Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/6a756127-bcc3-3650-a62d-4f13b9c0402d.roa
File:                     6a756127-bcc3-3650-a62d-4f13b9c0402d.roa (raw, json)
Hash identifier:          IHv8fRUI5HiX5uEwcahho3dEUUEqaYlhEwdR58k5IPw=
Subject key identifier:   7E:D0:44:73:23:1E:39:A1:94:DA:42:B0:BA:5E:3D:BB:9E:8E:D1:69
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584B2A2C56A4FECA90947D9F8180
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/6a756127-bcc3-3650-a62d-4f13b9c0402d.roa
Signing time:             Fri 12 Sep 2025 01:00:32 +0000
ROA not before:           Fri 12 Sep 2025 01:00:32 +0000
ROA not after:            Thu 11 Dec 2025 02:00:32 +0000
asID:                     20001
IP address blocks:        147.53.114.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2a:2c:56:a4:fe:ca:90:94:7d:9f:81:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Sep 12 01:00:32 2025 GMT
            Not After : Dec 11 02:00:32 2025 GMT
        Subject: CN=e2addfd4-587b-4693-a303-595789b4ea90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:54:06:5e:27:1c:db:92:87:f8:d6:8b:d2:08:
                    15:0a:81:51:d5:49:81:11:40:7d:9c:7e:e3:a6:36:
                    8b:5a:59:20:59:cd:45:34:5d:83:28:90:6c:15:3c:
                    2f:2f:59:91:1f:4a:f0:19:76:e6:9a:94:f4:e2:e8:
                    bf:10:da:14:b6:fa:9f:a8:f3:da:a9:4c:f8:b1:42:
                    09:b6:11:c1:37:4e:80:f0:e4:e7:fe:6a:98:e2:56:
                    f6:77:21:23:47:fe:88:7d:03:df:84:fc:fd:37:fa:
                    f6:48:75:88:12:29:98:2c:7a:66:8a:56:0a:a7:6a:
                    d4:be:d8:66:f7:ee:48:c7:fb:da:f1:fa:1a:34:93:
                    6c:79:2a:ba:9a:49:62:eb:2f:c3:45:9f:00:3d:59:
                    97:95:5e:94:79:1d:36:40:89:0e:bf:7d:84:93:65:
                    23:e8:37:ec:53:8f:ca:6d:59:30:5b:a4:43:ed:86:
                    9f:c8:a5:dd:ad:af:46:8a:a6:70:ce:2f:c1:70:8e:
                    3a:62:9e:b1:28:77:06:b0:ed:57:c1:04:b5:30:ba:
                    b3:cc:96:cd:ea:53:9b:af:bd:92:76:80:69:fa:c8:
                    4b:a5:14:30:fc:71:9c:c3:b0:78:be:c9:11:23:65:
                    80:ba:7c:34:a9:df:9f:25:b0:3b:44:f9:70:f7:04:
                    17:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:D0:44:73:23:1E:39:A1:94:DA:42:B0:BA:5E:3D:BB:9E:8E:D1:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/6a756127-bcc3-3650-a62d-4f13b9c0402d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.53.114.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:a2:4b:e1:c8:b7:98:2c:e8:31:24:84:1e:a8:03:51:fb:2e:
         a8:3f:a1:51:9f:bb:08:03:ae:38:60:5c:8d:fd:17:33:3f:d9:
         2a:eb:f3:88:96:bf:93:67:ea:21:93:85:ad:58:cd:08:28:36:
         e3:19:d8:0a:c9:40:b2:b8:d2:7c:56:cc:d9:18:2e:9e:29:ff:
         0c:ea:69:4c:1a:8d:15:18:e0:1d:53:e2:16:44:b8:9a:f7:2b:
         2d:72:bc:a2:bd:31:2f:f3:1e:68:0b:35:47:17:9b:b9:5a:d5:
         6e:14:1c:a8:36:16:7e:f1:88:96:19:62:4e:32:ab:a2:14:f7:
         12:6d:bb:6a:ce:90:de:fe:50:38:f3:09:8b:89:7c:72:5c:e0:
         09:6f:a0:c6:e6:27:63:ea:93:92:67:53:3b:e9:1a:1c:b7:61:
         62:a2:d3:42:f5:37:ba:0d:f1:a7:89:1e:4b:c7:a1:00:cc:68:
         ef:0f:d9:61:f7:7d:e5:0a:20:24:fb:7b:34:21:09:ad:a6:8c:
         31:34:24:dc:83:29:c3:99:fe:63:72:5a:ce:74:71:d3:59:b0:
         62:fa:7d:f8:b2:eb:48:d2:be:8e:42:c8:4e:4d:12:0b:60:bc:
         79:9c:af:8a:d6:bd:9a:dc:b5:24:61:82:de:58:0f:d3:9c:35:
         83:a9:8d:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:42:55 2025 by rpki-client