Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0ad2b3c4-a64c-4afd-b0df-103361339550/a06e48d4-4460-34ad-b73e-2edb2fd5f9da.roa
File:                     a06e48d4-4460-34ad-b73e-2edb2fd5f9da.roa (raw, json)
Hash identifier:          c+IubVQOwzvotYb4LVF7SL0XVEVM7vVuTaiKm49dU90=
Subject key identifier:   0A:ED:6F:89:9F:BD:E3:58:9C:3A:CC:52:BE:2E:5D:77:0C:60:BC:36
Certificate issuer:       /CN=0ad2b3c4-a64c-4afd-b0df-103361339550
Certificate serial:       010D0C9F4328584A7D15FD9405740CE7F7223A78
Authority key identifier: B8:DE:C1:C3:64:52:F0:42:07:DB:3E:84:A4:35:F9:05:C1:BF:3B:6E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0ad2b3c4-a64c-4afd-b0df-103361339550.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0ad2b3c4-a64c-4afd-b0df-103361339550/a06e48d4-4460-34ad-b73e-2edb2fd5f9da.roa
Signing time:             Sat 12 Jul 2025 01:00:50 +0000
ROA not before:           Sat 12 Jul 2025 01:00:50 +0000
ROA not after:            Fri 10 Oct 2025 01:00:50 +0000
asID:                     11287
IP address blocks:        163.182.244.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0ad2b3c4-a64c-4afd-b0df-103361339550/0ad2b3c4-a64c-4afd-b0df-103361339550.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0ad2b3c4-a64c-4afd-b0df-103361339550/0ad2b3c4-a64c-4afd-b0df-103361339550.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0ad2b3c4-a64c-4afd-b0df-103361339550.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7d:15:fd:94:05:74:0c:e7:f7:22:3a:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ad2b3c4-a64c-4afd-b0df-103361339550
        Validity
            Not Before: Jul 12 01:00:50 2025 GMT
            Not After : Oct 10 01:00:50 2025 GMT
        Subject: CN=34966b24-d45b-4010-9be0-bd9ea41a59d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:bd:2c:1e:08:cd:c7:be:f8:63:6a:99:d6:84:
                    fc:6c:eb:a6:4d:b5:73:bc:4d:5d:68:35:a1:7f:40:
                    1c:3e:4c:0f:68:f1:2d:14:43:6e:7f:16:32:f1:c4:
                    a0:df:4c:ab:b3:a2:b1:74:64:05:cb:96:67:cd:d3:
                    ab:2b:79:51:44:5b:4b:ef:3c:a5:a6:12:98:de:41:
                    92:4d:32:a0:24:17:b2:ad:48:8a:e1:43:da:e6:e4:
                    59:23:cd:f3:e3:b5:55:38:0b:48:0f:3e:2a:85:38:
                    b7:9c:e1:1a:f3:6c:75:a4:8d:43:8d:c9:32:99:3a:
                    97:2d:63:71:a3:c2:67:5f:28:9d:f8:62:24:41:a9:
                    a1:b2:aa:d6:a3:3f:cf:62:8e:e9:2e:fa:0e:5a:e6:
                    a2:6f:39:c4:8c:78:7e:09:57:81:c4:b7:55:e4:09:
                    f8:ea:f5:23:26:f4:3a:c3:ea:18:6d:b9:2e:16:ec:
                    0b:8a:07:70:e7:81:33:95:cb:8d:c2:ed:0b:30:fb:
                    d2:41:78:82:d6:bc:cb:5a:ac:ac:05:76:d1:62:ec:
                    f8:da:d3:9c:78:1c:6d:83:0b:53:f4:00:43:48:7f:
                    d8:85:7b:2b:e2:6a:48:f3:ce:2e:00:e1:93:43:e1:
                    5a:8f:5d:54:e1:80:0e:10:21:a3:e2:0a:18:b5:98:
                    9e:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:ED:6F:89:9F:BD:E3:58:9C:3A:CC:52:BE:2E:5D:77:0C:60:BC:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0ad2b3c4-a64c-4afd-b0df-103361339550/a06e48d4-4460-34ad-b73e-2edb2fd5f9da.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0ad2b3c4-a64c-4afd-b0df-103361339550/0ad2b3c4-a64c-4afd-b0df-103361339550.crl

            X509v3 Authority Key Identifier:
                keyid:B8:DE:C1:C3:64:52:F0:42:07:DB:3E:84:A4:35:F9:05:C1:BF:3B:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0ad2b3c4-a64c-4afd-b0df-103361339550.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.182.244.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:f4:81:6c:e7:2b:8e:38:26:e6:7c:9d:de:21:5d:e9:6a:e4:
         f0:98:b5:e8:2a:48:87:1f:fc:0e:46:d2:ff:10:3c:f1:b8:f0:
         5d:89:f4:29:1f:a9:5b:14:29:9e:47:ca:ab:c1:b5:4b:a5:2f:
         ed:5b:fc:e3:4a:5a:5f:02:5d:e4:bf:38:98:55:b8:61:ce:85:
         f6:ad:7e:c5:c5:5a:94:a5:98:54:b5:6a:5e:91:cc:6a:d0:40:
         69:76:f6:d2:57:ae:f1:d6:94:b1:7c:e4:b5:4b:fb:a2:a5:b3:
         6f:db:72:52:51:74:8f:ea:24:e3:73:b4:2d:11:ac:49:4d:a8:
         ab:5f:78:04:db:0f:8e:f8:68:1c:20:e0:70:fe:18:13:2f:b0:
         f9:50:b8:f4:1f:47:07:24:fd:88:5c:a5:f6:b6:e7:6c:71:b6:
         df:ea:47:d6:f3:22:f0:37:2e:28:da:b3:e7:4c:44:c1:be:92:
         73:02:7f:f7:0a:f7:f8:3d:54:62:35:d6:d5:62:75:b3:ac:98:
         4f:f8:81:df:fd:76:a6:8d:4e:9a:f7:4a:7a:35:64:8d:d2:ec:
         41:bf:02:41:5e:ef:3c:66:cb:eb:5d:b1:5d:94:d7:dd:14:1d:
         44:fb:fb:5a:c2:8a:82:34:49:f3:64:42:71:ec:9e:ce:83:f8:
         de:d8:0d:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 07:31:58 2025 by rpki-client