Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/63dc8163-abd2-4d81-9ad2-1adb867f4b33/dc12d94c-969e-3d51-8eac-a3307c335db8.roa
File:                     dc12d94c-969e-3d51-8eac-a3307c335db8.roa (raw, json)
Hash identifier:          SCNfSg86isDeyjLykDnemWjLslxnJEw1NwoyD35dTyE=
Subject key identifier:   FC:1C:F0:C0:AB:65:0D:8F:6E:7F:9F:BB:A1:32:5F:15:6F:37:32:95
Certificate issuer:       /CN=63dc8163-abd2-4d81-9ad2-1adb867f4b33
Certificate serial:       010D0C9F4328584E9D4A63F21A53F671CAAB4000
Authority key identifier: C5:CC:7F:57:B0:B1:95:65:22:A9:18:2A:E1:F2:67:7C:11:24:41:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/63dc8163-abd2-4d81-9ad2-1adb867f4b33.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/63dc8163-abd2-4d81-9ad2-1adb867f4b33/dc12d94c-969e-3d51-8eac-a3307c335db8.roa
Signing time:             Sat 25 Jul 2026 09:00:11 +0000
ROA not before:           Sat 25 Jul 2026 09:00:11 +0000
ROA not after:            Fri 23 Oct 2026 09:00:11 +0000
asID:                     22012
IP address blocks:        167.182.125.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/63dc8163-abd2-4d81-9ad2-1adb867f4b33/63dc8163-abd2-4d81-9ad2-1adb867f4b33.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/63dc8163-abd2-4d81-9ad2-1adb867f4b33/63dc8163-abd2-4d81-9ad2-1adb867f4b33.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/63dc8163-abd2-4d81-9ad2-1adb867f4b33.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 01 Aug 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9d:4a:63:f2:1a:53:f6:71:ca:ab:40:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63dc8163-abd2-4d81-9ad2-1adb867f4b33
        Validity
            Not Before: Jul 25 09:00:11 2026 GMT
            Not After : Oct 23 09:00:11 2026 GMT
        Subject: CN=0c4faebf-2499-4476-8683-5c8f7b159823
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:a4:bb:ac:37:95:ac:a4:cf:bb:e6:d1:e5:4c:
                    96:b0:df:49:67:00:76:d5:c0:37:8e:6d:08:a8:36:
                    0a:79:05:bc:8b:26:51:b1:b7:d3:52:1d:eb:bc:7d:
                    95:06:77:3b:40:aa:d9:43:52:73:f6:95:47:bc:7e:
                    77:e7:60:bc:3c:d3:ae:fe:18:ff:c8:c2:57:e8:68:
                    d1:52:e6:3a:e4:7f:e1:46:9a:77:9d:64:3a:c0:1b:
                    22:6d:8a:ca:f6:fe:65:f1:4f:38:4b:c0:0b:5c:ff:
                    6e:09:91:2f:21:85:bc:04:c9:3c:af:ed:a9:d1:7b:
                    3c:6a:04:f2:2c:36:29:98:c1:43:ab:5f:8a:46:59:
                    79:07:36:e8:98:f2:0a:84:a4:a9:c0:b0:26:f4:e0:
                    bd:d3:0a:76:f8:46:df:7e:87:51:0c:73:aa:f9:99:
                    ea:c6:cc:56:3f:7b:74:9c:4a:20:04:88:4c:a6:8b:
                    ad:60:81:c3:d9:ad:3a:03:f4:9e:e4:27:5b:35:69:
                    1f:44:cb:91:80:ba:0c:e9:7e:47:55:e1:23:4b:28:
                    d9:83:d8:98:ef:ac:ee:a9:15:93:ad:4d:e5:1a:fb:
                    7f:88:81:84:a9:f3:bd:61:8b:55:a5:59:9a:6b:ec:
                    bd:3c:89:d6:ca:63:51:45:92:2e:0c:b3:4b:9c:d5:
                    8d:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:1C:F0:C0:AB:65:0D:8F:6E:7F:9F:BB:A1:32:5F:15:6F:37:32:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/63dc8163-abd2-4d81-9ad2-1adb867f4b33/dc12d94c-969e-3d51-8eac-a3307c335db8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/63dc8163-abd2-4d81-9ad2-1adb867f4b33/63dc8163-abd2-4d81-9ad2-1adb867f4b33.crl

            X509v3 Authority Key Identifier:
                keyid:C5:CC:7F:57:B0:B1:95:65:22:A9:18:2A:E1:F2:67:7C:11:24:41:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/63dc8163-abd2-4d81-9ad2-1adb867f4b33.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.182.125.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:0e:4c:00:d6:55:a3:68:7a:59:b6:06:f4:91:20:a4:2e:7b:
         57:aa:39:1b:91:11:0c:48:64:d1:b2:35:21:3d:93:cd:ce:3c:
         08:30:3d:4f:1a:c0:dd:9e:fa:e9:16:8f:2c:ee:2a:62:82:b7:
         6b:9c:ba:f0:d0:5a:e3:5e:ad:88:5b:57:44:da:8a:ce:0b:6e:
         b2:cd:9d:b9:5b:ad:81:8a:bd:eb:2a:e1:20:a2:33:a9:9d:ae:
         f8:b0:f3:96:69:ad:b6:46:c5:a8:51:10:dd:e4:0c:c7:6b:34:
         88:a5:50:6b:e5:26:1c:6b:84:30:3e:70:16:0b:63:29:dc:74:
         53:c9:87:69:9b:8d:3a:31:59:89:20:7b:f7:37:7f:34:2f:a6:
         3e:06:8e:e6:07:46:07:46:63:89:6b:fd:2f:08:4a:2c:87:8a:
         e9:b5:e8:1c:0f:bc:d2:84:93:bb:ab:84:0d:d8:ba:e4:52:3a:
         a6:49:ab:ad:20:9c:84:a7:d3:c7:2c:f0:87:38:2b:72:8f:fe:
         ae:10:42:0a:7c:8b:82:0d:ae:91:54:39:95:b0:23:c4:c3:f1:
         f6:6a:af:17:34:18:d6:8e:d8:34:05:e4:87:ad:0b:f0:a2:bd:
         5a:6f:00:cd:98:d6:24:39:d5:a5:a0:7c:39:b5:1f:6d:77:2a:
         61:af:fd:e9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6dSmPyGlP2ccqrQAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjNkYzgxNjMtYWJkMi00ZDgxLTlhZDItMWFkYjg2N2Y0
YjMzMB4XDTI2MDcyNTA5MDAxMVoXDTI2MTAyMzA5MDAxMVowLzEtMCsGA1UEAxMk
MGM0ZmFlYmYtMjQ5OS00NDc2LTg2ODMtNWM4ZjdiMTU5ODIzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoaS7rDeVrKTPu+bR5UyWsN9JZwB21cA3jm0I
qDYKeQW8iyZRsbfTUh3rvH2VBnc7QKrZQ1Jz9pVHvH5352C8PNOu/hj/yMJX6GjR
UuY65H/hRpp3nWQ6wBsibYrK9v5l8U84S8ALXP9uCZEvIYW8BMk8r+2p0Xs8agTy
LDYpmMFDq1+KRll5BzbomPIKhKSpwLAm9OC90wp2+EbffodRDHOq+ZnqxsxWP3t0
nEogBIhMpoutYIHD2a06A/Se5CdbNWkfRMuRgLoM6X5HVeEjSyjZg9iY76zuqRWT
rU3lGvt/iIGEqfO9YYtVpVmaa+y9PInWymNRRZIuDLNLnNWNxwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPwc8MCrZQ2Pbn+fu6EyXxVvNzKVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82M2Rj
ODE2My1hYmQyLTRkODEtOWFkMi0xYWRiODY3ZjRiMzMvZGMxMmQ5NGMtOTY5ZS0z
ZDUxLThlYWMtYTMzMDdjMzM1ZGI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjNkYzgxNjMtYWJkMi00ZDgxLTlh
ZDItMWFkYjg2N2Y0YjMzLzYzZGM4MTYzLWFiZDItNGQ4MS05YWQyLTFhZGI4Njdm
NGIzMy5jcmwwHwYDVR0jBBgwFoAUxcx/V7CxlWUiqRgq4fJnfBEkQQIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy82M2RjODE2My1hYmQyLTRkODEtOWFkMi0xYWRi
ODY3ZjRiMzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAp7Z9MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIoOTADWVaNoelm2BvSRIKQue1eqORuREQxIZNGyNSE9k83OPAgwPU8a
wN2e+ukWjyzuKmKCt2ucuvDQWuNerYhbV0Tais4LbrLNnblbrYGKvesq4SCiM6md
rviw85ZprbZGxahREN3kDMdrNIilUGvlJhxrhDA+cBYLYyncdFPJh2mbjToxWYkg
e/c3fzQvpj4GjuYHRgdGY4lr/S8ISiyHium16BwPvNKEk7urhA3YuuRSOqZJq60g
nISn08cs8Ic4K3KP/q4QQgp8i4INrpFUOZWwI8TD8fZqrxc0GNaO2DQF5IetC/Ci
vVpvAM2Y1iQ51aWgfDm1H213KmGv/ek=
-----END CERTIFICATE-----
Generated at Thu Jul 30 06:58:49 2026 by rpki-client