Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/63dc8163-abd2-4d81-9ad2-1adb867f4b33/0fbbe7fd-88d3-3646-8bda-bf505ddffe7f.roa
File:                     0fbbe7fd-88d3-3646-8bda-bf505ddffe7f.roa (raw, json)
Hash identifier:          rAqeYaRK3kzEjK8T7C02HA47JLutZawD6xjiYY/d/aY=
Subject key identifier:   4E:15:C3:06:7F:FE:AD:81:AE:E0:21:68:53:1F:3A:91:33:6D:73:5E
Certificate issuer:       /CN=63dc8163-abd2-4d81-9ad2-1adb867f4b33
Certificate serial:       010D0C9F4328584DBD058DC4A39747D865D8F8B0
Authority key identifier: C5:CC:7F:57:B0:B1:95:65:22:A9:18:2A:E1:F2:67:7C:11:24:41:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/63dc8163-abd2-4d81-9ad2-1adb867f4b33.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/63dc8163-abd2-4d81-9ad2-1adb867f4b33/0fbbe7fd-88d3-3646-8bda-bf505ddffe7f.roa
Signing time:             Wed 06 May 2026 01:00:24 +0000
ROA not before:           Wed 06 May 2026 01:00:24 +0000
ROA not after:            Tue 04 Aug 2026 01:00:24 +0000
asID:                     22012
IP address blocks:        167.182.123.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/63dc8163-abd2-4d81-9ad2-1adb867f4b33/63dc8163-abd2-4d81-9ad2-1adb867f4b33.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/63dc8163-abd2-4d81-9ad2-1adb867f4b33/63dc8163-abd2-4d81-9ad2-1adb867f4b33.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/63dc8163-abd2-4d81-9ad2-1adb867f4b33.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:bd:05:8d:c4:a3:97:47:d8:65:d8:f8:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63dc8163-abd2-4d81-9ad2-1adb867f4b33
        Validity
            Not Before: May  6 01:00:24 2026 GMT
            Not After : Aug  4 01:00:24 2026 GMT
        Subject: CN=50430d1d-5dc2-442a-b7cd-8280c95d0ce8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:f5:b5:97:a9:ef:0c:e4:2d:85:bc:7b:70:ac:
                    04:a5:ba:8d:0b:24:ed:b2:fe:3e:8a:26:50:00:f2:
                    0e:c2:87:e9:4f:c6:f2:85:76:c3:73:40:57:32:9d:
                    31:98:5c:20:1f:9c:82:b8:1c:86:40:95:53:ac:e1:
                    ae:88:9a:d1:43:1a:20:a8:fa:6a:fb:88:ee:e3:98:
                    e1:ab:aa:b9:4a:63:c1:48:6c:18:db:b6:57:1c:42:
                    af:5b:d8:6c:91:20:ab:df:d5:90:c0:a1:26:f1:cc:
                    4e:01:bc:83:71:77:9a:88:a0:42:5e:d5:e2:c2:07:
                    a8:e7:01:5b:e5:93:37:9e:d4:a3:1c:9c:03:18:b1:
                    ed:9a:4a:af:62:d4:c9:f8:9a:ca:a3:a2:90:82:93:
                    0c:65:24:11:04:ee:a5:58:2b:3d:6a:3e:e6:13:9b:
                    8b:cb:71:a8:94:83:ee:87:62:d9:3d:fd:ec:e6:18:
                    3c:79:6c:3d:42:46:f3:34:45:bd:d2:ef:1f:91:59:
                    c5:2b:60:88:a3:7f:19:f8:f0:83:45:89:67:9c:95:
                    e9:75:43:ac:ed:9b:0b:86:36:49:0d:b7:db:4d:ad:
                    cd:9e:7d:c6:ba:42:29:6d:49:da:1b:77:51:84:58:
                    c1:02:40:27:80:d8:11:5c:e9:61:9b:51:a5:88:ae:
                    09:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:15:C3:06:7F:FE:AD:81:AE:E0:21:68:53:1F:3A:91:33:6D:73:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/63dc8163-abd2-4d81-9ad2-1adb867f4b33/0fbbe7fd-88d3-3646-8bda-bf505ddffe7f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/63dc8163-abd2-4d81-9ad2-1adb867f4b33/63dc8163-abd2-4d81-9ad2-1adb867f4b33.crl

            X509v3 Authority Key Identifier:
                keyid:C5:CC:7F:57:B0:B1:95:65:22:A9:18:2A:E1:F2:67:7C:11:24:41:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/63dc8163-abd2-4d81-9ad2-1adb867f4b33.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.182.123.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:3b:ce:8e:8a:50:62:74:e3:cb:ed:3d:92:bc:f6:86:36:a5:
         d0:0d:18:b3:f1:27:95:bc:0f:3f:c7:31:78:7d:e9:8d:65:5a:
         4b:06:85:2d:f5:97:d3:f9:57:ff:bc:30:86:c5:bc:0a:b8:28:
         09:26:39:d7:4b:35:36:13:91:0c:bd:b7:00:02:97:39:be:80:
         03:9a:ec:ee:e9:48:6c:91:9f:bf:15:4d:f6:79:97:b4:8f:03:
         7f:2b:df:a1:67:36:ba:24:94:60:2d:52:39:dc:4d:8f:80:a2:
         c9:b5:14:93:d3:f8:23:f0:eb:2f:4e:06:b7:a9:c8:4f:48:12:
         ec:4c:2f:8b:4c:42:14:17:1b:6b:4e:72:a7:b5:c0:8b:ea:84:
         37:4a:0c:41:84:44:ea:01:cb:3c:c7:74:63:fa:7a:67:77:b7:
         43:47:be:5a:e1:29:00:f5:ff:50:58:49:52:22:19:5c:a0:1e:
         c5:09:b9:95:5e:31:b5:b6:6d:4e:68:c0:28:1e:80:6a:86:39:
         d0:c0:f3:89:db:21:8f:86:72:c6:0c:8a:16:2a:8c:45:be:ff:
         05:94:89:98:08:72:20:ba:a1:e3:cf:57:7b:99:eb:4a:65:b6:
         82:ac:69:cd:24:34:e0:1d:c6:42:c3:30:61:49:a9:fb:1e:56:
         df:b2:53:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:55:53 2026 by rpki-client