Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/8b44a220-e7e1-333d-a0ac-469647d3ca30.roa
File:                     8b44a220-e7e1-333d-a0ac-469647d3ca30.roa (raw, json)
Hash identifier:          1aB+dCZ/M6IN5Vo6BksUHv57tYZJ4FtqgO6cHxykQiI=
Subject key identifier:   60:E6:AE:50:D1:01:3B:C3:E6:23:45:14:5C:82:16:D8:22:D2:A6:9A
Certificate issuer:       /CN=38847bfd-3c7b-447f-b44c-daac9ae5da93
Certificate serial:       010D0C9F4328584A7D15FB20D8CBC05FB624CC00
Authority key identifier: 10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/8b44a220-e7e1-333d-a0ac-469647d3ca30.roa
Signing time:             Sat 12 Jul 2025 01:00:50 +0000
ROA not before:           Sat 12 Jul 2025 01:00:50 +0000
ROA not after:            Fri 10 Oct 2025 01:00:50 +0000
asID:                     396253
IP address blocks:        163.120.88.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7d:15:fb:20:d8:cb:c0:5f:b6:24:cc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38847bfd-3c7b-447f-b44c-daac9ae5da93
        Validity
            Not Before: Jul 12 01:00:50 2025 GMT
            Not After : Oct 10 01:00:50 2025 GMT
        Subject: CN=6234217e-0fd1-4a07-aa60-4834c1bf58b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:d5:3e:92:f5:5e:09:3a:23:7d:75:45:2e:42:
                    a9:26:4a:ea:21:7d:3c:ea:69:69:a3:83:46:30:90:
                    86:72:23:90:02:8b:47:8b:33:55:fb:87:0c:fc:bc:
                    12:44:4f:c0:89:ad:db:33:ae:92:a9:c6:ec:39:f4:
                    f9:0c:48:13:67:27:2b:8f:12:b8:f0:a2:4b:f2:4c:
                    c4:f4:0b:5b:0c:5d:77:27:9c:6c:00:d0:59:f0:7b:
                    25:9e:d4:fa:ef:8e:e1:15:b2:12:75:3c:1f:dc:5f:
                    d6:10:be:c1:8c:d4:5a:a0:49:4b:44:05:2a:95:fb:
                    c1:54:71:3e:97:b4:62:dd:6a:90:cb:54:8a:2a:2f:
                    ea:35:64:0f:44:0f:a1:16:7e:b0:b9:2e:fb:4e:da:
                    a8:b8:7b:44:c4:11:bc:61:b2:af:2f:a3:84:0e:98:
                    2b:a4:62:ae:89:67:e7:bb:99:73:28:24:95:c7:49:
                    f7:0f:0e:c1:37:f9:65:77:ad:e9:b0:0c:74:5f:a1:
                    65:5a:16:5a:da:f5:ca:ef:ca:22:69:09:3a:de:b9:
                    fe:06:ea:38:bc:4c:1f:5d:a0:ea:43:c6:cb:e7:9a:
                    ed:2d:22:d5:96:d2:78:85:a4:52:0f:5c:8c:f3:a8:
                    75:9f:01:7b:ef:e0:a4:f5:fa:61:67:63:3f:fa:d2:
                    83:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:E6:AE:50:D1:01:3B:C3:E6:23:45:14:5C:82:16:D8:22:D2:A6:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/8b44a220-e7e1-333d-a0ac-469647d3ca30.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl

            X509v3 Authority Key Identifier:
                keyid:10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.120.88.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:9e:3d:ce:de:a2:bc:b9:33:dc:f5:41:f1:3e:1e:d7:02:f0:
         3d:ac:86:3f:43:3f:5e:2a:b1:62:20:e8:44:c4:aa:3d:b2:e8:
         1a:c9:4f:5d:42:e9:63:4f:9e:00:28:a8:d7:7c:26:d7:0b:55:
         5f:4a:e6:39:a3:6d:5f:4a:34:d7:1e:df:58:8e:50:c0:6b:99:
         3f:9c:ac:9e:5f:67:8e:b3:0a:dc:6a:8a:3f:50:ce:35:cb:3a:
         c5:79:21:55:57:42:42:b9:19:b5:89:c5:30:1f:60:e7:fd:39:
         68:22:c7:b0:3f:f9:19:a7:cf:3e:fc:b3:95:b9:b9:08:fd:82:
         d8:5a:6e:41:7a:f9:fe:e0:b5:5a:a6:1d:e8:11:66:e0:60:79:
         cb:4f:4e:7b:1f:02:1d:96:36:60:b0:5c:41:96:cc:33:0c:f7:
         ab:30:2b:18:00:c6:f7:dc:5a:7a:af:32:ff:8b:ae:38:9a:2a:
         7a:3f:89:0f:4a:33:cb:d4:af:69:39:65:4c:66:60:17:aa:5f:
         fa:b8:8d:69:b5:d1:13:2e:ca:2a:28:2d:c1:9d:8f:74:2a:14:
         34:54:db:dd:7a:09:da:7d:f4:ec:3c:63:04:f1:f4:c4:a5:c5:
         aa:1e:ae:13:dc:fe:bc:6b:a1:83:67:f0:e0:92:66:65:06:fb:
         f0:b3:2d:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 12:40:08 2025 by rpki-client