Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/63dc8163-abd2-4d81-9ad2-1adb867f4b33/52074120-0538-341a-8afd-78ce46303495.roa
File:                     52074120-0538-341a-8afd-78ce46303495.roa (raw, json)
Hash identifier:          2AcUnX5PWOmbYal30MpgFSh3S4Qayq5HpuvmV1LNnwY=
Subject key identifier:   0B:07:0C:BE:0A:9B:3B:80:B8:26:32:5E:5E:63:4E:59:86:DA:FF:78
Certificate issuer:       /CN=63dc8163-abd2-4d81-9ad2-1adb867f4b33
Certificate serial:       010D0C9F4328584A3B7AF77FB3FBFB83EB374D80
Authority key identifier: C5:CC:7F:57:B0:B1:95:65:22:A9:18:2A:E1:F2:67:7C:11:24:41:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/63dc8163-abd2-4d81-9ad2-1adb867f4b33.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/63dc8163-abd2-4d81-9ad2-1adb867f4b33/52074120-0538-341a-8afd-78ce46303495.roa
Signing time:             Wed 18 Jun 2025 13:01:06 +0000
ROA not before:           Wed 18 Jun 2025 13:01:06 +0000
ROA not after:            Tue 16 Sep 2025 13:01:06 +0000
asID:                     54053
IP address blocks:        167.182.85.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/63dc8163-abd2-4d81-9ad2-1adb867f4b33/63dc8163-abd2-4d81-9ad2-1adb867f4b33.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/63dc8163-abd2-4d81-9ad2-1adb867f4b33/63dc8163-abd2-4d81-9ad2-1adb867f4b33.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/63dc8163-abd2-4d81-9ad2-1adb867f4b33.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 21 Jun 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3b:7a:f7:7f:b3:fb:fb:83:eb:37:4d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63dc8163-abd2-4d81-9ad2-1adb867f4b33
        Validity
            Not Before: Jun 18 13:01:06 2025 GMT
            Not After : Sep 16 13:01:06 2025 GMT
        Subject: CN=60cc2a25-2117-4c6a-ae03-0eac27b4103e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:35:e9:69:db:8a:74:43:c2:28:cc:9f:ec:94:
                    29:85:79:b1:cc:bb:01:9e:8e:66:b7:6b:ef:fa:e2:
                    1b:9e:7b:74:45:81:9b:c7:34:39:17:e2:7e:d3:1f:
                    4d:f9:97:8d:84:66:75:3d:6f:03:b6:f0:98:db:1a:
                    b4:16:18:ba:62:a2:aa:cf:a2:0a:8f:d3:20:8a:1a:
                    1a:4a:74:c7:2a:db:e0:a8:92:6a:d1:3a:ff:45:ce:
                    e9:98:a7:fb:0c:78:d7:9d:d0:a8:37:ea:cc:95:78:
                    45:4d:c5:6a:f1:0c:28:c4:ea:2a:14:eb:32:4e:76:
                    3b:d2:14:14:68:98:19:d9:ba:bd:b7:13:f3:25:18:
                    60:a1:53:57:91:55:0d:84:8c:d2:d1:78:63:50:ee:
                    9e:da:04:37:e5:8b:2b:ce:d3:b8:9e:51:6c:4f:64:
                    10:d9:bf:c4:d0:82:8a:47:5c:db:7d:bb:67:b4:3b:
                    1f:8c:bf:5b:c3:bf:87:b5:c7:5c:8b:c7:f3:68:d8:
                    46:e8:0d:04:bd:6b:1c:be:ee:94:b2:0f:7f:64:75:
                    aa:29:32:e9:82:b8:9e:22:97:fc:cb:fb:27:6a:5b:
                    3a:1e:f2:db:e0:79:17:54:d3:b0:12:69:db:70:ec:
                    a1:1e:13:f7:6b:bf:f0:0c:ce:df:a5:ee:ee:1b:d8:
                    66:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:07:0C:BE:0A:9B:3B:80:B8:26:32:5E:5E:63:4E:59:86:DA:FF:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/63dc8163-abd2-4d81-9ad2-1adb867f4b33/52074120-0538-341a-8afd-78ce46303495.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/63dc8163-abd2-4d81-9ad2-1adb867f4b33/63dc8163-abd2-4d81-9ad2-1adb867f4b33.crl

            X509v3 Authority Key Identifier:
                keyid:C5:CC:7F:57:B0:B1:95:65:22:A9:18:2A:E1:F2:67:7C:11:24:41:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/63dc8163-abd2-4d81-9ad2-1adb867f4b33.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.182.85.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:8b:aa:c3:db:12:5c:18:1a:15:51:d4:dd:d1:eb:81:92:a2:
         99:90:5d:5e:55:c0:39:6b:92:e7:46:0d:9f:0b:53:11:b7:98:
         fc:8b:46:f4:2f:ab:59:cc:be:6b:f4:71:3e:2c:01:2d:55:e4:
         82:2f:92:75:2a:6f:8b:3f:82:2f:7a:d4:f0:89:d1:0b:cb:6f:
         ce:bb:dc:7c:8a:0c:48:f9:35:56:6b:e3:a1:f1:e6:7c:4c:f9:
         4e:3b:05:7a:d0:c7:33:a7:0f:cc:4a:66:27:fe:3a:d7:ae:b7:
         4c:63:01:9e:b2:45:13:41:ca:00:c3:bd:cf:73:5a:18:44:2b:
         6e:88:06:d7:79:ed:e9:ad:f7:f7:f0:89:90:17:e4:1b:f0:4e:
         83:c0:3e:97:4e:99:55:1e:9b:16:35:5f:74:b5:b2:20:29:69:
         da:e3:44:95:a4:16:72:62:d9:be:c1:4f:65:20:ed:ab:35:1c:
         62:e2:56:f6:c2:82:b5:10:33:96:50:5a:7a:98:d0:7e:1f:ef:
         61:1a:49:80:41:a2:b8:4d:eb:8f:e5:f0:41:ca:16:e7:7b:ae:
         5a:ee:7c:0f:91:46:73:6f:fc:cc:ac:d2:64:93:d2:c5:8e:28:
         ff:98:39:9a:df:84:10:d4:56:18:01:b5:e8:2e:21:8e:66:ad:
         cb:ea:15:ce
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo7evd/s/v7g+s3TYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjNkYzgxNjMtYWJkMi00ZDgxLTlhZDItMWFkYjg2N2Y0
YjMzMB4XDTI1MDYxODEzMDEwNloXDTI1MDkxNjEzMDEwNlowLzEtMCsGA1UEAxMk
NjBjYzJhMjUtMjExNy00YzZhLWFlMDMtMGVhYzI3YjQxMDNlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiDXpaduKdEPCKMyf7JQphXmxzLsBno5mt2vv
+uIbnnt0RYGbxzQ5F+J+0x9N+ZeNhGZ1PW8DtvCY2xq0Fhi6YqKqz6IKj9Mgihoa
SnTHKtvgqJJq0Tr/Rc7pmKf7DHjXndCoN+rMlXhFTcVq8QwoxOoqFOsyTnY70hQU
aJgZ2bq9txPzJRhgoVNXkVUNhIzS0XhjUO6e2gQ35YsrztO4nlFsT2QQ2b/E0IKK
R1zbfbtntDsfjL9bw7+Htcdci8fzaNhG6A0EvWscvu6Usg9/ZHWqKTLpgrieIpf8
y/snals6HvLb4HkXVNOwEmnbcOyhHhP3a7/wDM7fpe7uG9hmnQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAsHDL4KmzuAuCYyXl5jTlmG2v94MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82M2Rj
ODE2My1hYmQyLTRkODEtOWFkMi0xYWRiODY3ZjRiMzMvNTIwNzQxMjAtMDUzOC0z
NDFhLThhZmQtNzhjZTQ2MzAzNDk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjNkYzgxNjMtYWJkMi00ZDgxLTlh
ZDItMWFkYjg2N2Y0YjMzLzYzZGM4MTYzLWFiZDItNGQ4MS05YWQyLTFhZGI4Njdm
NGIzMy5jcmwwHwYDVR0jBBgwFoAUxcx/V7CxlWUiqRgq4fJnfBEkQQIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy82M2RjODE2My1hYmQyLTRkODEtOWFkMi0xYWRi
ODY3ZjRiMzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAp7ZVMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG+LqsPbElwYGhVR1N3R64GSopmQXV5VwDlrkudGDZ8LUxG3mPyLRvQv
q1nMvmv0cT4sAS1V5IIvknUqb4s/gi961PCJ0QvLb8673HyKDEj5NVZr46Hx5nxM
+U47BXrQxzOnD8xKZif+Oteut0xjAZ6yRRNBygDDvc9zWhhEK26IBtd57emt9/fw
iZAX5BvwToPAPpdOmVUemxY1X3S1siApadrjRJWkFnJi2b7BT2Ug7as1HGLiVvbC
grUQM5ZQWnqY0H4f72EaSYBBorhN64/l8EHKFud7rlrufA+RRnNv/Mys0mST0sWO
KP+YOZrfhBDUVhgBteguIY5mrcvqFc4=
-----END CERTIFICATE-----
Generated at Thu Jun 19 05:10:50 2025 by rpki-client