Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/63dc8163-abd2-4d81-9ad2-1adb867f4b33/e8b49a47-420f-3ee2-b3b8-87d3d002901a.roa
File:                     e8b49a47-420f-3ee2-b3b8-87d3d002901a.roa (raw, json)
Hash identifier:          qPYR42L8b8icdnWcctL2GLvE0FlhqsGghLuD1P2b4xg=
Subject key identifier:   62:88:88:FE:5D:84:08:13:98:D0:99:44:DA:E3:10:86:97:46:29:53
Certificate issuer:       /CN=63dc8163-abd2-4d81-9ad2-1adb867f4b33
Certificate serial:       010D0C9F4328584B1C36C1EA23F89C9AD47E08C0
Authority key identifier: C5:CC:7F:57:B0:B1:95:65:22:A9:18:2A:E1:F2:67:7C:11:24:41:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/63dc8163-abd2-4d81-9ad2-1adb867f4b33.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/63dc8163-abd2-4d81-9ad2-1adb867f4b33/e8b49a47-420f-3ee2-b3b8-87d3d002901a.roa
Signing time:             Sun 07 Sep 2025 01:00:33 +0000
ROA not before:           Sun 07 Sep 2025 01:00:33 +0000
ROA not after:            Sat 06 Dec 2025 02:00:33 +0000
asID:                     54053
IP address blocks:        167.182.1.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/63dc8163-abd2-4d81-9ad2-1adb867f4b33/63dc8163-abd2-4d81-9ad2-1adb867f4b33.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/63dc8163-abd2-4d81-9ad2-1adb867f4b33/63dc8163-abd2-4d81-9ad2-1adb867f4b33.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/63dc8163-abd2-4d81-9ad2-1adb867f4b33.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1c:36:c1:ea:23:f8:9c:9a:d4:7e:08:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63dc8163-abd2-4d81-9ad2-1adb867f4b33
        Validity
            Not Before: Sep  7 01:00:33 2025 GMT
            Not After : Dec  6 02:00:33 2025 GMT
        Subject: CN=2b3b366e-83bb-4cfc-92f1-a82e61bf6fdf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:20:a7:41:33:a3:6e:0f:1a:6e:1d:83:fb:00:
                    c7:c0:20:50:ee:d7:9a:f7:ce:72:a9:4a:07:da:60:
                    45:80:c2:a9:af:af:27:92:44:17:1e:c6:c3:e7:82:
                    7d:8e:63:c6:90:cc:87:1d:fe:84:53:ff:f7:45:41:
                    23:9e:8b:f6:24:4d:a6:36:6a:38:cf:97:2e:31:eb:
                    1a:e0:a6:76:43:86:5a:59:cf:8c:1a:ea:94:43:36:
                    93:f5:a3:b7:12:2f:fc:9f:ff:dc:98:c3:8a:fd:fe:
                    87:0a:fd:53:b7:3e:18:0c:b1:d3:88:73:79:d5:92:
                    5a:61:7f:ae:52:d5:8e:e9:ef:d3:8d:2e:61:4b:40:
                    70:d1:35:73:16:6b:38:81:ba:1c:1f:db:e1:4d:cc:
                    e5:db:47:6a:40:52:94:54:c1:a4:01:41:47:81:a7:
                    7e:c5:7d:9f:cc:8c:b5:f1:c7:a7:d9:a5:41:4d:e2:
                    b8:1f:bf:40:16:0d:57:12:7e:3d:0c:3a:4c:13:bc:
                    a5:c4:f8:ee:70:22:47:15:de:99:cf:ba:75:02:91:
                    9a:bb:45:dd:91:c3:c2:77:98:e3:c6:a4:09:ac:2a:
                    09:90:20:af:ec:25:46:f8:d3:2e:6f:fd:ee:d0:10:
                    a1:b0:2e:e8:35:98:fb:2a:b1:ec:d6:bb:72:4f:9b:
                    89:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:88:88:FE:5D:84:08:13:98:D0:99:44:DA:E3:10:86:97:46:29:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/63dc8163-abd2-4d81-9ad2-1adb867f4b33/e8b49a47-420f-3ee2-b3b8-87d3d002901a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/63dc8163-abd2-4d81-9ad2-1adb867f4b33/63dc8163-abd2-4d81-9ad2-1adb867f4b33.crl

            X509v3 Authority Key Identifier:
                keyid:C5:CC:7F:57:B0:B1:95:65:22:A9:18:2A:E1:F2:67:7C:11:24:41:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/63dc8163-abd2-4d81-9ad2-1adb867f4b33.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.182.1.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:d4:39:cd:06:38:5b:e2:6e:a0:02:2a:67:21:88:fc:24:28:
         ac:ad:ea:71:63:01:ce:ed:8f:75:c1:c6:4d:11:2f:6a:09:a5:
         5c:0d:69:c5:1c:f8:6c:c7:59:37:fb:eb:75:3c:60:b7:1f:cb:
         fd:b0:a9:bb:ea:45:cd:a2:16:70:46:9a:6c:6d:69:af:db:4e:
         aa:e9:b3:5e:38:18:3c:32:75:28:0e:c0:c0:49:57:d4:2d:65:
         f6:5e:19:62:65:4d:6c:e6:88:f8:63:49:e3:d7:42:56:b3:58:
         b0:69:ae:b5:c4:f0:39:33:ba:cd:53:95:e8:c7:9b:af:3f:7d:
         dc:e6:e8:b3:c6:4f:2f:a6:68:29:99:99:48:95:7b:89:d2:06:
         81:26:3e:8e:88:0f:1d:6f:e9:3e:62:fe:ae:69:4d:49:00:ef:
         75:62:5c:69:08:e5:43:8f:ef:83:76:cd:4a:0a:ca:c0:ab:34:
         f3:8e:48:6a:5f:87:1b:5c:94:48:5a:25:fe:f3:83:fa:99:87:
         de:1b:ad:37:36:84:7c:59:9c:45:07:7a:c1:20:9b:fd:df:27:
         87:72:09:4c:e0:95:de:d5:68:b0:37:99:4c:8c:3a:ca:a0:f1:
         11:ac:3c:7d:74:c5:74:e7:80:b9:51:e9:d6:34:8b:29:33:de:
         8b:87:cd:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 17 13:52:59 2025 by rpki-client