Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/45c41135-d2b8-3745-aabf-b884fc92cf55.roa
File:                     45c41135-d2b8-3745-aabf-b884fc92cf55.roa (raw, json)
Hash identifier:          bgxoeXAndhXBEyy8fzuPRVUmxwi1dDW+FeIyZ0g6ULs=
Subject key identifier:   CF:26:E8:FD:98:93:98:09:89:33:A9:DA:21:0F:2D:45:85:9A:18:E6
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584E9A7FC916837328E27E776DC0
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/45c41135-d2b8-3745-aabf-b884fc92cf55.roa
Signing time:             Fri 24 Jul 2026 09:00:12 +0000
ROA not before:           Fri 24 Jul 2026 09:00:12 +0000
ROA not after:            Thu 22 Oct 2026 09:00:12 +0000
asID:                     7029
IP address blocks:        147.53.125.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9a:7f:c9:16:83:73:28:e2:7e:77:6d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Jul 24 09:00:12 2026 GMT
            Not After : Oct 22 09:00:12 2026 GMT
        Subject: CN=b016bf87-a338-4df1-95bd-e157c40dab6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:9d:64:9c:24:b2:5b:cc:d3:2e:e5:49:ec:d2:
                    b9:84:e3:0b:c1:57:f7:59:de:5a:b2:32:8d:39:a5:
                    9a:5f:b4:3c:a7:2f:42:f9:84:d5:cd:d5:e0:e2:cb:
                    45:e7:4f:30:73:63:5e:d6:a0:c7:89:af:5e:aa:8c:
                    9c:34:0d:3f:c0:8a:f5:ca:85:df:19:96:34:a4:5b:
                    5d:58:5a:f1:c0:d8:08:de:4e:65:f8:63:fd:96:96:
                    54:72:7d:23:78:08:5b:92:f7:a1:76:fa:98:ce:86:
                    fe:73:97:17:ab:dc:ce:5b:bf:26:72:6b:8b:ce:16:
                    94:5d:a2:a4:4a:5f:cf:f2:95:5b:66:9a:1b:9a:63:
                    ce:ac:32:f4:1a:83:55:65:12:37:c9:7f:c6:45:c4:
                    b0:9a:43:cd:86:31:59:97:f4:b4:b0:c7:1f:b6:dd:
                    c7:58:10:e3:d5:b2:1f:e5:07:0d:7f:0c:9e:15:57:
                    60:fd:02:27:49:48:5f:a6:c4:15:35:47:35:fc:b8:
                    39:0a:59:a5:47:7d:83:76:9e:d4:1f:d7:54:82:ad:
                    cc:eb:b7:6c:66:ba:04:20:f7:e5:13:00:2d:98:18:
                    39:cd:12:33:c0:a6:ff:9c:9f:4a:3b:c5:6e:85:e6:
                    e2:bb:6a:82:f3:8c:f1:3a:1c:13:30:96:ad:7c:5c:
                    ee:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:26:E8:FD:98:93:98:09:89:33:A9:DA:21:0F:2D:45:85:9A:18:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/45c41135-d2b8-3745-aabf-b884fc92cf55.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.53.125.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         e0:52:8a:38:15:0a:7f:b9:f6:0a:48:52:c2:03:52:b4:2d:f1:
         33:b4:95:02:fa:f0:9d:ea:7c:33:3e:4c:0b:3c:53:77:10:02:
         df:f4:87:7c:4a:32:5a:5c:98:cb:3b:06:68:d5:7f:12:00:01:
         a6:5d:3c:e8:15:b2:90:4d:52:95:b1:32:07:18:5b:66:43:06:
         fc:a5:d6:02:28:77:4a:93:30:2f:db:1c:1a:52:c1:6d:57:1e:
         78:9b:96:1b:b8:95:61:1a:d4:88:e8:e6:fb:aa:e5:e3:44:c4:
         8c:d3:41:87:c0:ae:eb:f1:d4:cd:f4:1f:4d:f2:ef:b4:11:7b:
         52:f1:c8:01:d0:16:3b:ce:d5:8b:eb:d5:ab:24:0a:d4:b8:a1:
         a3:52:7b:46:eb:39:eb:63:66:1d:60:2e:4f:7b:d3:7c:91:0f:
         c8:7a:0a:75:f9:08:60:37:a9:ba:24:0e:26:82:e3:a7:62:c9:
         0d:c4:b2:38:0d:30:1c:02:ec:c2:34:38:af:88:c1:31:d3:57:
         68:14:f8:70:f4:e2:d2:ea:67:fa:ea:2d:a8:a2:02:36:34:65:
         27:d4:2e:c0:fd:0a:45:61:61:6c:db:ae:90:bb:6f:84:3f:63:
         b2:07:3b:b5:d9:4f:d0:b0:23:e7:32:26:67:c8:5b:92:c9:dc:
         16:a5:62:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:53:23 2026 by rpki-client