Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0ad2b3c4-a64c-4afd-b0df-103361339550/1a0530be-6c1f-39e4-b65b-14fd8f320b07.roa
File:                     1a0530be-6c1f-39e4-b65b-14fd8f320b07.roa (raw, json)
Hash identifier:          qyhq0I4I4iJT+BdLmVGBCQGKtivMqEnk7ojf16IFX0Q=
Subject key identifier:   13:90:A9:0D:81:64:64:6B:89:84:B3:10:4A:46:5D:33:B7:B0:2E:B6
Certificate issuer:       /CN=0ad2b3c4-a64c-4afd-b0df-103361339550
Certificate serial:       010D0C9F43285848D4DB946C7B7BCC5BE71E8180
Authority key identifier: B8:DE:C1:C3:64:52:F0:42:07:DB:3E:84:A4:35:F9:05:C1:BF:3B:6E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0ad2b3c4-a64c-4afd-b0df-103361339550.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0ad2b3c4-a64c-4afd-b0df-103361339550/1a0530be-6c1f-39e4-b65b-14fd8f320b07.roa
Signing time:             Mon 10 Feb 2025 02:00:38 +0000
ROA not before:           Mon 10 Feb 2025 02:00:38 +0000
ROA not after:            Sun 11 May 2025 01:00:38 +0000
asID:                     11287
IP address blocks:        163.182.219.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0ad2b3c4-a64c-4afd-b0df-103361339550/0ad2b3c4-a64c-4afd-b0df-103361339550.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0ad2b3c4-a64c-4afd-b0df-103361339550/0ad2b3c4-a64c-4afd-b0df-103361339550.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0ad2b3c4-a64c-4afd-b0df-103361339550.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:d4:db:94:6c:7b:7b:cc:5b:e7:1e:81:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ad2b3c4-a64c-4afd-b0df-103361339550
        Validity
            Not Before: Feb 10 02:00:38 2025 GMT
            Not After : May 11 01:00:38 2025 GMT
        Subject: CN=47a36008-443e-4241-b9b4-0c49b3bd1abd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:9f:72:78:51:89:c3:23:9a:b7:dd:53:3d:28:
                    fb:e8:ee:7b:99:a6:09:4b:53:83:ec:a2:42:35:70:
                    29:72:b6:1f:bc:6b:b2:8a:d0:cf:aa:de:df:90:db:
                    c4:09:1f:45:c0:25:36:e7:a3:7f:bc:4a:18:f8:24:
                    fd:dc:34:b4:80:00:85:37:f4:a7:d6:51:35:00:fb:
                    3f:22:bf:d8:08:eb:68:bf:08:05:68:de:e2:c1:44:
                    f6:42:73:73:bb:21:20:72:a7:08:19:79:39:02:52:
                    62:12:54:3c:51:fa:e5:b3:8e:39:7f:8d:12:7e:0e:
                    d3:b5:09:c2:d0:73:78:34:09:a0:f0:93:98:51:3d:
                    02:e7:72:71:9c:4b:ef:33:a0:d4:47:fc:4a:d1:88:
                    d8:8a:3e:c7:a5:a3:9c:78:8f:ae:da:4b:7d:ea:ee:
                    4e:60:44:fb:7f:03:03:d9:c3:7a:ba:11:8e:04:60:
                    da:a3:21:dd:75:92:2c:d6:33:9f:ee:2b:dd:2c:a8:
                    da:91:46:2b:c7:b9:7f:2a:92:c5:90:b9:98:75:05:
                    82:6b:eb:7a:89:07:ad:5a:63:ec:2d:69:59:98:31:
                    cf:9e:b5:a7:77:35:4d:72:af:10:b8:4d:5e:88:14:
                    cb:eb:e6:d6:67:ae:9d:54:93:3d:45:12:65:f6:67:
                    7d:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:90:A9:0D:81:64:64:6B:89:84:B3:10:4A:46:5D:33:B7:B0:2E:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0ad2b3c4-a64c-4afd-b0df-103361339550/1a0530be-6c1f-39e4-b65b-14fd8f320b07.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0ad2b3c4-a64c-4afd-b0df-103361339550/0ad2b3c4-a64c-4afd-b0df-103361339550.crl

            X509v3 Authority Key Identifier:
                keyid:B8:DE:C1:C3:64:52:F0:42:07:DB:3E:84:A4:35:F9:05:C1:BF:3B:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0ad2b3c4-a64c-4afd-b0df-103361339550.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.182.219.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:13:a9:cc:d5:ba:af:b2:e9:c2:88:3e:99:a8:b0:ee:f0:00:
         5e:15:e0:d5:e1:aa:7b:42:f0:7c:49:79:ec:63:64:90:86:57:
         2a:ec:81:4f:8a:f7:3d:c2:7a:a1:a6:00:25:52:d9:9f:99:16:
         e4:8a:09:b3:0e:ee:1d:82:d4:b9:15:0f:be:ad:ae:82:07:5c:
         f3:f0:fe:6f:d3:b2:9a:6f:b2:c4:40:82:40:74:7c:75:fc:87:
         bc:97:c2:3c:0a:14:c3:f1:d2:de:bf:0b:13:9a:8b:31:b5:b4:
         8a:5e:b8:a2:37:70:8c:48:b3:90:d4:e5:12:b4:fd:7b:f8:ea:
         f9:86:a3:37:a0:9c:db:ea:7e:be:24:6c:59:68:95:80:16:e4:
         fd:2b:37:a2:dc:68:8b:73:65:4d:1c:ef:26:ad:e2:11:da:fb:
         60:73:0b:84:23:1f:8e:8d:2a:31:f7:7a:75:ac:2c:00:60:25:
         28:60:9d:14:a9:15:cd:27:3c:d0:23:b0:3c:9e:28:19:f6:71:
         16:d5:b7:f3:25:65:5f:97:be:6b:20:63:0f:bf:fd:bc:3e:a6:
         1a:c9:e2:eb:75:e3:bf:68:b3:ba:7a:56:7d:0b:62:30:4a:f3:
         db:02:90:1d:9d:8a:bf:f3:e7:b2:cb:2c:3e:af:ac:b6:f9:01:
         e9:50:00:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:37:12 2025 by rpki-client