Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/d36321c4-60d7-3325-9a68-8325141830bc.roa
File:                     d36321c4-60d7-3325-9a68-8325141830bc.roa (raw, json)
Hash identifier:          tVEbyEinOG2W7Tjj8bllV6o4OK04QGfaIYaE9JzwriY=
Subject key identifier:   12:D0:58:BA:A1:BB:52:00:74:09:E1:87:29:2E:DE:D6:58:B5:70:BD
Certificate issuer:       /CN=38847bfd-3c7b-447f-b44c-daac9ae5da93
Certificate serial:       010D0C9F4328584B92DD8E0CF10922EE61F9D308
Authority key identifier: 10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/d36321c4-60d7-3325-9a68-8325141830bc.roa
Signing time:             Sun 19 Oct 2025 13:00:39 +0000
ROA not before:           Sun 19 Oct 2025 13:00:39 +0000
ROA not after:            Sat 17 Jan 2026 14:00:39 +0000
asID:                     137922
IP address blocks:        163.120.74.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:92:dd:8e:0c:f1:09:22:ee:61:f9:d3:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38847bfd-3c7b-447f-b44c-daac9ae5da93
        Validity
            Not Before: Oct 19 13:00:39 2025 GMT
            Not After : Jan 17 14:00:39 2026 GMT
        Subject: CN=36df1232-a816-49d0-b3cd-3c1aa26ccb35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:05:51:db:be:f1:0f:55:bd:53:1d:63:9e:9d:
                    00:2d:2d:db:8c:b7:03:07:75:8c:77:27:2e:45:bd:
                    0e:70:fc:05:a2:54:81:6b:99:f7:ba:73:04:ea:25:
                    fe:2f:20:06:5c:19:75:57:87:76:88:88:10:f4:30:
                    2a:8e:e9:d0:83:c7:23:92:20:8e:91:d5:16:da:8b:
                    cf:1e:82:20:5e:2e:77:8a:27:84:27:fb:9d:d3:76:
                    80:d0:ff:e7:01:25:b4:5e:fb:8d:f7:52:95:9a:95:
                    e1:ee:5d:9b:9d:7a:b7:ff:d8:77:de:33:0a:48:d8:
                    74:d2:2e:79:71:39:41:ab:a0:6d:e3:08:61:75:20:
                    ff:de:8e:fe:0f:a4:92:de:8a:07:3b:04:47:99:6a:
                    4f:a2:b4:9c:0f:92:3e:34:7b:e9:f1:f7:c7:be:ac:
                    49:ce:e6:b8:9c:c8:7a:be:78:b6:a3:8b:c6:76:01:
                    71:5d:fb:03:d0:0b:99:54:42:da:c9:c1:b4:03:d2:
                    a3:06:84:73:9c:de:b1:81:09:3d:f3:65:87:f0:2e:
                    a4:c0:48:8c:d6:5c:2f:9d:ce:49:0b:cf:f1:42:71:
                    10:17:39:53:e2:5e:fe:2e:48:d4:1a:91:1c:a9:35:
                    60:f5:f0:36:4f:d0:0c:b3:c6:e7:7e:9d:2d:32:d3:
                    61:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:D0:58:BA:A1:BB:52:00:74:09:E1:87:29:2E:DE:D6:58:B5:70:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/d36321c4-60d7-3325-9a68-8325141830bc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl

            X509v3 Authority Key Identifier:
                keyid:10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.120.74.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:1d:f4:c0:23:28:37:cc:14:99:1b:42:9b:22:d9:60:92:80:
         13:e2:13:2e:f6:e6:1e:8c:cd:95:db:f2:b0:a1:ac:b8:52:22:
         2d:a1:a3:c2:91:f2:7a:8a:6c:a4:62:b0:7b:d6:70:51:f6:58:
         4e:8e:75:c8:23:6a:7d:e8:e4:01:4e:11:b4:92:6a:53:41:ab:
         b7:ad:f0:8a:91:73:f5:44:ed:de:f4:1c:8c:3c:e2:ab:78:f6:
         15:1f:90:6f:e5:ff:88:a7:b4:58:ef:4d:a3:17:9d:ce:03:c3:
         8a:79:8d:f5:f9:4b:7a:96:d4:79:c9:6e:64:6e:eb:5e:91:63:
         a8:4a:dc:8d:75:bb:9e:f5:72:5d:6a:e2:65:98:39:c1:8e:a8:
         d4:e8:f4:5d:81:e9:26:21:1e:74:f3:84:4c:82:bd:ce:2e:6c:
         ad:88:8e:2c:34:97:c2:b8:f8:08:7b:ee:8d:24:41:03:93:1b:
         8d:24:e6:bf:db:20:64:ed:da:9a:51:d1:b8:34:ee:37:da:0e:
         61:98:3a:2e:8a:04:f1:98:24:91:af:e3:b5:2c:0a:ce:34:12:
         dd:47:60:1c:81:05:db:52:c9:e6:94:a8:e9:80:bb:c0:d8:fe:
         69:67:58:a2:d9:5c:91:09:a7:ff:44:04:dc:a3:f2:e5:cc:00:
         c1:56:dc:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:15:12 2025 by rpki-client