Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7c827858-1cad-41b0-8c6d-96db973693e9/7c37a5af-af60-36df-838f-5950ccac2dd5.roa
File:                     7c37a5af-af60-36df-838f-5950ccac2dd5.roa (raw, json)
Hash identifier:          dh09uPVVzefZPjVpP0JSD8I3HfYaKV3IjDO3OuJM22c=
Subject key identifier:   FC:40:76:B7:8E:EA:7A:FD:56:CA:7C:EE:51:49:2F:E6:5A:18:38:9F
Certificate issuer:       /CN=7c827858-1cad-41b0-8c6d-96db973693e9
Certificate serial:       010D0C9F4328584DBE6B2572EDE67E2C35F42B90
Authority key identifier: C7:E8:89:64:C3:8F:FE:5F:40:DC:81:69:AD:4E:E1:28:CA:0E:D4:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7c827858-1cad-41b0-8c6d-96db973693e9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7c827858-1cad-41b0-8c6d-96db973693e9/7c37a5af-af60-36df-838f-5950ccac2dd5.roa
Signing time:             Wed 06 May 2026 13:00:30 +0000
ROA not before:           Wed 06 May 2026 13:00:30 +0000
ROA not after:            Tue 04 Aug 2026 13:00:30 +0000
asID:                     398953
IP address blocks:        163.123.137.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7c827858-1cad-41b0-8c6d-96db973693e9/7c827858-1cad-41b0-8c6d-96db973693e9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7c827858-1cad-41b0-8c6d-96db973693e9/7c827858-1cad-41b0-8c6d-96db973693e9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7c827858-1cad-41b0-8c6d-96db973693e9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:be:6b:25:72:ed:e6:7e:2c:35:f4:2b:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c827858-1cad-41b0-8c6d-96db973693e9
        Validity
            Not Before: May  6 13:00:30 2026 GMT
            Not After : Aug  4 13:00:30 2026 GMT
        Subject: CN=3d83ce7f-9852-4d8b-b4a9-79515c1e7b83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:48:80:74:dd:7b:78:3c:4f:3d:b7:49:e9:11:
                    c4:6b:1f:64:94:84:6d:6a:35:1e:9e:93:72:7b:a7:
                    60:da:cc:3e:bf:e4:56:7c:5c:10:50:a4:3e:4e:f7:
                    d4:81:55:9e:ad:31:0d:61:60:64:b4:ba:ff:fd:26:
                    a9:4f:a5:89:60:63:fd:61:0d:96:b9:b4:89:38:4b:
                    e5:0b:d0:d3:97:ba:89:61:8e:92:5b:ad:c7:0b:ae:
                    d2:7e:fb:5e:49:60:b3:6a:1f:91:a4:e7:80:0d:96:
                    d4:ee:28:5e:78:07:8f:3a:6c:7d:b8:37:0a:48:7e:
                    51:09:27:84:2e:fc:e8:46:4c:3d:f3:4b:02:83:bf:
                    df:14:b7:8f:43:6d:66:b8:c3:a2:90:64:f3:59:bf:
                    34:26:c9:2f:e6:40:c2:75:64:9c:a6:73:40:b7:22:
                    e8:ff:54:9a:7f:40:e2:5e:51:a3:db:3f:1b:19:3e:
                    01:37:08:55:57:9b:0f:b5:90:a3:4e:e7:8e:14:2d:
                    23:d1:da:c9:29:c0:ca:58:a1:44:fa:0c:9f:39:ec:
                    26:92:0e:b4:35:b7:0b:c9:8b:27:ab:31:4c:a0:4f:
                    cd:11:76:0e:55:2f:2d:ba:37:01:2f:5c:ff:ee:76:
                    5c:f3:e5:20:76:66:e4:f3:2f:71:49:a3:a9:ad:60:
                    0d:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:40:76:B7:8E:EA:7A:FD:56:CA:7C:EE:51:49:2F:E6:5A:18:38:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7c827858-1cad-41b0-8c6d-96db973693e9/7c37a5af-af60-36df-838f-5950ccac2dd5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7c827858-1cad-41b0-8c6d-96db973693e9/7c827858-1cad-41b0-8c6d-96db973693e9.crl

            X509v3 Authority Key Identifier:
                keyid:C7:E8:89:64:C3:8F:FE:5F:40:DC:81:69:AD:4E:E1:28:CA:0E:D4:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7c827858-1cad-41b0-8c6d-96db973693e9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.123.137.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:9a:6f:ac:50:63:98:bd:04:09:73:f2:3e:a2:4d:a0:fd:02:
         e2:bb:29:cc:57:44:de:e5:00:b6:03:16:3a:1d:16:20:ec:16:
         74:cf:39:bf:10:53:16:b5:55:e1:e8:7e:92:f6:12:1e:5b:98:
         21:f8:78:36:04:8a:cd:5e:cb:2f:e0:a3:31:5b:2d:50:56:c0:
         47:4a:b3:60:9e:ef:2d:00:cc:2a:d6:50:6f:a4:99:90:bd:4d:
         ab:4a:f8:1e:da:69:1a:92:a7:9d:5d:a1:59:05:29:bf:53:e9:
         e5:b8:51:d1:3c:b5:02:48:81:35:9a:0c:24:20:cd:7d:97:c7:
         ef:4c:3a:11:b5:56:04:50:95:dc:51:0b:92:20:d3:fc:1e:1a:
         3d:a7:b9:3c:5b:bf:ae:3e:e6:70:fe:c8:44:36:3d:7a:f7:9b:
         af:31:57:b1:17:c2:44:27:da:5f:5f:e3:db:40:8f:cb:ce:a1:
         2d:22:25:f9:00:f4:c1:b0:4c:a6:d7:54:b5:e3:d4:08:2f:7b:
         f5:eb:42:58:ae:43:81:d1:e7:7e:55:50:2a:95:33:f1:f9:01:
         48:59:ce:ed:73:27:4e:2a:63:c5:75:89:d8:2a:7f:78:bf:d7:
         d3:01:6f:b6:07:83:31:3b:cf:00:dd:eb:75:52:c9:cb:4d:4c:
         42:1e:23:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:26:14 2026 by rpki-client