Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7c827858-1cad-41b0-8c6d-96db973693e9/7c37a5af-af60-36df-838f-5950ccac2dd5.roa
File:                     7c37a5af-af60-36df-838f-5950ccac2dd5.roa (raw, json)
Hash identifier:          K+6EAmZWzEYYQ7opCM+L5A9UfD29j5YS61YOTQQXbTw=
Subject key identifier:   78:1E:C4:C4:A4:12:2B:ED:0D:E0:F4:66:82:70:DB:3C:94:9C:E5:97
Certificate issuer:       /CN=7c827858-1cad-41b0-8c6d-96db973693e9
Certificate serial:       010D0C9F4328584A3CE02B3BE3652F28229653C0
Authority key identifier: C7:E8:89:64:C3:8F:FE:5F:40:DC:81:69:AD:4E:E1:28:CA:0E:D4:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7c827858-1cad-41b0-8c6d-96db973693e9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7c827858-1cad-41b0-8c6d-96db973693e9/7c37a5af-af60-36df-838f-5950ccac2dd5.roa
Signing time:             Thu 19 Jun 2025 01:00:50 +0000
ROA not before:           Thu 19 Jun 2025 01:00:50 +0000
ROA not after:            Wed 17 Sep 2025 01:00:50 +0000
asID:                     398953
IP address blocks:        163.123.137.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7c827858-1cad-41b0-8c6d-96db973693e9/7c827858-1cad-41b0-8c6d-96db973693e9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7c827858-1cad-41b0-8c6d-96db973693e9/7c827858-1cad-41b0-8c6d-96db973693e9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7c827858-1cad-41b0-8c6d-96db973693e9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3c:e0:2b:3b:e3:65:2f:28:22:96:53:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c827858-1cad-41b0-8c6d-96db973693e9
        Validity
            Not Before: Jun 19 01:00:50 2025 GMT
            Not After : Sep 17 01:00:50 2025 GMT
        Subject: CN=a508c8f8-cedf-403e-a418-64575689d63c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:55:15:26:2f:96:1c:06:69:34:82:d2:5b:cb:
                    f1:34:b8:8c:1c:8c:63:a3:fa:84:7b:3b:f0:ff:1c:
                    a0:21:50:40:86:c7:fd:a3:4b:c2:6e:25:f6:4e:28:
                    59:8f:73:a2:26:95:bd:1d:a7:b0:8c:72:c3:fb:f0:
                    a2:b3:ca:b3:30:d0:e5:17:4b:f5:c4:b7:64:ef:19:
                    45:d6:b6:75:e1:26:83:68:9d:c4:01:d0:09:f5:13:
                    df:8f:2c:d3:4e:dd:a1:e4:f4:65:7e:a8:cf:b0:aa:
                    56:69:1e:45:e6:0f:73:f8:e1:2e:10:e9:f5:57:ae:
                    fe:3e:ff:f2:8f:e7:26:28:65:f5:c7:3a:71:a2:e4:
                    32:66:a6:64:f1:bf:1d:4e:e6:1e:25:d9:c7:78:1e:
                    72:24:d9:43:bc:72:22:61:3b:1d:2e:bc:e0:6b:a2:
                    a6:ec:e0:f7:dc:2e:f1:9f:03:06:e8:06:1b:2c:66:
                    21:4a:e9:c2:a4:eb:3b:31:0b:53:32:32:72:87:96:
                    09:13:11:74:82:4b:46:a1:c5:ef:9e:f8:71:34:fe:
                    0f:47:81:8d:fb:a4:25:16:4d:57:6b:62:5d:de:4b:
                    00:a8:13:09:86:af:68:19:ba:c7:0d:28:f6:41:e5:
                    c9:8c:65:0a:85:42:f6:3a:18:17:55:d5:34:23:e6:
                    d7:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:1E:C4:C4:A4:12:2B:ED:0D:E0:F4:66:82:70:DB:3C:94:9C:E5:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7c827858-1cad-41b0-8c6d-96db973693e9/7c37a5af-af60-36df-838f-5950ccac2dd5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7c827858-1cad-41b0-8c6d-96db973693e9/7c827858-1cad-41b0-8c6d-96db973693e9.crl

            X509v3 Authority Key Identifier:
                keyid:C7:E8:89:64:C3:8F:FE:5F:40:DC:81:69:AD:4E:E1:28:CA:0E:D4:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7c827858-1cad-41b0-8c6d-96db973693e9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.123.137.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:53:d9:03:7a:90:51:91:b2:94:dc:41:7a:e9:0a:a9:76:4f:
         cb:4a:15:3a:83:8a:01:9f:dd:8e:ba:6d:0a:f9:fb:f6:e4:d5:
         a1:85:dc:d2:4f:66:ba:8b:40:33:d1:cb:73:47:fa:9d:25:15:
         8f:65:85:ed:34:c9:8e:59:0f:94:a4:26:13:1f:8c:fb:4d:ee:
         52:05:2a:fd:82:0a:02:4c:ff:8d:9e:e8:f4:cc:cd:9b:c5:72:
         6d:d2:1b:55:37:2c:48:02:36:c9:c7:aa:66:b0:27:cc:eb:e2:
         45:af:aa:29:3d:62:1d:8c:51:19:c9:1e:16:18:b3:71:d1:d0:
         fe:8b:9d:89:0e:9f:4d:ae:26:72:14:4b:55:a7:8f:ea:17:21:
         98:de:24:0c:43:df:19:67:15:95:5c:0f:88:8e:3e:0e:bb:15:
         f7:38:4b:8e:37:3e:9d:c5:9c:26:7b:99:53:03:5a:96:56:24:
         06:d2:e9:37:7b:4c:4d:b3:c9:4c:99:dc:7f:e4:25:ed:ed:7a:
         35:be:dd:52:1a:2b:85:7f:12:e4:3f:fc:41:a1:5b:d5:3b:c3:
         d3:fd:c5:88:c4:56:56:19:49:e0:47:1a:cf:0d:cb:cc:ae:db:
         91:14:06:7a:eb:7b:fb:d8:8e:7b:7e:b9:48:04:d8:52:f1:56:
         14:6b:17:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 13:52:37 2025 by rpki-client