Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/45077336-fd0b-3254-9755-5c51ac68b5c0.roa
File:                     45077336-fd0b-3254-9755-5c51ac68b5c0.roa (raw, json)
Hash identifier:          zKHe+PCWzq/AHLBT7Z5BSDBjf8vdAJqZZezp/WNyzmw=
Subject key identifier:   B5:3E:E0:0E:2C:D5:BA:3F:AE:85:A4:E2:75:2E:0D:B2:F5:53:D7:45
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584B8BE2283BA3B09D2A57CA7100
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/45077336-fd0b-3254-9755-5c51ac68b5c0.roa
Signing time:             Fri 17 Oct 2025 01:00:30 +0000
ROA not before:           Fri 17 Oct 2025 01:00:30 +0000
ROA not after:            Thu 15 Jan 2026 02:00:30 +0000
asID:                     7018
IP address blocks:        147.53.121.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:8b:e2:28:3b:a3:b0:9d:2a:57:ca:71:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Oct 17 01:00:30 2025 GMT
            Not After : Jan 15 02:00:30 2026 GMT
        Subject: CN=952c8a0f-38a0-4af1-b417-9cbecb7669a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:0a:36:24:a8:c4:f1:ce:43:71:63:84:dd:cc:
                    71:e1:f6:e4:b9:b2:2c:ce:f4:f7:56:8f:88:39:2d:
                    15:dc:5a:f3:1c:4f:10:fc:a4:ff:f4:00:70:ab:c7:
                    50:13:8b:6f:99:94:80:8c:af:98:55:fc:f5:ae:68:
                    d5:7a:ee:74:49:df:54:db:52:3c:40:12:62:d1:db:
                    13:8e:1e:a8:38:ac:42:de:19:0f:04:39:92:94:b8:
                    c1:35:7a:fc:eb:51:9d:87:a6:0d:50:31:a9:a1:0f:
                    47:fc:56:ca:c2:a8:2e:1e:e8:7b:e8:1a:bc:ca:3a:
                    07:24:18:3d:d4:53:d6:11:a5:2b:01:a5:2e:f2:7e:
                    9e:37:9e:6c:6e:5b:45:76:a3:27:96:c7:1b:82:98:
                    5b:1f:3b:47:60:99:fb:3c:15:6f:a3:56:b3:e1:17:
                    94:81:28:39:25:5b:50:87:52:c6:09:7d:fe:b9:f3:
                    52:3a:0a:78:d1:5c:96:2c:1b:07:36:4b:5e:fa:0d:
                    d0:83:a7:58:29:a8:2d:64:cb:ed:18:5a:05:19:b6:
                    5e:60:08:68:d9:44:09:1d:61:34:1c:88:ff:1f:14:
                    5f:a3:1f:01:95:8b:32:98:b7:d7:e0:c7:41:b6:14:
                    80:d5:21:2b:9a:a5:c2:fa:cb:83:bc:1a:1b:43:cc:
                    aa:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:3E:E0:0E:2C:D5:BA:3F:AE:85:A4:E2:75:2E:0D:B2:F5:53:D7:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/45077336-fd0b-3254-9755-5c51ac68b5c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.53.121.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d7:e5:36:48:a0:70:ef:55:45:f8:a3:e6:2d:31:38:62:83:c2:
         e0:65:da:88:2d:ec:17:e1:31:55:d1:e2:a7:71:4b:86:05:9a:
         f1:51:b1:28:21:ca:e9:1d:92:69:74:4b:3d:a0:5b:8f:0c:ca:
         5a:e6:be:41:0f:f3:49:5c:7f:35:7c:57:06:ad:eb:8e:61:02:
         d7:19:e2:b3:87:e9:ca:51:2a:28:4c:a8:14:5d:81:99:75:97:
         ae:39:66:db:74:4c:77:5b:19:69:c4:37:6e:07:c8:1d:15:dd:
         c2:75:e5:5a:12:d3:6d:38:39:27:9c:6b:5d:2d:2e:40:26:b6:
         8b:d7:f8:f0:5a:d6:bf:19:d1:43:0c:d0:b6:24:59:4f:28:d2:
         85:c8:0f:d7:4f:f4:f8:9c:a7:67:e1:f3:8e:28:cf:60:59:af:
         db:fe:7e:ad:06:7e:5c:12:6d:42:c7:6f:90:ec:64:e6:4b:5e:
         e8:39:6a:c5:77:43:81:c7:f2:08:ee:f0:42:fb:e5:29:e7:fa:
         33:9f:d2:db:f0:a4:da:27:99:65:5f:19:29:b2:a4:30:9a:ff:
         19:08:19:00:aa:d2:e8:46:59:06:3a:28:4e:23:33:5e:49:b6:
         22:ab:51:ad:76:84:a5:41:49:ea:42:cb:ba:92:ea:39:99:53:
         ed:29:43:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:16:18 2025 by rpki-client