Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/3d747232-9807-38f7-895a-e969865857a8.roa
File:                     3d747232-9807-38f7-895a-e969865857a8.roa (raw, json)
Hash identifier:          GGpSLBWv4PYidQpv/BzzNGAkX/SWZmHynG3XBYrn3jQ=
Subject key identifier:   9B:15:FA:79:30:21:01:B2:2E:F8:45:6C:76:A8:32:30:24:7F:3B:3C
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584AD7D11FB01153970A20BE1320
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/3d747232-9807-38f7-895a-e969865857a8.roa
Signing time:             Wed 13 Aug 2025 13:00:41 +0000
ROA not before:           Wed 13 Aug 2025 13:00:41 +0000
ROA not after:            Tue 11 Nov 2025 14:00:41 +0000
asID:                     7018
IP address blocks:        147.53.122.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d7:d1:1f:b0:11:53:97:0a:20:be:13:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Aug 13 13:00:41 2025 GMT
            Not After : Nov 11 14:00:41 2025 GMT
        Subject: CN=89060a0a-b41a-4f94-9b21-2908972122eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:a1:2c:e1:67:16:7c:c1:72:f9:55:f1:4a:35:
                    67:60:37:02:cb:65:e3:b6:06:c2:54:8b:52:99:c5:
                    fb:9e:8b:ec:21:79:a2:98:e7:1b:67:1e:1c:f1:c6:
                    7e:49:12:a0:2d:27:03:39:f8:24:b5:9f:1c:c7:f3:
                    9f:ee:85:9c:74:fb:73:84:42:f7:60:a2:67:80:5a:
                    91:2f:ab:59:2e:b1:3f:5d:8e:0b:3f:32:a8:1c:e7:
                    6e:65:c7:c6:da:a6:06:9b:61:09:1e:ae:d0:46:2f:
                    86:a7:4d:11:88:5f:5a:97:a3:96:3e:c9:dc:3a:08:
                    e2:81:ed:3d:99:2c:50:b5:e2:b1:67:ee:c5:1b:e7:
                    e8:c4:19:db:c5:0e:27:27:f9:92:f7:26:14:fc:14:
                    bb:a3:28:26:4b:42:3c:b7:02:4c:90:ef:14:48:25:
                    cc:e5:61:30:cc:f4:7e:8f:76:b2:e6:e7:83:92:17:
                    fd:55:49:5f:b6:09:1c:7a:ab:0c:d4:d1:b3:01:d8:
                    03:26:dd:d7:fc:47:81:39:ac:67:d4:72:ef:ea:e4:
                    4b:f9:91:9d:39:bd:2b:db:c8:6d:d2:af:5a:cc:f1:
                    da:d4:06:81:1b:9e:2c:95:33:e9:dd:18:d4:02:05:
                    52:c5:0a:02:25:1e:79:db:6d:63:76:e6:96:5f:92:
                    80:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:15:FA:79:30:21:01:B2:2E:F8:45:6C:76:A8:32:30:24:7F:3B:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/3d747232-9807-38f7-895a-e969865857a8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.53.122.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         e2:63:6c:f1:d5:2f:88:28:31:29:0a:b4:c0:73:6f:e8:ce:08:
         20:51:99:ff:c2:cd:75:fd:39:da:b3:8e:e9:f1:64:5f:77:ea:
         ed:5d:a2:5e:30:36:3f:55:d4:ad:47:56:4a:a1:07:fa:bb:e0:
         d4:0d:ce:e2:3c:c5:21:a1:f9:a2:a3:2d:57:b5:a4:cc:d4:63:
         ff:a4:67:54:be:cd:34:7c:6d:2f:98:e3:b5:e3:a8:d2:12:6b:
         1c:0a:b2:ec:cf:f1:29:16:89:1f:7e:8c:2b:b1:d4:93:c8:1f:
         1b:31:a6:f2:19:eb:84:20:3c:71:62:70:17:53:df:57:e7:0a:
         dc:b5:9b:18:01:22:6a:61:01:95:e3:0d:18:73:13:5a:bb:14:
         7a:19:cb:87:2d:7e:80:e1:2c:29:32:37:41:a8:04:9e:1b:97:
         56:a2:11:4b:c6:42:55:38:50:2b:97:77:d2:a8:06:05:d9:87:
         93:41:4e:74:f4:81:62:59:b3:4a:41:ba:68:70:29:87:a1:10:
         a9:fc:63:8b:59:13:38:ff:6f:07:02:0e:b3:98:c1:01:24:27:
         34:e4:db:1e:c4:b7:79:49:21:1a:a6:6c:d2:0d:02:f6:dd:0a:
         fa:b6:cf:a4:6d:f9:b9:85:d9:37:c0:ec:d0:23:7b:64:2e:a5:
         32:69:10:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:12:58 2025 by rpki-client