:d8:21:8b:cf:a1:f1:7a:
                    9b:58:ec:f5:39:ce:ba:16:71:4e:5a:fb:7a:a6:cc:
                    41:13:82:f8:bf:ac:43:d4:04:1b:d9:ed:df:26:2f:
                    ab:a1:2f:f8:8b:f5:93:a2:45:81:d0:cc:4c:28:b0:
                    dd:2c:e3:5f:fb:b3:79:6a:eb:0d:7f:1d:97:81:1d:
                    b4:12:9c:a4:49:c6:b5:10:8e:c6:e4:0d:89:41:51:
                    fa:47:2a:c7:cb:62:97:1f:5f:5a:16:a2:a2:82:ea:
                    39:2c:62:50:d8:fc:06:40:07:34:96:48:d5:26:1d:
                    49:99:34:3d:f9:ce:9c:d2:00:60:a1:6e:e2:0b:90:
                    5a:ae:01:4f:3e:ca:18:e3:4f:32:5a:9c:1a:c5:0f:
                    87:dc:68:02:d4:ed:ce:d2:41:de:ca:0d:bc:4e:92:
                    a2:43:58:b5:aa:cc:d4:ed:1e:5c:99:0b:d1:0c:bf:
                    15:80:16:8f:08:e0:78:09:6d:27:de:50:23:e3:31:
                    c1:30:78:80:ff:83:9c:97:95:97:68:e7:d4:ff:71:
                    e0:c1:97:65:45:30:6d:9e:b6:24:d2:cb:43:19:e7:
                    a6:ef:6a:42:b9:e4:80:5e:80:e5:f0:2b:d9:64:40:
                    a6:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:C1:99:B0:A3:5A:A1:21:CB:C5:46:EE:48:BF:3C:1E:B5:CF:02:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/63dc8163-abd2-4d81-9ad2-1adb867f4b33/0fbbe7fd-88d3-3646-8bda-bf505ddffe7f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/63dc8163-abd2-4d81-9ad2-1adb867f4b33/63dc8163-abd2-4d81-9ad2-1adb867f4b33.crl

            X509v3 Authority Key Identifier:
                keyid:C5:CC:7F:57:B0:B1:95:65:22:A9:18:2A:E1:F2:67:7C:11:24:41:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/63dc8163-abd2-4d81-9ad2-1adb867f4b33.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.182.123.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:27:18:4c:ef:37:79:d2:08:0f:76:f4:fb:be:24:69:49:c2:
         24:1b:ab:8d:dd:21:83:78:8b:b6:0d:b8:31:87:ed:b3:da:f1:
         fd:65:0b:69:b8:1f:8e:35:29:75:cc:a1:e9:9b:e1:b2:2e:49:
         41:cd:47:4d:d1:32:9b:c1:53:20:ba:c8:03:5d:d9:d4:c0:ce:
         8c:bf:13:5d:27:b7:65:c0:eb:78:1b:c2:9d:60:29:69:24:be:
         26:75:db:a2:b7:9d:3e:d4:d6:ee:41:46:d0:29:16:cf:9e:8f:
         af:c6:5f:75:02:e1:a7:b7:e6:fc:42:59:ad:2c:42:ba:f3:00:
         71:d5:1f:11:97:2c:bc:72:d5:18:23:56:66:78:12:3e:9c:b3:
         49:9a:88:75:4f:6b:c1:b7:fd:cf:1a:41:23:12:22:15:85:f7:
         8c:8f:c7:9e:2f:4d:af:11:e1:06:c9:38:31:74:58:82:8b:d0:
         2f:e0:8c:d4:4f:92:95:c0:8a:85:b8:a9:18:d2:ef:64:5d:a9:
         8c:84:b8:5e:b9:98:f3:45:a7:36:28:24:67:01:81:a3:6b:a4:
         b6:cc:3b:92:fe:09:c3:6e:a3:5a:0b:58:e1:36:68:c2:1e:35:
         98:4f:be:ac:25:6f:8c:29:de:52:4e:a7:56:e4:29:9c:cc:5e:
         e9:c7:a7:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 6 15:49:49 2025 by rpki-client