Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/63dc8163-abd2-4d81-9ad2-1adb867f4b33/73ffecf5-07d7-3abe-9e6d-37330da419f4.roa
File:                     73ffecf5-07d7-3abe-9e6d-37330da419f4.roa (raw, json)
Hash identifier:          B2f0gjMTfRAOZbvlpLW+9t95iQLnbpsWcLllEbjUETU=
Subject key identifier:   40:1F:0A:E8:8C:2F:4D:86:9F:0D:B3:9A:AE:54:93:25:5F:10:14:BD
Certificate issuer:       /CN=63dc8163-abd2-4d81-9ad2-1adb867f4b33
Certificate serial:       010D0C9F4328584A3B7AF0E09179424D1B89AB00
Authority key identifier: C5:CC:7F:57:B0:B1:95:65:22:A9:18:2A:E1:F2:67:7C:11:24:41:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/63dc8163-abd2-4d81-9ad2-1adb867f4b33.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/63dc8163-abd2-4d81-9ad2-1adb867f4b33/73ffecf5-07d7-3abe-9e6d-37330da419f4.roa
Signing time:             Wed 18 Jun 2025 13:01:06 +0000
ROA not before:           Wed 18 Jun 2025 13:01:06 +0000
ROA not after:            Tue 16 Sep 2025 13:01:06 +0000
asID:                     54053
IP address blocks:        167.182.71.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/63dc8163-abd2-4d81-9ad2-1adb867f4b33/63dc8163-abd2-4d81-9ad2-1adb867f4b33.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/63dc8163-abd2-4d81-9ad2-1adb867f4b33/63dc8163-abd2-4d81-9ad2-1adb867f4b33.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/63dc8163-abd2-4d81-9ad2-1adb867f4b33.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 09 Jul 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3b:7a:f0:e0:91:79:42:4d:1b:89:ab:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63dc8163-abd2-4d81-9ad2-1adb867f4b33
        Validity
            Not Before: Jun 18 13:01:06 2025 GMT
            Not After : Sep 16 13:01:06 2025 GMT
        Subject: CN=48a2b214-9a65-40bd-9cda-f5f898e17b23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:58:53:a0:fb:1c:ea:a3:d2:19:4a:d1:86:c5:
                    24:d9:ad:18:fe:fc:59:8b:b6:82:30:3a:1c:c2:b5:
                    19:ab:46:ac:f6:98:2a:d0:cc:c8:2d:80:e5:2f:bd:
                    c0:4d:05:60:49:bb:42:43:be:0a:28:ca:53:2f:e3:
                    07:a0:f9:91:fc:fd:78:ce:a3:41:97:41:23:24:c2:
                    5b:e4:cb:17:e6:c1:12:8a:24:78:8b:d6:6f:10:6c:
                    d7:b5:70:db:f2:a7:e3:54:f4:fe:9a:7a:b6:8b:9d:
                    81:5f:fc:53:71:64:92:f7:a1:8e:36:ef:3f:4d:94:
                    cd:43:21:68:48:6c:c3:49:85:eb:8a:01:ef:36:f4:
                    ae:49:3c:7a:85:e7:d0:e4:f3:7d:b7:45:7e:33:20:
                    f8:0a:6a:03:a4:8f:e5:16:9a:0b:e9:ce:fa:ce:99:
                    ab:78:41:b1:61:32:9c:d8:74:d9:ce:95:60:53:73:
                    72:2a:b7:d3:ff:5f:b8:03:85:f8:f4:b3:d9:7a:eb:
                    07:8b:d9:90:5c:d3:1e:e1:b6:8e:d5:9d:7b:73:2f:
                    94:a6:3f:3c:f3:e2:7b:47:e2:0b:d3:8c:42:cb:3b:
                    c8:0d:35:a0:c3:f0:b0:3d:06:e0:18:a8:c8:db:4a:
                    9f:0f:19:30:8e:49:95:fd:c6:f6:52:5e:27:db:01:
                    8c:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:1F:0A:E8:8C:2F:4D:86:9F:0D:B3:9A:AE:54:93:25:5F:10:14:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/63dc8163-abd2-4d81-9ad2-1adb867f4b33/73ffecf5-07d7-3abe-9e6d-37330da419f4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/63dc8163-abd2-4d81-9ad2-1adb867f4b33/63dc8163-abd2-4d81-9ad2-1adb867f4b33.crl

            X509v3 Authority Key Identifier:
                keyid:C5:CC:7F:57:B0:B1:95:65:22:A9:18:2A:E1:F2:67:7C:11:24:41:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/63dc8163-abd2-4d81-9ad2-1adb867f4b33.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.182.71.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:97:0e:1f:4d:78:05:71:3d:78:73:ec:91:9b:2b:25:94:16:
         55:86:62:63:24:ee:c1:b5:5b:b3:8c:09:bf:aa:fe:1f:d9:d3:
         6e:cb:42:af:a1:fa:17:71:91:4c:9d:a3:48:23:29:9a:2d:5e:
         97:15:51:3c:f2:0d:36:fd:11:d8:b2:8e:28:ab:23:54:ab:bd:
         b4:99:16:07:ae:14:d8:10:58:e6:00:6e:68:5d:9b:50:e7:ca:
         5e:40:d7:f8:25:dd:30:89:9b:d7:46:61:b9:0e:7f:43:60:f2:
         05:5f:d0:50:1c:9f:47:06:38:8b:47:ce:4e:13:fd:6f:ba:83:
         bc:95:e0:d6:e5:70:ca:7e:82:61:9f:b6:4a:75:48:95:4b:5c:
         13:59:51:6d:a8:97:f5:24:ef:5e:d8:05:0c:f6:71:9a:62:6f:
         95:de:3e:60:92:7d:08:e3:6b:67:77:f7:f1:ef:78:ba:f0:94:
         91:3a:41:25:58:cd:7f:59:dc:c0:20:f3:8c:e4:89:8a:b2:20:
         8b:39:7b:6f:43:25:98:ca:45:81:58:13:77:66:a8:62:55:31:
         e5:d4:4d:0a:45:d0:fc:53:98:34:08:01:d7:32:fe:93:b1:2a:
         f5:54:42:b5:ac:e3:a3:fe:7f:54:7f:05:99:48:da:93:43:64:
         bb:5d:87:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 6 15:24:18 2025 by rpki-client