Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/f7d68cc6-013a-31a4-a086-2a5706854703.roa
File:                     f7d68cc6-013a-31a4-a086-2a5706854703.roa (raw, json)
Hash identifier:          CJOdZsuNu/+VIeRuuz/Pktl0adeXwGHAHB2zhvK7UCk=
Subject key identifier:   7C:F0:C5:A3:F3:92:1E:F0:C9:F0:1F:04:76:0E:08:D7:F1:C6:7D:40
Certificate issuer:       /CN=38847bfd-3c7b-447f-b44c-daac9ae5da93
Certificate serial:       010D0C9F4328584DFECBAC2F5DAF7D619CF7A3C0
Authority key identifier: 10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/f7d68cc6-013a-31a4-a086-2a5706854703.roa
Signing time:             Fri 29 May 2026 14:27:16 +0000
ROA not before:           Fri 29 May 2026 14:27:16 +0000
ROA not after:            Thu 27 Aug 2026 14:27:16 +0000
asID:                     137922
IP address blocks:        163.120.70.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Jun 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:fe:cb:ac:2f:5d:af:7d:61:9c:f7:a3:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38847bfd-3c7b-447f-b44c-daac9ae5da93
        Validity
            Not Before: May 29 14:27:16 2026 GMT
            Not After : Aug 27 14:27:16 2026 GMT
        Subject: CN=52d5f330-f6b6-4469-bec4-42e912240dcd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:e5:f4:cf:55:ca:03:ce:1e:7b:df:56:3f:50:
                    8e:a6:dc:e6:60:1f:d8:31:33:ee:f1:3a:f8:c8:68:
                    ae:94:f8:66:db:e9:35:42:51:04:30:c8:d0:c1:5f:
                    1f:3b:b3:bf:6a:13:19:3e:b9:7f:75:0f:7b:d4:1d:
                    a0:ca:1b:60:5e:93:9c:bc:e0:0b:d6:8c:37:d2:2c:
                    1b:83:ec:61:99:0f:b9:e0:08:b6:82:a3:84:d2:b0:
                    d9:4e:09:a5:31:a4:35:f2:d5:bf:31:11:ba:20:db:
                    d3:b7:96:e2:12:96:85:f6:74:50:e4:0d:53:78:22:
                    6e:d3:c1:71:41:68:18:b7:bb:0e:35:bf:e9:8b:b8:
                    cd:4e:ca:40:00:fe:24:4e:04:5e:34:b0:ca:9e:6b:
                    b5:89:e5:3a:e0:01:6c:f0:82:dd:af:21:51:37:a3:
                    59:cb:9f:96:e5:b5:c2:c1:a7:d8:b5:1c:1c:03:d2:
                    e7:1f:ca:eb:44:80:70:47:b5:b5:54:2e:de:fa:77:
                    be:7b:f9:2a:7e:2e:c0:e0:a0:51:80:ad:1a:1c:59:
                    77:2e:51:ff:09:6a:96:1e:37:30:87:df:27:ee:70:
                    a0:00:df:8e:24:bb:97:e6:ba:2c:c4:0b:d9:09:6b:
                    0f:b9:58:6b:7e:16:31:cb:e6:1b:dc:03:80:1b:da:
                    95:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:F0:C5:A3:F3:92:1E:F0:C9:F0:1F:04:76:0E:08:D7:F1:C6:7D:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/f7d68cc6-013a-31a4-a086-2a5706854703.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl

            X509v3 Authority Key Identifier:
                keyid:10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.120.70.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:5c:57:27:58:9a:bb:12:d3:b6:91:b6:67:ef:78:78:69:a0:
         7c:26:14:0b:5c:01:2d:18:c7:c3:59:98:4e:0f:e7:9b:1c:04:
         56:1a:6e:6e:65:d5:b1:1b:08:2d:07:d7:f8:1d:db:81:5e:94:
         f5:17:fa:92:00:a0:61:92:c6:52:9b:c7:49:55:cf:39:f6:a4:
         86:1f:c1:75:ba:47:d8:f7:5b:4b:41:39:f1:c9:bd:a2:ce:f9:
         e2:45:d7:f4:76:f5:1d:9f:45:4c:71:6e:0a:3d:e7:5b:12:76:
         48:dc:aa:bb:e4:07:e1:9b:7b:0e:b8:61:e6:7e:e3:ba:65:44:
         f5:21:c0:b3:90:57:1a:32:f0:79:38:2b:90:4e:7e:6f:f0:08:
         be:46:de:bd:8b:ca:94:1a:1e:81:c8:d7:77:43:2c:c1:c9:38:
         a8:b5:28:e4:0a:23:4e:e0:e1:a7:36:61:be:b4:bc:24:7d:73:
         78:10:d3:6f:c6:b1:56:17:4b:7d:a3:8a:81:ad:c7:41:59:ae:
         14:0f:7c:ff:0c:59:f4:d8:9e:45:20:4c:16:f4:ea:59:eb:59:
         a5:c5:db:bd:23:bf:23:22:e2:80:eb:09:6f:15:29:01:48:b4:
         ba:57:4d:73:f1:1c:50:67:35:07:ff:00:24:a4:53:f7:1e:c5:
         31:88:b1:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 18:01:23 2026 by rpki-client