Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/0534c9e0-3eba-3c87-81e8-d768075261b4.roa
File:                     0534c9e0-3eba-3c87-81e8-d768075261b4.roa (raw, json)
Hash identifier:          ib4pR6uQTmZ0kR0lVhGzB4GsWJ+Bqa4+DKEKz+BrU8M=
Subject key identifier:   E9:EA:4D:B5:E4:5B:22:1C:75:8F:5E:07:AF:8F:1D:55:0B:9E:A2:7C
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584F3CE2AEF5AFEAA175ACBB6A80
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/0534c9e0-3eba-3c87-81e8-d768075261b4.roa
Signing time:             Sun 20 Sep 2026 13:00:12 +0000
ROA not before:           Sun 20 Sep 2026 13:00:12 +0000
ROA not after:            Sat 19 Dec 2026 14:00:12 +0000
asID:                     22516
IP address blocks:        147.53.118.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3c:e2:ae:f5:af:ea:a1:75:ac:bb:6a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Sep 20 13:00:12 2026 GMT
            Not After : Dec 19 14:00:12 2026 GMT
        Subject: CN=1fe555e2-94be-4be6-83c6-da4e939dbf8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:2a:43:0d:1b:fa:05:7c:36:a2:6c:ea:61:94:
                    a9:fb:a2:63:90:fd:9a:6e:92:5e:5a:3e:7e:e1:ab:
                    29:cf:58:ca:14:42:38:b8:06:c6:e5:8a:69:54:39:
                    f9:72:82:7e:9d:bb:a5:35:99:6a:39:39:f1:69:0f:
                    0c:b0:60:e4:dd:6e:f5:af:ae:40:c0:64:41:82:8d:
                    0d:32:73:f6:b4:93:5a:d9:a4:ce:b6:f5:52:23:a9:
                    64:4a:43:e0:25:a1:20:1e:95:52:b7:75:93:6d:26:
                    38:8c:08:76:67:b1:fc:a8:12:93:54:a4:26:6b:88:
                    d4:96:7d:2c:86:02:9f:6a:b8:cb:f3:30:88:67:00:
                    b1:5a:59:b8:d7:f8:33:d4:63:7d:16:39:97:9d:66:
                    a1:32:50:08:2b:52:88:64:50:bf:4c:8f:95:30:24:
                    86:bb:04:63:77:b1:62:a9:46:a9:d0:54:79:21:23:
                    b8:63:8e:ca:95:cc:88:ad:e5:84:c8:ff:7b:f3:54:
                    04:2c:92:85:0e:02:bd:80:2f:72:a4:e4:a8:19:1d:
                    f0:e2:69:70:fc:cb:91:c1:c2:71:fc:c3:11:73:cc:
                    50:51:59:9b:40:6c:5a:1a:5d:6a:20:d6:b9:32:59:
                    c3:0e:1e:6e:56:18:e6:29:66:49:e0:b5:0f:63:aa:
                    e9:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:EA:4D:B5:E4:5B:22:1C:75:8F:5E:07:AF:8F:1D:55:0B:9E:A2:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/0534c9e0-3eba-3c87-81e8-d768075261b4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.53.118.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         df:72:88:07:60:a9:12:c5:7d:ef:b4:d0:39:c3:4e:15:92:77:
         06:a6:17:2f:a8:55:cb:1f:b3:6d:77:2a:c2:5f:60:b3:94:93:
         4a:7f:93:ed:3c:6d:98:e6:fb:fe:3a:d2:2b:f4:62:35:27:d0:
         8b:8d:4a:b0:11:ef:03:70:63:87:88:2d:50:e1:f1:95:8e:13:
         02:7d:e4:1f:35:58:d7:60:ef:61:87:51:94:51:14:25:c6:27:
         da:54:9c:ca:a4:e5:9c:e1:b5:ba:78:4a:3d:4c:a6:2d:4e:71:
         da:b6:03:67:5e:15:a6:fb:fa:f0:17:9f:71:d7:f8:64:00:0e:
         ff:1b:a8:55:05:0c:52:4d:74:41:43:a8:90:66:59:2c:7c:d9:
         fe:48:22:ec:8a:88:fc:d8:1c:d2:c7:51:72:71:e8:c9:60:56:
         0c:2d:63:fc:ae:bb:a1:06:73:59:71:5a:cc:e1:95:60:f6:8a:
         7b:50:6a:32:bc:1b:ae:a8:ac:d7:79:c8:22:c4:cc:72:46:ce:
         22:6f:7a:29:87:d0:40:09:ad:37:69:1f:d3:f3:19:19:6a:1c:
         c5:2f:39:e0:14:50:f1:e1:c2:a2:dc:07:30:57:31:e4:a9:f3:
         6f:39:4e:90:10:68:5d:24:4e:af:35:67:dc:04:85:e3:80:b6:
         ea:84:61:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 18:21:34 2026 by rpki-client