Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/218607a6-5ed3-3f9e-929e-c573645ad4e0.roa
File:                     218607a6-5ed3-3f9e-929e-c573645ad4e0.roa (raw, json)
Hash identifier:          1LwIkzQORecwFK27ZvOkrDIPqPM2MWsPUQ0jpuR4rFE=
Subject key identifier:   B4:11:8E:10:7C:7B:5F:EA:BA:21:43:00:0D:D0:35:E2:D6:9D:BF:62
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584E9A7FE497E1946CC7A7829700
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/218607a6-5ed3-3f9e-929e-c573645ad4e0.roa
Signing time:             Fri 24 Jul 2026 09:00:12 +0000
ROA not before:           Fri 24 Jul 2026 09:00:12 +0000
ROA not after:            Thu 22 Oct 2026 09:00:12 +0000
asID:                     22516
IP address blocks:        147.53.122.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9a:7f:e4:97:e1:94:6c:c7:a7:82:97:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Jul 24 09:00:12 2026 GMT
            Not After : Oct 22 09:00:12 2026 GMT
        Subject: CN=a209b5db-720a-47d3-a8bc-bd291dc1f24d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:1b:d0:96:b1:a1:80:ef:91:46:21:32:89:74:
                    8a:1a:b4:f9:46:b6:48:30:6c:de:3f:e6:24:a5:13:
                    e0:df:f6:42:cf:8b:0a:24:fd:6d:e6:82:ed:bd:a5:
                    a5:4d:f4:ab:01:49:fd:bd:71:47:45:bb:85:fa:40:
                    a3:ea:bc:29:ee:5c:6b:f0:14:bf:b9:f9:ea:b3:2c:
                    a4:e8:7c:0a:70:68:19:9f:3c:d3:6a:17:eb:9a:88:
                    29:9a:d1:2f:96:dc:3a:6a:ae:12:e4:ae:e2:0d:29:
                    9e:0b:80:2d:d7:d8:9c:63:fc:67:10:5b:b3:f6:57:
                    16:8d:c8:70:2c:a1:84:17:26:73:b2:0a:5e:64:a3:
                    27:18:bd:f0:7e:51:cf:4b:32:ec:c1:33:6e:a3:0d:
                    e3:54:69:e0:45:a6:34:13:da:9b:42:05:4b:c9:a1:
                    72:d6:e2:08:b3:5e:74:22:2f:cd:f3:1e:f3:e4:9d:
                    5f:84:ed:8c:b3:06:90:b8:40:3e:03:b1:ad:8b:d3:
                    d3:e7:d5:e3:a3:df:1c:de:c2:32:3b:05:02:1f:38:
                    35:8f:6d:eb:e3:38:9e:4a:ac:76:f3:e6:a2:bf:74:
                    8f:4d:b7:93:27:09:3e:91:c5:07:ab:a4:f6:3a:23:
                    f4:3e:3b:43:73:db:62:5c:ef:5e:94:34:a2:40:8b:
                    6c:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:11:8E:10:7C:7B:5F:EA:BA:21:43:00:0D:D0:35:E2:D6:9D:BF:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/218607a6-5ed3-3f9e-929e-c573645ad4e0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.53.122.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:fe:3f:67:87:ff:78:ac:74:60:0b:05:93:97:92:a3:61:63:
         99:e2:e7:b6:3a:0c:88:23:a6:19:40:2d:02:39:04:45:fd:42:
         0d:3b:85:3e:35:ce:22:73:21:0c:28:67:dd:a4:63:96:d6:da:
         ed:ca:eb:3e:d3:d9:88:60:0c:7a:4e:eb:be:6e:8a:d5:f5:a4:
         e5:a7:8b:43:51:13:93:02:5a:97:b1:c4:b8:10:9b:1c:29:57:
         fb:a6:bd:01:c2:d0:bb:bc:65:55:77:e6:b5:f5:32:1e:da:3b:
         9a:b4:bb:fc:c6:f7:9b:a8:b0:48:c2:f0:50:de:f9:7f:c6:b7:
         85:ca:85:96:6f:89:78:57:70:75:fc:fd:16:c8:1c:27:db:3d:
         98:3d:0a:db:d3:07:42:7b:40:47:5e:da:15:55:f5:e1:fb:9a:
         92:db:70:46:0e:5e:03:44:f7:02:b1:ec:5c:31:23:6b:5d:df:
         cc:c1:81:87:34:5e:b1:0e:dc:70:f6:5f:df:ac:33:e5:27:6a:
         a1:bc:e8:ac:35:71:f8:2c:7c:71:1c:69:42:18:80:4a:90:b1:
         47:ca:1a:56:9d:bb:58:31:6e:79:f6:b3:2b:30:ab:8a:1e:96:
         c5:36:85:01:48:87:e5:e1:90:06:bc:1b:9f:c3:c7:3a:1d:8a:
         05:eb:89:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:35:01 2026 by rpki-client