Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/63dc8163-abd2-4d81-9ad2-1adb867f4b33/df33292e-38d4-39f7-8cf9-a68b7a8fb74f.roa
File:                     df33292e-38d4-39f7-8cf9-a68b7a8fb74f.roa (raw, json)
Hash identifier:          89GHaOIHbBfpBFyL49bjMHzS6wZCuK5jLrJEFvQ8LmI=
Subject key identifier:   4F:8C:77:A0:E6:02:CB:4C:6E:D7:91:B5:59:18:43:D8:07:CF:36:B6
Certificate issuer:       /CN=63dc8163-abd2-4d81-9ad2-1adb867f4b33
Certificate serial:       010D0C9F432858495C243BFDBF8BA19F65B965A0
Authority key identifier: C5:CC:7F:57:B0:B1:95:65:22:A9:18:2A:E1:F2:67:7C:11:24:41:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/63dc8163-abd2-4d81-9ad2-1adb867f4b33.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/63dc8163-abd2-4d81-9ad2-1adb867f4b33/df33292e-38d4-39f7-8cf9-a68b7a8fb74f.roa
Signing time:             Sun 30 Mar 2025 13:01:02 +0000
ROA not before:           Sun 30 Mar 2025 13:01:02 +0000
ROA not after:            Sat 28 Jun 2025 13:01:02 +0000
asID:                     22012
IP address blocks:        167.182.126.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/63dc8163-abd2-4d81-9ad2-1adb867f4b33/63dc8163-abd2-4d81-9ad2-1adb867f4b33.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/63dc8163-abd2-4d81-9ad2-1adb867f4b33/63dc8163-abd2-4d81-9ad2-1adb867f4b33.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/63dc8163-abd2-4d81-9ad2-1adb867f4b33.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5c:24:3b:fd:bf:8b:a1:9f:65:b9:65:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63dc8163-abd2-4d81-9ad2-1adb867f4b33
        Validity
            Not Before: Mar 30 13:01:02 2025 GMT
            Not After : Jun 28 13:01:02 2025 GMT
        Subject: CN=65a07732-a88c-4f15-a263-1aa5dde3943a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:d2:a4:0c:16:1b:b9:d2:98:5f:28:1d:b5:58:
                    5a:a6:cf:c3:56:be:b0:1e:1b:b6:5a:dc:41:02:b5:
                    d2:8c:e1:cd:fb:24:bd:77:80:1f:27:75:8f:ae:cc:
                    bf:30:50:54:7d:e5:85:d8:2a:b5:eb:3e:c4:9a:1b:
                    32:77:62:64:52:8d:bf:14:67:22:eb:8d:2a:5d:98:
                    40:58:64:9b:5a:c2:30:33:52:02:78:d9:c4:ef:09:
                    83:7e:17:f2:fe:d4:0f:a0:53:61:c2:98:f4:75:4c:
                    67:25:ae:80:e8:2b:f4:02:c3:07:0a:17:e4:17:4a:
                    7d:63:cc:89:a3:86:3d:c7:d4:44:44:cb:5e:b0:67:
                    95:1a:f5:9c:f0:b4:a0:88:af:4d:5a:d0:86:96:e3:
                    07:8b:a1:b9:26:f1:a7:9c:00:70:aa:5e:1f:43:02:
                    96:37:67:42:d0:37:6a:0e:f2:5d:df:5e:5b:03:60:
                    f7:36:0e:07:9c:29:e4:7d:bb:c1:7f:eb:d7:19:d5:
                    b5:66:da:89:43:56:40:27:05:e6:4b:ba:90:00:06:
                    10:a7:ba:7c:08:fe:94:b3:0d:bd:25:ef:2f:61:5b:
                    a7:0a:0b:92:4d:91:4b:a2:78:96:0e:d4:d8:67:f0:
                    4a:85:39:88:73:87:e1:45:e2:34:69:23:57:16:d3:
                    ef:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:8C:77:A0:E6:02:CB:4C:6E:D7:91:B5:59:18:43:D8:07:CF:36:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/63dc8163-abd2-4d81-9ad2-1adb867f4b33/df33292e-38d4-39f7-8cf9-a68b7a8fb74f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/63dc8163-abd2-4d81-9ad2-1adb867f4b33/63dc8163-abd2-4d81-9ad2-1adb867f4b33.crl

            X509v3 Authority Key Identifier:
                keyid:C5:CC:7F:57:B0:B1:95:65:22:A9:18:2A:E1:F2:67:7C:11:24:41:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/63dc8163-abd2-4d81-9ad2-1adb867f4b33.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.182.126.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:d4:b3:f6:4d:bc:3b:4f:73:db:24:f0:1f:b4:64:78:c4:f1:
         1b:15:96:9d:47:9d:af:6c:1e:84:fb:82:a0:aa:5d:63:e0:9f:
         11:75:57:e4:f9:18:d3:fe:90:8f:8b:99:1b:eb:e4:7b:94:8f:
         3d:4c:ef:48:9e:7a:97:a5:e1:01:bc:3a:2b:ff:e3:be:47:c8:
         e2:6c:04:10:b7:00:a5:87:f1:e2:b8:03:f1:60:58:c9:b3:a8:
         a3:06:ef:72:ba:fe:f4:77:b3:19:3a:57:87:8d:87:d7:1c:b5:
         ab:75:cc:86:1a:6a:26:90:c2:7d:07:c9:f2:fc:c1:6f:b0:83:
         b4:e5:c0:ba:ad:5b:1f:2c:1a:bd:67:fa:e7:f6:d2:37:9a:88:
         a9:23:eb:11:8b:6e:b8:14:10:6b:a2:13:66:ec:34:52:40:2c:
         65:26:c8:df:c6:fc:f8:a9:a1:73:5e:c6:37:85:5f:75:3e:6d:
         8e:d1:67:46:3e:ec:0f:35:28:88:78:02:c5:8c:c6:58:57:4a:
         d4:ad:7b:cb:96:37:48:36:a1:f9:71:91:12:04:9b:34:9d:e9:
         fa:7f:d0:55:9b:4a:de:81:77:cc:9e:36:bf:f6:31:5f:4a:2b:
         57:fc:18:68:1c:49:20:2a:03:a4:2f:77:9d:3b:f8:d2:47:61:
         14:c2:ee:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 00:58:07 2025 by rpki-client