Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/6eec5718-2126-3b5f-bb72-9b0aedd3d803.roa
File:                     6eec5718-2126-3b5f-bb72-9b0aedd3d803.roa (raw, json)
Hash identifier:          roG3krU7gVQDsJADtLf1DzJ4u1XOTyWZ+bFZkALXoYM=
Subject key identifier:   07:AA:7B:3C:A3:73:FD:75:88:36:00:75:B0:B3:DD:2F:C7:C8:C3:66
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584B28C6F3A36E2149EC0508E4A0
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/6eec5718-2126-3b5f-bb72-9b0aedd3d803.roa
Signing time:             Thu 11 Sep 2025 13:00:41 +0000
ROA not before:           Thu 11 Sep 2025 13:00:41 +0000
ROA not after:            Wed 10 Dec 2025 14:00:41 +0000
asID:                     20001
IP address blocks:        147.53.113.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:28:c6:f3:a3:6e:21:49:ec:05:08:e4:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Sep 11 13:00:41 2025 GMT
            Not After : Dec 10 14:00:41 2025 GMT
        Subject: CN=2f4c7aa2-7720-4aa0-818e-9d8c6a808004
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:13:ec:ed:0a:66:64:65:e0:c7:d2:81:a6:0c:
                    8b:4e:10:ea:d1:77:72:a8:11:3f:09:d5:45:74:5d:
                    5e:ee:54:99:c6:f5:00:15:68:17:d9:62:e2:1a:41:
                    a9:3b:5a:c9:c4:4d:0d:e1:8e:94:f2:e3:32:18:d7:
                    cc:a4:25:dd:e3:8b:5b:f2:36:65:7d:44:fe:a8:05:
                    69:ae:eb:29:e9:83:99:69:8d:ae:6c:2c:49:31:c2:
                    ee:61:86:30:5c:7e:06:08:eb:06:89:31:50:ca:08:
                    6d:f3:b2:62:14:c0:4d:8a:fb:fc:b5:16:77:37:f5:
                    69:98:04:fe:e6:52:ef:35:6b:70:52:32:36:8d:19:
                    b5:d4:74:b0:5e:2f:1a:6f:da:69:17:d7:e0:89:ce:
                    e7:1f:48:69:a1:76:46:f4:0b:47:1a:81:ee:e5:d1:
                    c7:06:79:2d:99:63:01:51:a5:a8:55:29:bd:12:94:
                    72:54:25:cd:62:d7:77:fe:fa:54:da:ae:fd:bb:95:
                    a9:d9:c7:9b:b2:68:62:65:3f:81:54:0e:c5:1b:09:
                    e3:75:6d:ce:f8:9a:27:bf:55:89:73:90:bc:52:d1:
                    bf:bb:8b:dc:ab:ea:32:ea:78:65:d8:70:e3:11:3f:
                    40:b6:1c:ca:19:9a:26:c4:16:d0:73:c5:25:55:fb:
                    cb:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:AA:7B:3C:A3:73:FD:75:88:36:00:75:B0:B3:DD:2F:C7:C8:C3:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/6eec5718-2126-3b5f-bb72-9b0aedd3d803.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.53.113.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c9:cd:6b:54:63:48:52:8e:56:78:71:16:01:7f:e3:87:6e:78:
         9a:7a:b9:84:b2:ad:c7:6a:40:48:e3:d6:3b:94:76:be:32:36:
         cc:55:97:59:94:07:43:68:ea:e4:7e:5e:8c:78:5d:38:e7:ca:
         1d:dd:4b:c5:24:64:55:36:6d:59:ba:22:54:4c:55:fe:65:84:
         d1:df:26:fd:d3:15:75:c0:b8:a4:1b:b4:54:2b:ea:85:d4:f9:
         28:02:c9:28:be:53:da:13:81:46:15:c8:3d:32:a8:f5:ab:7c:
         f4:cb:79:a4:09:a3:12:ed:e4:3d:99:ca:3b:15:84:c0:5f:04:
         a0:a2:56:3d:46:07:87:fc:f1:2e:d1:54:92:2d:9f:5b:e5:c4:
         e5:5d:60:0e:aa:45:07:97:a0:33:f5:ad:2c:1c:d2:27:e0:ce:
         bc:90:29:ee:10:c0:4f:34:e8:04:fb:95:2e:52:e4:73:e2:fc:
         5c:eb:2d:00:0b:a0:d4:31:73:b1:2d:18:d5:87:da:f5:64:b1:
         8e:ad:29:28:8c:ea:2d:62:19:98:23:6d:24:c5:58:ca:21:47:
         0f:47:3f:da:31:0b:50:45:f3:f7:07:85:97:36:51:be:34:d7:
         ca:ed:5f:cf:ac:50:1b:02:e8:81:33:e5:39:06:38:fa:bb:31:
         0d:a9:0c:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:18:33 2025 by rpki-client