Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/b81bc05a-7966-3f8f-882c-78d4486dfe2d.roa
File:                     b81bc05a-7966-3f8f-882c-78d4486dfe2d.roa (raw, json)
Hash identifier:          2/3qWf8Wan8MBoOpMweNmK3SGZVInPbPHvmN53WZ6ZA=
Subject key identifier:   6E:A9:5A:35:F1:49:62:56:EC:55:B0:EE:63:7E:78:E0:FE:6C:76:B0
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584B6BC75520C73B7D824ACFF4B6
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/b81bc05a-7966-3f8f-882c-78d4486dfe2d.roa
Signing time:             Sun 05 Oct 2025 13:00:40 +0000
ROA not before:           Sun 05 Oct 2025 13:00:40 +0000
ROA not after:            Sat 03 Jan 2026 14:00:40 +0000
asID:                     397630
IP address blocks:        147.53.124.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:6b:c7:55:20:c7:3b:7d:82:4a:cf:f4:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Oct  5 13:00:40 2025 GMT
            Not After : Jan  3 14:00:40 2026 GMT
        Subject: CN=38c4736c-cbcc-4b07-addc-dea197b0e224
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:67:3a:04:9d:38:52:9b:23:f5:e2:70:4a:e5:
                    40:3b:54:d5:2c:53:14:d8:55:c2:8f:27:11:80:06:
                    a4:46:24:ff:b7:de:d0:0c:24:04:fd:b2:27:c4:73:
                    ee:f1:ac:38:12:1f:e3:03:95:8a:4f:bb:28:7e:be:
                    1d:19:48:1f:42:12:7e:df:2e:4f:a9:60:9c:9e:96:
                    13:8c:b7:c8:3c:fc:33:32:0c:26:93:be:28:0b:a5:
                    69:a5:b3:26:81:1d:f3:56:d9:9c:7c:fb:94:bf:d7:
                    06:99:73:4c:87:47:a5:5b:57:3f:48:b8:4f:e1:e2:
                    ff:89:34:be:ce:e4:ea:9a:c4:a8:7f:3a:f4:43:f6:
                    74:4d:ee:11:ce:35:3a:ee:3f:eb:e8:e8:b7:18:47:
                    c7:79:e8:c5:3e:5d:35:2e:0b:b7:18:d9:c3:93:e8:
                    5c:d0:a2:07:58:8e:05:26:42:41:f5:bd:a8:3a:f9:
                    21:9d:e0:95:e9:bf:ea:2b:c0:b8:c2:30:30:87:03:
                    f2:80:a8:91:5a:c4:e1:7e:35:e1:21:33:da:31:c7:
                    10:0c:e7:1f:f9:31:f5:6d:22:67:c4:4e:9e:60:ac:
                    f1:f8:ca:a3:94:28:1a:db:ba:ef:c9:9a:88:6e:aa:
                    a7:5d:d7:f1:0b:4e:0b:b0:b0:b9:ec:74:70:b7:e8:
                    36:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:A9:5A:35:F1:49:62:56:EC:55:B0:EE:63:7E:78:E0:FE:6C:76:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/b81bc05a-7966-3f8f-882c-78d4486dfe2d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.53.124.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:14:9f:c9:24:8a:b5:ae:1a:65:9e:7b:35:10:cd:3d:36:81:
         47:96:f8:64:9f:1a:87:9b:79:50:22:22:8f:38:73:d7:24:0b:
         45:56:58:ae:9e:2b:7c:6b:cc:49:82:cc:16:ff:74:6a:8b:c1:
         cd:62:01:05:94:bb:b5:d6:c9:ff:9d:1d:c4:df:44:f3:0d:7e:
         2a:cd:c4:60:90:fe:41:a9:9d:30:68:69:3e:94:59:ef:b3:fa:
         d4:21:70:1a:15:30:1c:78:9a:0f:0c:40:be:02:0d:3e:0d:a9:
         0f:23:5d:7f:49:6d:37:d9:d5:62:76:1f:81:8b:6f:54:0f:4d:
         21:80:bd:d7:95:53:fa:f3:09:2f:0a:05:5f:9c:64:91:5e:48:
         13:d7:40:e5:c0:ee:62:ee:c0:a4:bb:23:d8:03:81:15:e4:05:
         05:1b:d9:d7:ac:32:52:52:16:fa:18:40:04:59:f2:f3:ab:71:
         f2:27:28:b9:51:a3:e3:32:0b:49:9a:56:21:34:ff:cc:68:d6:
         64:7b:4f:dc:77:bb:da:ce:61:0e:21:2d:fe:41:7b:f1:ac:8c:
         6a:4b:35:1a:7c:ef:a4:57:37:52:72:2d:ca:a6:ee:37:63:fb:
         be:40:f1:6c:08:e4:e6:f6:15:30:a7:4d:35:43:64:36:4f:92:
         2d:38:31:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:52:38 2025 by rpki-client