Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/cb0d59ea-3c98-3602-a591-b50eb06a6006.roa
File:                     cb0d59ea-3c98-3602-a591-b50eb06a6006.roa (raw, json)
Hash identifier:          UkCIraeSNMpcRGePRHko7q/aQwDfXr9IXFVhtizRcPU=
Subject key identifier:   A4:47:D2:BA:F0:C8:47:00:35:04:90:A9:69:70:E9:81:F1:53:67:3F
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584B2A2C5715BF25108CA48EC480
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/cb0d59ea-3c98-3602-a591-b50eb06a6006.roa
Signing time:             Fri 12 Sep 2025 01:00:32 +0000
ROA not before:           Fri 12 Sep 2025 01:00:32 +0000
ROA not after:            Thu 11 Dec 2025 02:00:32 +0000
asID:                     20001
IP address blocks:        147.53.118.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2a:2c:57:15:bf:25:10:8c:a4:8e:c4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Sep 12 01:00:32 2025 GMT
            Not After : Dec 11 02:00:32 2025 GMT
        Subject: CN=e31fc60a-8009-4e8b-ab1a-2b25ca443dd3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:99:fa:f2:64:b4:21:6a:70:ef:8a:0f:8d:23:
                    19:97:b8:e7:2d:57:2b:1e:07:0b:a4:8f:a1:37:3f:
                    cf:7c:90:58:db:04:64:9c:49:4e:8a:3f:42:af:3c:
                    93:5d:11:29:60:b3:ce:a5:05:21:6f:c4:31:15:c2:
                    75:1f:6b:18:0e:4c:c8:20:c6:43:80:b2:01:54:1f:
                    f4:14:dc:aa:09:9d:b0:d9:44:30:d4:cd:28:3a:f4:
                    5b:27:95:d5:5e:cd:9b:4b:94:89:f6:c5:38:3d:37:
                    a3:92:87:5e:cf:27:3f:6f:68:0e:26:f3:65:8f:b5:
                    c5:8a:20:55:26:36:38:8b:5a:bd:a9:37:db:ed:ea:
                    f7:d3:8d:86:26:5d:91:55:43:a5:3d:86:b8:b5:ec:
                    95:7e:a2:1f:57:f0:74:c7:9d:98:ad:3b:08:38:ce:
                    84:e4:3e:06:6c:42:b9:93:b1:71:54:39:52:cb:a0:
                    5c:c3:12:1b:3c:a4:9c:81:e1:e7:52:84:3e:e4:16:
                    c8:02:a7:56:0d:65:8c:49:ca:8f:d7:71:4b:2d:30:
                    07:84:70:ec:2c:47:99:0a:b7:4b:0b:17:ef:af:a3:
                    d8:9a:83:c5:ce:52:3e:33:9a:e1:26:c3:65:8f:db:
                    70:bb:10:8a:be:54:67:c6:e0:b7:9f:bc:d3:16:c0:
                    fb:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:47:D2:BA:F0:C8:47:00:35:04:90:A9:69:70:E9:81:F1:53:67:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/cb0d59ea-3c98-3602-a591-b50eb06a6006.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.53.118.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:4d:76:d5:cb:ca:48:af:6c:df:56:06:b9:88:50:98:46:c9:
         3f:80:1b:bc:be:33:d1:96:d6:02:94:5c:33:f4:d8:f3:60:bb:
         a1:6b:2d:ef:57:16:7f:fe:2e:93:d2:99:cc:b2:34:05:b5:1f:
         19:ba:63:f5:83:8a:4b:4f:05:0b:8b:b6:6c:8e:3f:9e:ca:3a:
         b9:fc:79:c5:b3:a8:02:59:ed:13:6c:30:7a:ad:1f:85:cb:be:
         38:b6:e1:f5:23:c8:ae:ad:e5:26:a5:f5:96:2c:40:39:f9:75:
         68:57:c5:c0:91:1a:ed:c9:dc:83:da:25:f7:1b:46:7e:53:9c:
         89:7d:5d:7f:0c:02:98:18:4d:0e:c4:8e:fd:55:62:c8:61:a1:
         f8:f5:07:b0:61:d2:47:03:0a:cb:fb:5d:9e:7c:8d:e2:aa:f7:
         5f:7f:cd:32:d2:3f:e2:70:a8:da:04:b7:88:a4:c9:c1:1a:f9:
         ea:b8:24:85:cd:01:23:44:94:4c:ac:b4:de:1f:9b:d0:da:ab:
         b2:4b:62:af:8c:12:54:e8:e1:02:be:81:ca:03:a4:e1:44:a1:
         f4:d4:f4:d2:fd:89:64:34:9b:27:e5:21:b4:bd:20:7a:0b:73:
         83:ba:68:d6:cd:27:11:3d:2b:2d:81:a5:7e:a4:45:1e:a4:0a:
         49:9a:c9:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:15:03 2025 by rpki-client