Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/782a66b7-4a36-3b90-8864-ac1e01a10c73.roa
File:                     782a66b7-4a36-3b90-8864-ac1e01a10c73.roa (raw, json)
Hash identifier:          gvdJ/weXn1411e0Ai9EIQhoWfpjeGwD8Pd4/QWWIgLM=
Subject key identifier:   FC:D4:CC:03:45:C3:37:03:EC:FC:4D:B5:9F:A5:2C:0A:0B:FB:C0:50
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584E9A7FEB462A7569979BD203A8
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/782a66b7-4a36-3b90-8864-ac1e01a10c73.roa
Signing time:             Fri 24 Jul 2026 09:00:12 +0000
ROA not before:           Fri 24 Jul 2026 09:00:12 +0000
ROA not after:            Thu 22 Oct 2026 09:00:12 +0000
asID:                     22516
IP address blocks:        142.147.109.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9a:7f:eb:46:2a:75:69:97:9b:d2:03:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Jul 24 09:00:12 2026 GMT
            Not After : Oct 22 09:00:12 2026 GMT
        Subject: CN=ffd7e6b1-e452-48b8-a8ef-de6ceda3ac27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:f1:34:fa:09:74:be:ed:77:f5:b8:8c:eb:35:
                    9b:f9:56:1f:9a:7a:a8:ae:06:30:99:16:41:b4:83:
                    38:70:dd:a8:64:17:69:66:84:5e:08:82:a7:26:18:
                    93:02:4e:1d:a8:31:c8:92:83:f0:4d:98:2e:d2:2b:
                    e1:cb:a7:c3:42:de:ee:aa:7c:c7:99:28:07:88:0f:
                    be:03:7c:22:17:45:46:d4:42:79:bc:73:40:ca:e7:
                    8e:fc:eb:b6:5d:80:68:76:ca:92:b5:51:4a:ac:e0:
                    4f:69:67:ba:87:da:45:a8:5b:2a:0a:f2:bd:52:5f:
                    bf:27:a9:b8:98:67:02:d8:cc:5c:50:56:5d:c4:b4:
                    a8:c5:b5:71:52:ff:1c:ca:61:98:f5:28:eb:4d:75:
                    cb:99:ae:1e:42:2a:ad:a7:1e:89:7a:a2:cb:0f:6e:
                    9e:59:e7:c9:7c:a9:d3:3d:05:3a:b9:60:0c:85:03:
                    9c:f3:01:8d:d1:d1:0c:0d:68:37:eb:17:a8:7b:ce:
                    f4:ad:eb:d9:39:14:8e:58:28:fd:77:44:4f:60:2b:
                    62:c2:72:cf:a6:52:e1:43:99:a2:ee:7c:54:b7:2f:
                    6f:fc:a9:65:78:b3:4c:a8:c3:5c:19:e8:29:dd:c1:
                    14:8f:71:da:f4:02:3d:74:9f:cd:7a:0d:f4:38:e1:
                    99:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:D4:CC:03:45:C3:37:03:EC:FC:4D:B5:9F:A5:2C:0A:0B:FB:C0:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/782a66b7-4a36-3b90-8864-ac1e01a10c73.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.147.109.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b2:cc:1f:4a:e4:88:bc:30:49:62:3b:85:1b:39:c8:33:94:af:
         a6:8b:72:83:00:16:02:0d:fa:11:1b:ab:e9:d0:98:46:1a:b7:
         be:ed:94:59:62:7f:73:ed:bf:34:2f:5d:3d:0e:aa:ac:26:ac:
         46:db:b3:1d:57:b9:8a:66:56:d8:5a:d0:35:dc:1d:2d:1b:b9:
         d2:f0:de:b2:06:e0:90:70:61:35:bc:ed:bb:b0:bb:4a:ba:29:
         39:57:d3:0f:b7:01:43:74:54:ee:68:eb:40:a0:94:57:98:81:
         f4:14:15:2e:80:cd:f9:e7:92:4f:b8:79:13:b9:2c:5b:7b:76:
         6b:2b:9d:33:18:01:96:de:0c:0f:2e:51:23:ae:93:b6:4d:86:
         81:2c:1c:cb:b3:74:fd:9b:99:17:3c:5a:0a:f3:dc:d0:ac:c8:
         4c:8e:8b:90:a3:ab:e5:90:6d:d3:fb:06:11:5b:16:a5:92:25:
         7c:2a:02:fd:ce:1a:fd:54:38:76:9e:38:f7:c5:7f:44:39:18:
         e0:9c:f6:35:9f:fb:3b:15:9d:96:c1:27:5c:ad:f6:87:e0:55:
         87:50:aa:dc:7d:29:1f:6e:2e:0f:ea:3e:ba:98:d4:aa:4c:71:
         fd:fe:e8:8d:ab:1d:0b:e9:cb:74:41:c0:c6:66:88:14:43:58:
         ae:f6:0d:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:13:58 2026 by rpki-client