Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/300c4388-66e6-381d-9ca3-33f3cd9a9436.roa
File:                     300c4388-66e6-381d-9ca3-33f3cd9a9436.roa (raw, json)
Hash identifier:          OTU/Rqsk80QHfvL3KOsNDGtzwQgx0/lw8N/AkDLTcHc=
Subject key identifier:   DB:A0:A3:89:F6:09:F9:1D:A4:53:2D:FC:E3:3C:17:DA:9D:3E:24:BB
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584E9A7FAA7C124BEFB2FD336780
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/300c4388-66e6-381d-9ca3-33f3cd9a9436.roa
Signing time:             Fri 24 Jul 2026 09:00:12 +0000
ROA not before:           Fri 24 Jul 2026 09:00:12 +0000
ROA not after:            Thu 22 Oct 2026 09:00:12 +0000
asID:                     22516
IP address blocks:        147.53.112.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9a:7f:aa:7c:12:4b:ef:b2:fd:33:67:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Jul 24 09:00:12 2026 GMT
            Not After : Oct 22 09:00:12 2026 GMT
        Subject: CN=a5edb68a-6c66-4e98-ac08-9317df578a8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:0d:71:39:51:59:02:5a:86:a5:35:f2:bc:d5:
                    ae:9a:c9:94:3b:c6:cc:21:7f:d6:7e:9b:6c:b1:79:
                    38:b0:03:2c:a2:0e:d7:5e:c1:b4:de:93:d9:a6:9d:
                    54:69:6f:48:f5:19:00:6a:46:19:47:b3:2c:72:38:
                    47:a1:b3:79:d2:2a:ae:19:3d:b7:7e:89:50:45:32:
                    45:ab:a3:8a:3f:21:86:27:f4:93:09:3e:ee:51:7c:
                    37:a7:62:e0:49:5c:de:d6:45:10:85:ec:d3:f4:ca:
                    38:b1:ba:66:23:64:f6:38:94:0a:b4:df:a6:98:46:
                    dc:c9:8b:a2:b5:84:36:40:8f:59:c6:42:60:ab:c7:
                    16:38:24:d1:ac:b1:ef:5f:89:45:2c:af:2a:7a:97:
                    a3:65:a3:d2:b8:66:cc:2b:28:1f:10:c0:8a:0f:d6:
                    c1:84:e8:06:57:aa:fe:bb:62:10:c5:85:8d:33:fe:
                    16:d3:f3:92:72:16:fb:d8:f6:60:f7:a7:9a:48:83:
                    5f:04:8a:88:c1:d0:53:f0:7b:70:b9:81:4d:18:cd:
                    2f:2a:32:7c:79:d4:41:b0:ac:ba:1c:e8:bc:2b:6c:
                    78:31:6d:c8:24:d6:1e:ff:bc:e4:17:a2:90:37:b9:
                    b5:2c:20:5f:41:80:53:08:c0:07:27:1b:b8:f7:c9:
                    bc:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:A0:A3:89:F6:09:F9:1D:A4:53:2D:FC:E3:3C:17:DA:9D:3E:24:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/300c4388-66e6-381d-9ca3-33f3cd9a9436.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.53.112.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:33:a9:1c:10:19:86:a7:6c:c0:a1:2d:02:75:91:98:e5:97:
         47:df:bf:8a:7e:b4:01:f9:92:75:26:cd:3c:95:f2:3f:bb:27:
         81:fc:c5:f2:b6:7a:85:e1:de:2d:91:d0:8d:2d:e1:10:b8:45:
         c2:9f:4e:78:47:11:6f:9d:59:b9:77:06:96:91:f8:a5:00:06:
         9b:8f:be:2a:ae:0e:ea:13:b4:1a:f9:06:67:b4:6a:d1:0b:4f:
         75:82:db:93:88:a6:90:28:b6:e7:35:0f:43:c7:c2:f5:19:65:
         7a:41:c0:30:de:b5:d9:ab:ca:7c:a9:90:b3:72:d9:9c:b1:17:
         20:33:b9:ad:01:ef:24:26:72:fa:57:87:dd:c4:5c:5a:26:18:
         23:c0:87:f4:59:b6:d5:d3:57:d2:8c:db:ce:31:75:54:f9:9d:
         ce:d1:88:36:ee:3d:ac:ab:d4:6c:c4:e5:c5:ee:13:3e:04:fa:
         60:bf:25:2d:3e:fd:d4:a8:4f:39:3f:1c:df:44:bf:e1:ac:e2:
         57:2e:13:7f:16:d7:9c:60:51:c8:5c:b1:dd:c9:71:02:87:58:
         15:a0:fe:75:1e:02:d4:a7:79:b6:fa:6e:05:af:5e:31:70:a3:
         c1:52:c3:2b:02:f8:8f:42:6c:e1:c0:ff:ed:1f:08:85:a0:d7:
         fc:0e:f2:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:12:55 2026 by rpki-client