Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0ad2b3c4-a64c-4afd-b0df-103361339550/1a0530be-6c1f-39e4-b65b-14fd8f320b07.roa
File:                     1a0530be-6c1f-39e4-b65b-14fd8f320b07.roa (raw, json)
Hash identifier:          o8pMYss24tjl1QxfCb+6Iomd8v6jHpygE86j3GX/iMQ=
Subject key identifier:   51:F2:F3:CF:54:EE:83:B9:E7:18:9D:F3:F8:0F:6E:10:A9:C5:91:C9
Certificate issuer:       /CN=0ad2b3c4-a64c-4afd-b0df-103361339550
Certificate serial:       010D0C9F43285849B4149638A610E4CA71E08F80
Authority key identifier: B8:DE:C1:C3:64:52:F0:42:07:DB:3E:84:A4:35:F9:05:C1:BF:3B:6E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0ad2b3c4-a64c-4afd-b0df-103361339550.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0ad2b3c4-a64c-4afd-b0df-103361339550/1a0530be-6c1f-39e4-b65b-14fd8f320b07.roa
Signing time:             Thu 01 May 2025 01:00:46 +0000
ROA not before:           Thu 01 May 2025 01:00:46 +0000
ROA not after:            Wed 30 Jul 2025 01:00:46 +0000
asID:                     11287
IP address blocks:        163.182.219.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0ad2b3c4-a64c-4afd-b0df-103361339550/0ad2b3c4-a64c-4afd-b0df-103361339550.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0ad2b3c4-a64c-4afd-b0df-103361339550/0ad2b3c4-a64c-4afd-b0df-103361339550.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0ad2b3c4-a64c-4afd-b0df-103361339550.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 15 May 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b4:14:96:38:a6:10:e4:ca:71:e0:8f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ad2b3c4-a64c-4afd-b0df-103361339550
        Validity
            Not Before: May  1 01:00:46 2025 GMT
            Not After : Jul 30 01:00:46 2025 GMT
        Subject: CN=655170fc-44ce-4a53-8560-12d3977b72d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:4d:64:23:e6:9c:63:ae:ba:f3:ce:e8:c3:df:
                    5b:43:59:ce:6c:91:01:8e:1b:90:85:0e:f6:88:0a:
                    4e:5f:cd:59:fb:6d:77:5e:ad:30:9f:85:5d:1c:15:
                    85:ac:ee:71:bc:1e:ea:be:05:3b:17:8d:f6:1f:db:
                    31:15:ea:b4:f9:f0:35:fc:e1:2a:3b:e8:ec:c4:39:
                    f0:cf:a7:3c:e2:fd:81:04:87:a8:2b:3d:79:c4:4f:
                    72:c3:dd:2c:cb:4d:5a:d3:7e:19:42:fb:05:8b:9e:
                    62:0e:22:4b:f5:bf:79:0a:c3:37:d9:ae:8f:85:38:
                    f9:69:53:5a:f7:fd:3c:0a:21:f3:17:c7:19:f2:67:
                    4c:5f:ca:a7:00:c4:09:a5:1d:7c:fa:c3:74:b0:ed:
                    3c:0f:0e:1f:62:26:b0:ed:24:8b:08:e6:8a:ca:0d:
                    b3:6a:d5:e2:82:f8:a1:d1:99:16:c8:f9:e6:93:44:
                    27:6c:a1:79:b0:7d:64:8a:2a:c7:a6:56:36:d0:17:
                    0b:b8:bb:54:66:fb:bf:64:a9:5c:68:94:72:dd:ec:
                    ab:b9:2c:f7:5e:e6:27:49:fe:80:00:29:83:0a:82:
                    bb:5d:13:bb:d8:25:67:ba:44:ae:22:72:15:b8:8e:
                    a8:72:67:e3:0c:f2:97:ec:07:9a:de:87:e1:76:4c:
                    c1:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:F2:F3:CF:54:EE:83:B9:E7:18:9D:F3:F8:0F:6E:10:A9:C5:91:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0ad2b3c4-a64c-4afd-b0df-103361339550/1a0530be-6c1f-39e4-b65b-14fd8f320b07.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0ad2b3c4-a64c-4afd-b0df-103361339550/0ad2b3c4-a64c-4afd-b0df-103361339550.crl

            X509v3 Authority Key Identifier:
                keyid:B8:DE:C1:C3:64:52:F0:42:07:DB:3E:84:A4:35:F9:05:C1:BF:3B:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0ad2b3c4-a64c-4afd-b0df-103361339550.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.182.219.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:67:46:8b:a2:a3:e7:5a:b0:72:e5:ed:54:b3:b8:1a:13:70:
         a2:29:94:30:39:d0:cc:31:d6:84:a7:26:00:c3:86:20:b9:63:
         f0:8f:d6:28:21:d2:46:b4:23:fe:80:17:7c:ba:03:4b:e4:ed:
         86:6b:fb:40:6e:a5:f2:19:25:88:88:ea:ce:eb:24:e6:4c:36:
         b9:6a:02:78:dd:68:01:ed:bb:5a:fa:2c:47:4a:97:b0:eb:75:
         5e:94:bb:c9:d9:32:7b:04:d2:28:f5:f3:b8:97:c4:fd:06:ac:
         68:3f:cd:df:b9:39:40:55:01:82:34:af:91:39:7d:63:bb:f5:
         a3:74:7f:56:11:e7:63:25:cf:7c:42:2b:3e:d9:79:95:8b:ba:
         cb:d9:08:26:2e:4a:74:43:5b:73:eb:ed:18:db:a1:3d:5c:57:
         49:06:22:dc:91:22:2b:71:d7:45:38:a9:fc:fc:e6:f9:d8:fe:
         26:7c:b1:92:75:27:b5:5f:9e:df:a0:91:cc:2b:37:8a:9f:e0:
         b3:44:76:f7:56:6d:eb:53:1d:a7:8f:72:56:4e:38:6a:ad:47:
         74:ff:85:d8:50:d2:7b:5a:0f:24:d7:c4:b3:8d:8e:c7:72:5f:
         f3:71:a9:3a:b5:4c:bb:5a:8d:b0:b7:50:f6:64:2c:58:ff:d4:
         26:92:04:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 02:45:15 2025 by rpki-client