Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/63dc8163-abd2-4d81-9ad2-1adb867f4b33/dc12d94c-969e-3d51-8eac-a3307c335db8.roa
File:                     dc12d94c-969e-3d51-8eac-a3307c335db8.roa (raw, json)
Hash identifier:          TZnaSZe0jK7NcY/JkJKcMs90hffq2Hrrpyj3LiJopUo=
Subject key identifier:   99:3F:24:D4:81:C4:D5:2E:1C:F9:93:DA:2C:0C:D9:92:5C:78:D5:32
Certificate issuer:       /CN=63dc8163-abd2-4d81-9ad2-1adb867f4b33
Certificate serial:       010D0C9F4328584B1C36BBDBBDFFDAA470192940
Authority key identifier: C5:CC:7F:57:B0:B1:95:65:22:A9:18:2A:E1:F2:67:7C:11:24:41:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/63dc8163-abd2-4d81-9ad2-1adb867f4b33.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/63dc8163-abd2-4d81-9ad2-1adb867f4b33/dc12d94c-969e-3d51-8eac-a3307c335db8.roa
Signing time:             Sun 07 Sep 2025 01:00:33 +0000
ROA not before:           Sun 07 Sep 2025 01:00:33 +0000
ROA not after:            Sat 06 Dec 2025 02:00:33 +0000
asID:                     22012
IP address blocks:        167.182.125.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/63dc8163-abd2-4d81-9ad2-1adb867f4b33/63dc8163-abd2-4d81-9ad2-1adb867f4b33.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/63dc8163-abd2-4d81-9ad2-1adb867f4b33/63dc8163-abd2-4d81-9ad2-1adb867f4b33.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/63dc8163-abd2-4d81-9ad2-1adb867f4b33.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1c:36:bb:db:bd:ff:da:a4:70:19:29:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63dc8163-abd2-4d81-9ad2-1adb867f4b33
        Validity
            Not Before: Sep  7 01:00:33 2025 GMT
            Not After : Dec  6 02:00:33 2025 GMT
        Subject: CN=7fe6c34b-b37e-464c-aea2-5d56349909f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:d7:ce:6f:15:5f:88:c5:48:bb:32:10:60:9d:
                    30:6a:51:02:b0:c4:49:95:bb:da:25:02:72:4c:df:
                    73:fc:67:41:a9:d0:83:b5:6c:1d:ba:c9:7b:5a:a4:
                    5f:3d:16:9b:f4:a0:bb:75:c0:b2:f0:bb:10:b7:aa:
                    56:08:76:ca:23:6e:0d:b1:2d:4c:95:fa:bb:1c:8b:
                    c6:eb:1f:2a:fe:f6:d2:f0:8d:cb:c8:6d:90:7c:46:
                    10:aa:e3:8a:76:04:7d:39:e4:41:13:b0:05:b7:72:
                    cb:0b:a5:92:4f:92:3c:c2:c5:1b:df:d8:5f:d2:ed:
                    ad:d3:d5:8e:61:c4:e0:28:bc:89:07:d7:09:e3:a3:
                    e4:d4:b2:81:c1:15:dc:33:7f:d4:b6:73:9c:00:8a:
                    08:20:ff:30:92:22:a1:a7:01:eb:d6:b4:3a:b1:2a:
                    cc:77:0d:10:2e:e0:d5:93:27:dc:63:f5:a2:65:d2:
                    88:d1:12:ff:1a:f6:d0:ff:3c:0a:51:ff:eb:3b:8d:
                    7c:67:66:bd:7b:8d:35:0e:39:ab:13:e4:f1:66:e2:
                    a9:92:2c:85:ea:d5:6b:f1:2e:51:c3:29:4c:fd:17:
                    56:01:59:7d:50:25:65:7b:33:75:90:ae:a4:22:3c:
                    ce:72:fc:6f:e2:d2:46:2b:6e:ab:6f:74:fa:eb:36:
                    d8:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:3F:24:D4:81:C4:D5:2E:1C:F9:93:DA:2C:0C:D9:92:5C:78:D5:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/63dc8163-abd2-4d81-9ad2-1adb867f4b33/dc12d94c-969e-3d51-8eac-a3307c335db8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/63dc8163-abd2-4d81-9ad2-1adb867f4b33/63dc8163-abd2-4d81-9ad2-1adb867f4b33.crl

            X509v3 Authority Key Identifier:
                keyid:C5:CC:7F:57:B0:B1:95:65:22:A9:18:2A:E1:F2:67:7C:11:24:41:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/63dc8163-abd2-4d81-9ad2-1adb867f4b33.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.182.125.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:51:e9:41:a0:70:dd:ae:a1:db:d9:0a:5a:29:bc:0b:41:7d:
         6e:b7:b8:ce:3f:25:bd:db:e8:67:e6:b4:16:bb:e5:b3:7c:4a:
         fd:12:4e:ed:d5:59:d1:28:76:f5:23:48:ac:1b:73:5d:52:29:
         e5:1f:4b:17:b6:ea:c7:e3:89:9c:79:dd:ed:e3:3d:73:d8:4c:
         53:e5:4d:98:0e:4e:47:ed:68:54:e2:10:26:d8:18:44:17:c6:
         4b:a8:29:18:7f:6f:bb:33:09:eb:46:da:0a:4a:59:37:c2:74:
         2a:a2:69:f7:6c:c0:31:e2:62:61:63:96:0a:7f:df:cc:14:de:
         dc:56:5e:cb:de:c8:c6:96:d1:b4:0a:48:31:7e:fc:0f:c3:e6:
         3d:d5:25:be:f8:e8:aa:f5:a4:f9:44:94:23:88:36:1c:12:74:
         98:3a:41:73:1d:73:73:ca:3a:b7:1b:31:53:a5:95:95:d3:de:
         9c:9c:f8:83:80:5e:5f:2f:8d:d5:3e:d0:d0:5b:61:f5:6d:44:
         b4:5e:58:8f:28:a7:25:0b:cf:24:a2:16:04:76:e0:ea:c7:ef:
         9d:a2:8d:8c:9c:62:05:20:5c:59:4c:ea:d8:5f:d5:ff:78:5a:
         64:ef:03:13:41:14:fe:3b:26:08:45:1c:da:92:2a:a5:f7:f2:
         f7:0f:cb:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 17 13:52:58 2025 by rpki-client