Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/8286479d-9721-3b8f-8c5e-4a0f33f5360a.roa
File:                     8286479d-9721-3b8f-8c5e-4a0f33f5360a.roa (raw, json)
Hash identifier:          eTYXMil9nqmdXO7HqMRKfEk7ESynily/Vo/gd8wInf4=
Subject key identifier:   23:EF:82:19:AA:B9:00:0C:7C:C6:8D:00:47:FC:E4:48:88:70:DB:51
Certificate issuer:       /CN=38847bfd-3c7b-447f-b44c-daac9ae5da93
Certificate serial:       010D0C9F4328584A2ABADA8BCC041A4BC79C5280
Authority key identifier: 10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/8286479d-9721-3b8f-8c5e-4a0f33f5360a.roa
Signing time:             Thu 12 Jun 2025 13:01:03 +0000
ROA not before:           Thu 12 Jun 2025 13:01:03 +0000
ROA not after:            Wed 10 Sep 2025 13:01:03 +0000
asID:                     396253
IP address blocks:        163.120.70.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:2a:ba:da:8b:cc:04:1a:4b:c7:9c:52:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38847bfd-3c7b-447f-b44c-daac9ae5da93
        Validity
            Not Before: Jun 12 13:01:03 2025 GMT
            Not After : Sep 10 13:01:03 2025 GMT
        Subject: CN=346ecbaf-d894-492b-b5ea-558aa4082038
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:b7:eb:51:65:90:04:21:6a:09:d3:d3:05:32:
                    6c:6e:68:24:fc:fe:ac:3b:db:da:5d:41:5b:f6:75:
                    a1:b0:00:7f:a6:3f:f8:24:ba:d8:5b:86:d0:50:63:
                    e9:5d:0e:84:19:63:93:8c:91:bf:91:bf:f8:ff:35:
                    b4:38:70:87:7a:ed:44:eb:00:ac:b4:a4:65:1c:d7:
                    02:24:a8:ae:00:f3:29:cb:f9:7e:0c:50:ca:65:c0:
                    bc:e5:18:df:d5:53:8d:63:a2:32:29:28:d0:b5:16:
                    90:63:03:86:d0:b6:33:31:49:0f:8c:2d:47:21:ab:
                    47:3d:31:a4:9c:12:d5:41:99:46:21:e8:8b:52:35:
                    e4:7e:1d:a0:86:7f:d0:8d:d4:33:b8:bc:76:7a:f3:
                    51:a5:4f:a2:df:03:64:b3:2c:f8:fc:f2:d5:65:f3:
                    b8:8b:c3:46:ae:24:40:d8:98:8b:54:44:eb:8b:ea:
                    f6:a3:0c:94:7a:43:cb:1b:39:62:78:a4:3e:f8:ea:
                    42:20:0c:a5:e3:6e:46:ec:04:9a:f0:50:e4:d4:19:
                    a8:00:db:ac:dc:bc:e7:a2:06:63:1b:8f:3e:ea:8e:
                    37:73:21:6b:3d:98:23:18:90:f6:96:a7:ef:de:8d:
                    54:65:0e:05:0b:f6:fe:99:7d:5c:25:90:7a:ec:ba:
                    78:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:EF:82:19:AA:B9:00:0C:7C:C6:8D:00:47:FC:E4:48:88:70:DB:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/8286479d-9721-3b8f-8c5e-4a0f33f5360a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl

            X509v3 Authority Key Identifier:
                keyid:10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.120.70.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:77:b8:ff:f8:a9:1b:06:de:28:92:00:63:77:74:91:50:c8:
         86:5c:ad:c4:c7:d7:14:56:03:67:11:ec:7c:da:52:b2:3e:6a:
         71:cf:db:46:3e:eb:28:85:91:a3:44:c2:ed:b6:3d:6d:b6:5e:
         28:db:b4:6c:47:47:b5:bd:59:b7:b7:ae:a1:40:0b:32:5c:09:
         79:c1:87:0f:78:e6:af:86:60:c9:d5:45:0d:c4:c0:1f:77:17:
         6c:66:5a:ea:3c:39:bb:8d:ef:58:5d:18:8e:44:ee:67:59:c2:
         d1:f6:5b:fb:fc:86:a6:33:e1:7e:c6:ab:54:08:d4:e5:42:8c:
         40:fa:85:54:07:4e:5f:3e:8b:78:19:e5:95:f0:15:14:00:53:
         c3:2e:c1:31:57:7b:b6:d6:0f:df:8e:c9:8a:b1:c4:4a:64:39:
         2c:c3:6b:ff:b5:34:98:49:0f:6d:8f:52:7f:6e:86:a1:7e:1c:
         a3:9e:3d:a6:0d:26:5e:cf:ef:93:21:9b:1e:9f:8c:f5:c5:ec:
         c4:db:30:c6:14:8e:c4:cb:0b:f3:a1:d3:13:d2:53:60:86:26:
         9b:3d:6f:73:2f:92:1d:3b:93:fa:41:8a:89:95:77:ab:0d:54:
         cc:60:ce:bc:2a:4d:70:51:49:9b:94:7b:ab:c8:19:a7:ca:39:
         eb:98:17:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 13:52:37 2025 by rpki-client