Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/6d87a8f0-e5d1-3b99-8e4d-6cf286a52c7a.roa
File:                     6d87a8f0-e5d1-3b99-8e4d-6cf286a52c7a.roa (raw, json)
Hash identifier:          xp3qtzg3iSFR84zm5/Azhi4CgK5OZVcQEA4kFYrdG3E=
Subject key identifier:   77:1B:FE:80:8F:4E:B8:F0:5D:EE:3A:EF:97:FB:FA:87:D3:7A:50:EB
Certificate issuer:       /CN=38847bfd-3c7b-447f-b44c-daac9ae5da93
Certificate serial:       010D0C9F4328584B66320354DB3D4C96E7B96840
Authority key identifier: 10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/6d87a8f0-e5d1-3b99-8e4d-6cf286a52c7a.roa
Signing time:             Fri 03 Oct 2025 13:00:40 +0000
ROA not before:           Fri 03 Oct 2025 13:00:40 +0000
ROA not after:            Thu 01 Jan 2026 14:00:40 +0000
asID:                     396253
IP address blocks:        163.120.73.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:66:32:03:54:db:3d:4c:96:e7:b9:68:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38847bfd-3c7b-447f-b44c-daac9ae5da93
        Validity
            Not Before: Oct  3 13:00:40 2025 GMT
            Not After : Jan  1 14:00:40 2026 GMT
        Subject: CN=4fb0e8a8-3817-403d-83f9-83b73ee0f440
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:7e:a2:48:15:ab:48:2f:17:e7:29:28:7f:e8:
                    9d:b5:97:50:02:5d:34:b5:e7:08:84:8a:c4:f0:76:
                    7a:b5:d7:52:a5:29:ae:6d:ce:d4:84:14:38:89:22:
                    ca:53:10:aa:94:91:03:f6:17:e9:e4:a8:b9:7f:e3:
                    60:55:e1:67:83:a6:8c:5a:fb:ed:75:44:8a:ab:27:
                    26:fc:52:62:85:65:50:4f:2d:32:67:7d:fe:57:fd:
                    30:27:61:3b:e1:5a:c6:d4:b4:96:b8:2b:74:72:52:
                    12:1c:72:d1:dd:fe:39:52:d8:9d:5a:aa:fe:eb:75:
                    73:c9:fa:81:0d:df:f9:4e:38:32:d1:bf:66:ee:59:
                    0c:38:37:ef:ad:9c:02:dd:5e:72:7d:b3:5c:f8:57:
                    f8:77:4c:89:02:c8:40:14:dc:56:7c:43:29:5b:77:
                    81:8c:d5:8c:6e:25:6a:ec:90:5b:5e:46:b2:52:f7:
                    30:21:a8:29:e9:83:32:d8:34:94:c7:bb:09:3d:91:
                    43:34:54:50:7d:6b:85:de:b4:e4:d8:a9:30:2e:a6:
                    08:e5:2d:1c:ee:a0:31:e6:5e:8a:bc:34:dd:2e:4c:
                    b9:12:c8:71:81:db:b9:5b:0e:bf:58:29:eb:21:e9:
                    6d:b2:27:c6:c7:80:87:f1:0d:5b:c0:46:3e:3d:2a:
                    b5:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:1B:FE:80:8F:4E:B8:F0:5D:EE:3A:EF:97:FB:FA:87:D3:7A:50:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/6d87a8f0-e5d1-3b99-8e4d-6cf286a52c7a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl

            X509v3 Authority Key Identifier:
                keyid:10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.120.73.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:13:c1:ce:5a:eb:90:4c:f6:19:36:26:92:19:ac:66:5c:7d:
         d0:a3:f2:5c:a8:79:da:66:d4:0b:9a:31:64:08:f8:f0:3a:28:
         b5:f4:7b:d2:0d:33:1c:db:c7:a0:0f:0e:27:6d:43:6e:85:92:
         75:91:5e:a1:b8:12:1d:52:e7:c9:d5:0a:a8:cf:cc:a5:57:cc:
         cb:fe:2f:24:7f:08:7f:97:e4:c9:79:a2:e3:bf:60:2d:e5:fb:
         8c:38:e9:e7:97:18:8c:71:6e:cc:5e:9c:9a:65:3f:a2:b4:97:
         35:df:26:d6:e9:f3:78:d5:4d:cc:53:63:81:40:66:83:52:94:
         7c:0f:55:44:67:97:eb:78:0e:11:c4:93:67:4f:42:4b:d1:f5:
         72:58:34:0e:f7:1f:24:c6:62:c7:e4:32:ce:fd:5f:05:8a:6c:
         d7:7d:95:df:d6:20:19:14:a6:47:c6:59:9a:28:4f:9f:cd:0d:
         51:03:9b:1b:00:eb:81:a7:f6:13:70:47:6c:b6:63:2b:d5:a0:
         34:fc:a2:89:bc:cc:b1:f5:6e:84:c4:e6:26:43:3e:29:47:0f:
         f4:94:e0:f2:85:4c:04:c8:bc:79:65:93:c7:87:f7:26:be:c2:
         ac:d0:fe:89:18:cf:8d:8b:2e:42:f7:cd:b5:1a:6d:0a:6b:c8:
         ad:78:8c:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:41:36 2025 by rpki-client