Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/7223b940-9558-3128-873c-80e6ed49a2d4.roa
File:                     7223b940-9558-3128-873c-80e6ed49a2d4.roa (raw, json)
Hash identifier:          G8E9jVu5MPlMsCx3ddoNynNuX5cYPpW2ASWrXOa0e+Q=
Subject key identifier:   B7:8B:5C:A7:6E:8E:27:03:8B:43:AD:BA:21:92:62:0D:F3:18:B7:0A
Certificate issuer:       /CN=38847bfd-3c7b-447f-b44c-daac9ae5da93
Certificate serial:       010D0C9F4328584EA79A5AD1F009EE7866B9C758
Authority key identifier: 10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/7223b940-9558-3128-873c-80e6ed49a2d4.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     396253
IP address blocks:        163.120.89.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 01 Aug 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9a:5a:d1:f0:09:ee:78:66:b9:c7:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38847bfd-3c7b-447f-b44c-daac9ae5da93
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=43198460-3821-4a62-b3aa-fd6cfb14ea4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:52:e1:17:31:ea:72:3b:f4:b4:43:85:ae:6c:
                    6b:ec:f4:2d:c1:b7:b7:ab:ff:10:db:f2:60:ce:6c:
                    8e:b0:86:6b:72:1a:4f:57:1e:51:da:f7:49:f9:c9:
                    16:f6:d4:46:7d:15:52:44:d7:7c:7c:9a:3c:ef:36:
                    36:47:b6:9e:43:60:49:f8:c0:ad:36:6f:0b:1c:f4:
                    00:e1:c5:c5:79:e7:f5:ed:6c:be:5e:cc:cc:e3:ed:
                    ec:f1:f7:84:76:8d:db:b0:a3:94:3e:48:b0:96:9e:
                    bd:58:83:0d:e1:ff:5d:65:fc:59:f9:6a:7b:73:96:
                    66:58:e2:73:66:f9:47:0b:0a:94:bd:5b:eb:45:82:
                    12:65:ab:d1:ce:1d:5c:6f:7f:15:30:8e:b2:f7:a8:
                    00:f3:86:e4:9f:40:7e:e9:37:2d:f8:57:e9:ad:d3:
                    aa:d2:5e:b5:62:43:08:ca:6d:c9:d9:51:49:38:cd:
                    62:d1:4c:bd:13:48:8d:bd:ff:d6:17:e8:c9:ae:d4:
                    8d:dd:5a:8b:28:74:65:07:0f:23:d2:80:3f:8c:57:
                    1d:61:7e:19:28:37:01:16:b1:84:20:12:20:03:49:
                    57:8b:bd:77:ed:84:1d:bd:92:36:86:6f:20:46:69:
                    0b:f0:59:5b:09:b6:e7:b1:4c:33:80:30:c8:61:f3:
                    ed:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:8B:5C:A7:6E:8E:27:03:8B:43:AD:BA:21:92:62:0D:F3:18:B7:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/7223b940-9558-3128-873c-80e6ed49a2d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl

            X509v3 Authority Key Identifier:
                keyid:10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.120.89.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:63:1a:00:af:73:6d:d9:30:f4:bd:bd:d9:3a:e0:ac:f6:0b:
         37:cc:2d:bf:df:b1:14:2b:76:c0:0a:03:a1:fe:b7:59:bf:39:
         1a:dc:1f:d5:cf:55:b3:c7:2c:c9:20:c8:94:d5:57:d1:38:d5:
         6b:85:92:06:3b:2a:e5:a5:1d:8f:17:da:49:35:71:34:40:e6:
         07:51:68:26:c8:eb:db:51:3f:71:2a:72:df:b6:bd:0d:f8:fc:
         3f:57:0c:d9:d8:24:fa:48:8d:ec:3c:5d:ea:ef:23:e5:c6:86:
         bd:c3:46:60:a2:42:23:20:11:27:7e:77:52:2c:94:a5:4c:1c:
         46:2a:4e:da:1d:9d:59:29:65:8c:3b:e3:a3:a8:b3:9c:37:1e:
         51:31:ac:76:98:f0:67:ae:5c:2c:32:c9:e8:47:db:ab:5e:13:
         6f:5f:e9:67:e6:25:09:54:da:b9:d8:ed:e4:7b:4d:08:6b:f2:
         a2:d9:34:dc:73:da:d6:cf:90:18:f0:16:c3:b6:15:e1:6b:1c:
         90:35:eb:17:55:8e:23:59:aa:1f:2f:88:15:44:30:3e:70:71:
         ef:d9:a1:63:6a:ae:d7:4a:ee:db:96:25:ad:e7:b0:30:04:8b:
         bb:80:b0:79:82:c6:6b:56:1d:d8:6c:01:89:a8:43:1c:d7:2f:
         5e:41:59:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 30 06:58:10 2026 by rpki-client