Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/63dc8163-abd2-4d81-9ad2-1adb867f4b33/157e357e-2ce0-3590-ac38-7d37552300c5.roa
File:                     157e357e-2ce0-3590-ac38-7d37552300c5.roa (raw, json)
Hash identifier:          2ErVN9Sex1fBA6nf2FE/TdTCZHdv2MMTCHn+73d2dlo=
Subject key identifier:   24:0A:24:0E:90:C3:1C:54:BD:99:2E:C2:8B:13:5F:95:A2:8D:8E:60
Certificate issuer:       /CN=63dc8163-abd2-4d81-9ad2-1adb867f4b33
Certificate serial:       010D0C9F4328584B1C36BAC8DF1C827BE98246A8
Authority key identifier: C5:CC:7F:57:B0:B1:95:65:22:A9:18:2A:E1:F2:67:7C:11:24:41:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/63dc8163-abd2-4d81-9ad2-1adb867f4b33.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/63dc8163-abd2-4d81-9ad2-1adb867f4b33/157e357e-2ce0-3590-ac38-7d37552300c5.roa
Signing time:             Sun 07 Sep 2025 01:00:33 +0000
ROA not before:           Sun 07 Sep 2025 01:00:33 +0000
ROA not after:            Sat 06 Dec 2025 02:00:33 +0000
asID:                     46973
IP address blocks:        167.182.60.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/63dc8163-abd2-4d81-9ad2-1adb867f4b33/63dc8163-abd2-4d81-9ad2-1adb867f4b33.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/63dc8163-abd2-4d81-9ad2-1adb867f4b33/63dc8163-abd2-4d81-9ad2-1adb867f4b33.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/63dc8163-abd2-4d81-9ad2-1adb867f4b33.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1c:36:ba:c8:df:1c:82:7b:e9:82:46:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63dc8163-abd2-4d81-9ad2-1adb867f4b33
        Validity
            Not Before: Sep  7 01:00:33 2025 GMT
            Not After : Dec  6 02:00:33 2025 GMT
        Subject: CN=8522678f-475b-402d-8f49-a462f22fa2a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:66:30:0e:da:ec:10:ea:8b:6c:f5:98:50:c2:
                    fe:a3:05:a8:d5:31:6e:5f:b5:46:6b:8e:7c:0f:30:
                    2a:4e:38:6f:ce:0b:98:3a:47:28:a0:8c:4d:57:ba:
                    35:ac:72:8f:d6:ee:09:09:af:c9:7b:af:a5:03:a5:
                    b1:f0:a7:9d:ba:1e:15:42:05:eb:92:44:e0:44:e4:
                    0c:e3:0a:ed:ba:8e:bd:96:f6:55:61:82:53:a9:71:
                    1e:d5:0a:60:4b:02:83:c3:e2:01:82:5f:b4:42:20:
                    5f:99:8b:83:d6:0a:af:c9:ac:02:36:10:92:0c:7d:
                    e2:2f:f8:ef:48:76:e4:27:83:f2:59:ad:bd:bb:29:
                    7e:ea:1e:4e:f1:d5:fc:1d:bf:bd:bb:3d:cd:cc:0f:
                    62:39:63:ef:23:6a:ce:d1:e1:26:67:85:7e:6d:dc:
                    2e:47:c6:35:57:99:3b:ec:73:f4:aa:99:aa:44:48:
                    08:a6:a1:b3:66:5d:d5:a0:de:19:61:18:ec:d0:a2:
                    4b:ab:c4:8b:b3:48:65:97:96:f0:6d:d9:41:3b:d1:
                    4b:33:c4:61:c9:d2:55:4f:d5:02:a0:b1:da:68:9a:
                    c6:d5:24:37:bb:da:4c:98:72:cb:f3:ae:72:57:7d:
                    21:9a:80:38:2a:e7:26:2c:48:c9:3f:4c:99:d8:80:
                    d5:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:0A:24:0E:90:C3:1C:54:BD:99:2E:C2:8B:13:5F:95:A2:8D:8E:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/63dc8163-abd2-4d81-9ad2-1adb867f4b33/157e357e-2ce0-3590-ac38-7d37552300c5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/63dc8163-abd2-4d81-9ad2-1adb867f4b33/63dc8163-abd2-4d81-9ad2-1adb867f4b33.crl

            X509v3 Authority Key Identifier:
                keyid:C5:CC:7F:57:B0:B1:95:65:22:A9:18:2A:E1:F2:67:7C:11:24:41:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/63dc8163-abd2-4d81-9ad2-1adb867f4b33.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.182.60.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:e6:64:df:f5:cc:66:0a:fc:c8:c1:ba:83:e0:3e:a9:0d:82:
         61:6a:79:bc:fb:27:80:00:e1:37:9f:74:74:91:23:f0:9f:fa:
         fe:ba:62:b7:e3:c8:06:63:64:73:3e:a9:ef:59:94:81:d2:e4:
         b8:58:36:c1:a3:10:62:14:32:5c:ee:fc:13:57:b6:10:ca:47:
         62:fc:ee:7f:2f:e6:29:ea:5c:28:45:36:c0:d3:65:66:ec:36:
         00:83:2d:ea:6f:4d:16:89:a9:c5:f5:e2:3a:b9:84:c4:8e:38:
         d9:19:73:1c:53:c5:7a:07:fb:92:e7:f2:1a:58:ac:7f:4a:ab:
         fc:05:b4:14:bd:48:60:3f:79:5d:4c:4c:2a:e5:39:92:8a:25:
         b6:8a:66:10:b6:e2:42:8c:ef:7d:c6:d3:8a:6c:18:86:47:76:
         48:e5:68:6b:66:7c:e4:52:95:c1:f0:be:c5:a5:b0:c9:65:8f:
         25:0a:4d:48:c8:84:37:8e:fc:3c:21:a8:6d:45:67:77:5f:09:
         bb:8e:79:70:9e:6a:12:80:8a:b1:61:37:aa:a1:74:ec:14:ac:
         bd:fc:71:54:20:80:1a:4b:c8:e1:de:2b:e8:2c:3a:40:03:39:
         e7:52:c9:09:53:a3:55:6b:b6:df:65:a2:b3:ff:ad:b6:6a:0d:
         09:df:b2:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 17 13:55:33 2025 by rpki-client