Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/ee4cc5a0-6334-3192-9c33-a6dd8115f59d.roa
File:                     ee4cc5a0-6334-3192-9c33-a6dd8115f59d.roa (raw, json)
Hash identifier:          0VX8oNvB2DUt48L4HmtIXoz5vczroKMKsF1VA35mFSE=
Subject key identifier:   CB:59:68:2A:45:E4:69:AA:3C:25:07:1C:FE:39:F8:40:98:7B:E6:EE
Certificate issuer:       /CN=38847bfd-3c7b-447f-b44c-daac9ae5da93
Certificate serial:       010D0C9F4328584F4C3D500CDA72921787146070
Authority key identifier: 10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/ee4cc5a0-6334-3192-9c33-a6dd8115f59d.roa
Signing time:             Sat 26 Sep 2026 01:00:13 +0000
ROA not before:           Sat 26 Sep 2026 01:00:13 +0000
ROA not after:            Fri 25 Dec 2026 02:00:13 +0000
asID:                     396253
IP address blocks:        163.120.72.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 Oct 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:4c:3d:50:0c:da:72:92:17:87:14:60:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38847bfd-3c7b-447f-b44c-daac9ae5da93
        Validity
            Not Before: Sep 26 01:00:13 2026 GMT
            Not After : Dec 25 02:00:13 2026 GMT
        Subject: CN=dbd49154-4b28-4a46-ba5d-9e000c8555ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:44:5f:64:ae:b4:39:20:58:0f:51:86:09:46:
                    61:2c:bf:d9:c9:b3:b4:2c:90:6d:db:81:5f:ff:dd:
                    d4:ee:f3:ea:6d:c5:a1:77:b5:f9:5b:f0:80:64:83:
                    cb:d0:f4:8e:ac:23:3f:1a:c0:44:96:79:3d:f9:f0:
                    c6:69:bb:fe:b0:0a:52:66:50:74:77:f6:b0:97:60:
                    27:90:6f:61:7a:12:11:bd:86:d8:cb:90:af:fb:39:
                    c5:55:7b:e2:c6:54:d5:f9:3a:44:ca:c3:0f:5a:f5:
                    6f:77:a9:41:3e:59:d4:dd:52:ad:65:dc:a5:20:e1:
                    fb:c7:13:b3:02:3a:45:9a:9f:f1:6f:51:ee:2f:87:
                    8b:67:f9:55:0b:65:d7:e4:51:0e:01:b9:48:7d:f4:
                    b1:00:70:6a:53:11:87:d1:8c:79:21:90:8b:ef:4f:
                    7b:bb:1a:f9:fd:05:78:29:72:44:43:22:db:e9:be:
                    70:6c:61:1b:ef:1c:44:4f:8a:87:dd:7c:12:fd:c7:
                    3d:5a:4a:ed:15:a7:9d:62:62:d9:00:fe:08:33:c5:
                    c0:50:b3:76:4f:63:2f:e0:62:cd:67:9d:cd:9e:23:
                    93:7f:df:4a:4f:71:31:44:db:0d:5b:ca:c3:67:04:
                    3b:aa:da:12:45:f7:09:62:dd:ac:f5:a4:d2:b0:5d:
                    ba:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:59:68:2A:45:E4:69:AA:3C:25:07:1C:FE:39:F8:40:98:7B:E6:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/ee4cc5a0-6334-3192-9c33-a6dd8115f59d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl

            X509v3 Authority Key Identifier:
                keyid:10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.120.72.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:1a:1a:15:87:0e:0b:f7:3a:f0:0d:68:5f:48:8e:82:d0:e6:
         aa:86:b7:23:e1:73:dd:81:0e:bd:8f:1e:1c:4b:6e:d1:05:3b:
         2d:e7:d0:b4:24:c4:7e:d6:f6:e6:6e:4c:95:f3:b9:82:d6:d1:
         28:67:12:41:0f:ca:5c:d5:7a:0e:7a:d8:0d:84:51:bd:a0:68:
         0a:1b:d5:09:0e:9d:4f:2d:53:a7:e8:d9:5c:82:21:4e:f8:25:
         38:a1:a9:80:0e:71:d4:d8:d4:79:bf:3a:60:1a:85:54:f1:fb:
         88:ce:92:23:0b:e3:29:24:f1:52:64:c5:7f:5d:4b:99:74:ec:
         2c:4b:8d:a3:75:98:04:9c:c9:cc:df:7f:5b:4e:fe:82:bc:8e:
         4b:3d:c9:24:07:8c:b7:03:57:d2:6d:6a:0c:b8:c5:6a:9b:ab:
         33:e5:c2:23:cc:57:cc:ad:5e:fe:dc:15:e2:47:bc:26:76:a0:
         5b:95:04:00:0e:a5:b4:86:6a:de:19:b3:1f:be:61:1c:21:5b:
         b8:cd:86:07:40:de:88:98:46:42:cb:c5:89:d5:9c:9d:c5:70:
         bd:63:5a:a5:f4:8f:9c:7e:b8:90:3c:e4:b0:c4:62:5e:07:57:
         6d:19:ce:b4:91:34:c4:2b:ae:34:81:af:5f:9a:10:af:f8:a2:
         e0:da:7c:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 00:05:13 2026 by rpki-client