Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/63dc8163-abd2-4d81-9ad2-1adb867f4b33/d6a38b80-bfda-3c1e-acfb-247753a58a5a.roa
File:                     d6a38b80-bfda-3c1e-acfb-247753a58a5a.roa (raw, json)
Hash identifier:          idjyO+JxM1VE73xeggB0VCF8SYgP2PsHyKw5O0SBpwg=
Subject key identifier:   6B:64:B1:8F:92:BA:52:26:3A:C2:5D:BC:E2:05:97:0C:33:FE:5B:18
Certificate issuer:       /CN=63dc8163-abd2-4d81-9ad2-1adb867f4b33
Certificate serial:       010D0C9F432858495C24356A90802ADF8A925F80
Authority key identifier: C5:CC:7F:57:B0:B1:95:65:22:A9:18:2A:E1:F2:67:7C:11:24:41:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/63dc8163-abd2-4d81-9ad2-1adb867f4b33.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/63dc8163-abd2-4d81-9ad2-1adb867f4b33/d6a38b80-bfda-3c1e-acfb-247753a58a5a.roa
Signing time:             Sun 30 Mar 2025 13:01:02 +0000
ROA not before:           Sun 30 Mar 2025 13:01:02 +0000
ROA not after:            Sat 28 Jun 2025 13:01:02 +0000
asID:                     22012
IP address blocks:        167.182.120.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/63dc8163-abd2-4d81-9ad2-1adb867f4b33/63dc8163-abd2-4d81-9ad2-1adb867f4b33.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/63dc8163-abd2-4d81-9ad2-1adb867f4b33/63dc8163-abd2-4d81-9ad2-1adb867f4b33.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/63dc8163-abd2-4d81-9ad2-1adb867f4b33.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5c:24:35:6a:90:80:2a:df:8a:92:5f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63dc8163-abd2-4d81-9ad2-1adb867f4b33
        Validity
            Not Before: Mar 30 13:01:02 2025 GMT
            Not After : Jun 28 13:01:02 2025 GMT
        Subject: CN=94c1872a-f7e6-4d74-bb99-ca897e607b21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:e0:60:e1:3d:bb:98:1f:1e:fa:2b:bc:8f:d1:
                    e1:31:0c:79:e5:46:d2:b1:ef:b7:7a:95:25:d9:e7:
                    88:7d:b1:52:79:46:85:75:62:01:9d:85:9d:65:cc:
                    a3:79:b4:b9:f7:2b:2a:75:9b:a1:3b:a6:2e:1a:32:
                    09:23:89:2e:07:8c:ae:81:8b:95:03:6c:be:33:29:
                    1a:7a:9c:2d:a0:d0:6d:53:0b:96:f7:51:f4:80:ed:
                    ac:ef:9c:1a:ee:61:88:6a:eb:5a:02:fa:0b:61:11:
                    f9:a3:33:3b:61:8c:8f:5d:bf:a7:1b:ea:bc:a7:80:
                    da:10:fc:43:9f:20:be:af:c0:d9:a4:81:74:05:ff:
                    6f:c5:ac:41:b6:0f:c8:84:3d:bc:fa:ed:0f:bc:ca:
                    7b:1d:52:1f:49:01:e7:42:07:c0:3e:21:88:93:69:
                    0c:f5:bd:29:c5:02:82:9f:49:8e:10:e8:b2:6a:f0:
                    0e:28:76:1b:8b:e7:7a:b3:0a:5e:4f:57:ab:b3:7b:
                    ba:35:4b:01:82:4e:60:83:29:fd:9d:84:c4:b2:6f:
                    15:ec:23:ff:34:00:4b:fb:9b:93:22:68:ef:b2:94:
                    5b:26:df:22:f6:0d:2e:22:01:28:b3:35:0d:a1:75:
                    a7:c2:b8:bd:47:7e:c2:9e:b1:67:b6:7e:fe:ad:b2:
                    ed:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:64:B1:8F:92:BA:52:26:3A:C2:5D:BC:E2:05:97:0C:33:FE:5B:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/63dc8163-abd2-4d81-9ad2-1adb867f4b33/d6a38b80-bfda-3c1e-acfb-247753a58a5a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/63dc8163-abd2-4d81-9ad2-1adb867f4b33/63dc8163-abd2-4d81-9ad2-1adb867f4b33.crl

            X509v3 Authority Key Identifier:
                keyid:C5:CC:7F:57:B0:B1:95:65:22:A9:18:2A:E1:F2:67:7C:11:24:41:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/63dc8163-abd2-4d81-9ad2-1adb867f4b33.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.182.120.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:f3:aa:1b:1c:dd:55:71:c6:37:f2:c7:71:f4:4f:2e:ba:5f:
         f9:aa:cb:bd:46:6c:7c:f7:54:45:31:58:05:63:af:53:4b:e9:
         86:c2:c9:c4:13:89:69:bf:5d:03:ff:28:46:58:d1:1f:ab:23:
         69:2b:1a:40:cc:bb:f0:35:34:ee:e3:92:65:a9:d7:f6:f6:34:
         60:4c:ae:5e:3a:b3:f7:7a:76:4a:2c:d4:3b:ec:02:ff:e8:13:
         85:7e:b3:64:f2:49:1a:e4:9d:a9:63:77:97:cd:d7:33:a7:45:
         c1:69:c2:c6:ff:b6:7c:24:1b:05:14:65:05:dc:76:5f:ce:b8:
         60:ba:a4:99:78:79:61:b6:24:ab:fa:0c:09:d1:b5:14:bd:29:
         e4:86:9f:8f:bf:80:67:b1:5d:2b:fb:ea:ec:37:10:83:06:ab:
         18:1a:8a:be:e5:5d:22:8e:1a:46:f7:a2:96:d1:cc:ac:31:f9:
         56:60:db:c4:ab:84:97:14:ee:38:1a:93:04:a5:35:9a:69:d4:
         51:a1:2a:75:13:a9:02:3d:86:e5:70:a9:c4:f0:91:27:ad:4b:
         3c:fd:7f:27:65:b5:f2:c2:84:72:ac:b8:cf:f9:25:13:dc:6d:
         9b:4f:41:51:f4:25:ac:86:d1:d5:55:80:b9:05:36:6b:9c:f1:
         45:4b:ab:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:36:40 2025 by rpki-client