Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/b81bc05a-7966-3f8f-882c-78d4486dfe2d.roa
File:                     b81bc05a-7966-3f8f-882c-78d4486dfe2d.roa (raw, json)
Hash identifier:          kTPB7qw51eLzyst5/gWvsfepyVlKZmxnBwERc2HucTI=
Subject key identifier:   73:B9:B6:D2:B3:AC:D8:A1:B6:78:8C:28:B0:4D:EA:BD:72:9F:E7:2B
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584D2BDA18DDA79465B82854D3C0
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/b81bc05a-7966-3f8f-882c-78d4486dfe2d.roa
Signing time:             Sun 15 Mar 2026 01:00:32 +0000
ROA not before:           Sun 15 Mar 2026 01:00:32 +0000
ROA not after:            Sat 13 Jun 2026 01:00:32 +0000
asID:                     397630
IP address blocks:        147.53.124.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:2b:da:18:dd:a7:94:65:b8:28:54:d3:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Mar 15 01:00:32 2026 GMT
            Not After : Jun 13 01:00:32 2026 GMT
        Subject: CN=021db1d9-d796-4be2-82fa-6355e7d30dd5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:74:ca:d8:39:b0:aa:e0:4f:8c:ec:c1:4f:77:
                    b7:0d:af:1d:72:de:d5:ba:bb:aa:ee:bc:70:2f:0e:
                    2a:b7:a6:0a:12:89:bb:04:06:7e:a4:5e:b7:de:7d:
                    c3:cd:c1:16:8b:d9:18:63:43:4e:e4:2f:e3:2b:a3:
                    67:9c:d3:65:30:19:47:34:1f:d7:14:f9:36:fb:56:
                    10:86:ec:33:a6:20:1f:6f:19:ea:12:66:c0:0e:a7:
                    93:92:d4:92:37:ef:51:23:61:f5:20:94:35:37:89:
                    de:32:4e:d4:ff:ef:54:13:f9:cd:19:e8:67:66:da:
                    16:a5:63:24:f4:4f:1e:c3:08:bd:7d:32:ea:2d:55:
                    ad:33:94:89:31:3e:22:76:dc:ec:c2:a1:0a:9f:61:
                    60:51:32:78:da:3f:1b:de:f0:6c:49:27:38:30:eb:
                    7d:70:bc:fe:da:7c:d3:b8:5f:3f:4e:51:21:76:c0:
                    cb:e1:a1:53:dc:43:70:d6:cc:8c:4c:10:45:20:47:
                    d7:c7:60:9c:f0:2c:61:b3:fd:32:4f:c2:b3:87:34:
                    0c:43:32:ad:2f:40:04:10:cb:cd:6a:e1:60:30:7b:
                    88:e0:05:92:0f:a3:1d:75:ed:df:c2:70:ac:90:d2:
                    7c:24:24:c5:f7:7c:6a:f7:45:8b:41:41:2c:7d:c2:
                    bc:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:B9:B6:D2:B3:AC:D8:A1:B6:78:8C:28:B0:4D:EA:BD:72:9F:E7:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/b81bc05a-7966-3f8f-882c-78d4486dfe2d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.53.124.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:4b:01:dc:bd:ef:ce:a7:ed:53:5f:d4:17:43:83:12:f8:3d:
         4e:10:cc:a5:2f:b7:6f:e6:bf:e4:7f:f5:d7:a1:5d:dd:99:20:
         7d:53:80:d6:7b:fd:c1:5e:62:15:0b:b9:d2:7a:71:e6:51:65:
         b6:ba:d9:56:f6:ec:8c:42:50:18:e1:c2:05:d0:07:7d:fb:c4:
         a7:2c:d0:4a:5e:88:c2:a9:3e:c4:5e:1b:e9:46:65:18:f9:88:
         d6:f3:e3:83:87:3b:ff:85:9a:17:7a:f5:32:f8:e7:45:f7:ca:
         8f:93:e8:ca:b1:1a:ef:45:e3:a5:a0:e0:47:55:ac:bd:75:18:
         d3:63:d3:11:83:57:21:33:08:09:44:8b:b1:9b:cd:3b:e8:c5:
         27:85:e9:34:a0:22:0a:14:99:ef:6b:49:b4:ce:ee:45:a3:2a:
         97:39:a5:f9:9a:5d:72:a0:a2:8e:25:6b:1b:9c:79:6f:a2:91:
         ce:ca:95:ff:44:9b:e9:2d:42:ba:82:e4:d9:0d:74:5f:c0:1b:
         88:1e:95:ad:0a:3c:a4:4c:9b:3f:ca:5d:fa:40:53:7e:16:bd:
         9b:62:7d:8a:68:52:ae:73:fe:42:ca:0b:2f:81:bb:2c:3b:b7:
         96:c5:8a:b2:48:80:e3:23:49:22:cf:b6:b3:3a:55:7e:e5:25:
         ad:e7:9b:41
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0r2hjdp5RluChU08AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0
YTY3MB4XDTI2MDMxNTAxMDAzMloXDTI2MDYxMzAxMDAzMlowLzEtMCsGA1UEAxMk
MDIxZGIxZDktZDc5Ni00YmUyLTgyZmEtNjM1NWU3ZDMwZGQ1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv3TK2DmwquBPjOzBT3e3Da8dct7Vuruq7rxw
Lw4qt6YKEom7BAZ+pF633n3DzcEWi9kYY0NO5C/jK6NnnNNlMBlHNB/XFPk2+1YQ
huwzpiAfbxnqEmbADqeTktSSN+9RI2H1IJQ1N4neMk7U/+9UE/nNGehnZtoWpWMk
9E8ewwi9fTLqLVWtM5SJMT4idtzswqEKn2FgUTJ42j8b3vBsSSc4MOt9cLz+2nzT
uF8/TlEhdsDL4aFT3ENw1syMTBBFIEfXx2Cc8Cxhs/0yT8KzhzQMQzKtL0AEEMvN
auFgMHuI4AWSD6Mdde3fwnCskNJ8JCTF93xq90WLQUEsfcK8DwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHO5ttKzrNihtniMKLBN6r1yn+crMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw
M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvYjgxYmMwNWEtNzk2Ni0z
ZjhmLTg4MmMtNzhkNDQ4NmRmZTJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx
NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl
NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm
NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkzV8MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB5LAdy9786n7VNf1BdDgxL4PU4QzKUvt2/mv+R/9dehXd2ZIH1TgNZ7
/cFeYhULudJ6ceZRZba62Vb27IxCUBjhwgXQB337xKcs0EpeiMKpPsReG+lGZRj5
iNbz44OHO/+Fmhd69TL450X3yo+T6MqxGu9F46Wg4EdVrL11GNNj0xGDVyEzCAlE
i7GbzTvoxSeF6TSgIgoUme9rSbTO7kWjKpc5pfmaXXKgoo4laxuceW+ikc7Klf9E
m+ktQrqC5NkNdF/AG4gela0KPKRMmz/KXfpAU34WvZtifYpoUq5z/kLKCy+Buyw7
t5bFirJIgOMjSSLPtrM6VX7lJa3nm0E=
-----END CERTIFICATE-----
Generated at Thu Mar 26 14:33:21 2026 by rpki-client