Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/d124cf85-7d81-3e4c-876c-6b31a6b7a87b.roa
File:                     d124cf85-7d81-3e4c-876c-6b31a6b7a87b.roa (raw, json)
Hash identifier:          vwba9aZgnyuv9b/V6ia2VyL9u7BgMUGB/jC6Opo/PjU=
Subject key identifier:   ED:AA:42:85:D0:94:C6:5D:3A:DF:5A:DE:60:E8:AA:59:D7:85:12:B0
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584F3CE278C325EE7A38651C0280
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/d124cf85-7d81-3e4c-876c-6b31a6b7a87b.roa
Signing time:             Sun 20 Sep 2026 13:00:12 +0000
ROA not before:           Sun 20 Sep 2026 13:00:12 +0000
ROA not after:            Sat 19 Dec 2026 14:00:12 +0000
asID:                     22516
IP address blocks:        147.53.115.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3c:e2:78:c3:25:ee:7a:38:65:1c:02:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Sep 20 13:00:12 2026 GMT
            Not After : Dec 19 14:00:12 2026 GMT
        Subject: CN=35f1e009-775d-4672-bf18-7783f047b16d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:f9:c1:59:1e:41:ce:3e:06:69:59:7f:82:28:
                    e1:23:80:9e:84:c9:3f:9a:4c:c5:45:2d:08:57:77:
                    87:43:21:42:d5:c2:0f:01:b3:93:5f:61:f0:d3:fc:
                    d5:02:fe:47:9c:37:bf:61:71:3d:d3:2b:5f:d9:5c:
                    a6:d4:21:8f:02:e1:bd:2e:be:c1:f7:f8:a7:8d:f7:
                    fe:1f:a7:23:44:18:0f:f9:99:60:d6:f3:27:47:de:
                    75:e9:7f:56:4c:f6:7b:4f:f4:46:e5:9f:0e:ef:49:
                    90:c6:35:1f:cd:75:ed:f2:34:76:19:81:54:c9:d9:
                    17:ac:01:bb:d4:79:44:37:58:0d:8e:cb:87:9c:c9:
                    66:db:d3:a5:a6:21:e8:0e:57:c0:2e:00:2f:17:fd:
                    09:91:b8:4e:c3:db:88:13:06:fd:b8:54:b5:15:ef:
                    0d:22:76:1d:fa:bc:18:1a:1f:96:a8:de:cf:b6:a4:
                    c0:f2:53:28:bf:f7:4e:2a:2d:b4:b3:27:e6:fc:17:
                    b6:3e:c9:ea:f1:29:ec:37:23:57:85:54:0b:45:f3:
                    e4:32:ab:e5:95:55:ce:48:5a:10:47:d3:68:2a:66:
                    10:1e:f5:b3:5e:a6:cb:f8:00:b1:00:12:3e:3b:40:
                    e6:e2:10:db:d4:d3:d8:20:2d:b6:6b:e3:93:e8:14:
                    ec:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:AA:42:85:D0:94:C6:5D:3A:DF:5A:DE:60:E8:AA:59:D7:85:12:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/d124cf85-7d81-3e4c-876c-6b31a6b7a87b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.53.115.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:38:45:ae:10:ba:92:b3:76:ca:2f:1d:67:7a:6d:0b:6c:e9:
         9b:26:7b:7e:18:92:9c:ec:2a:cd:35:83:99:69:d1:59:f7:b3:
         b7:b6:81:aa:ec:b1:b7:55:be:21:d5:fe:2f:77:53:c7:ad:a8:
         ca:db:ea:b2:b6:bd:cb:b2:61:c1:9c:4e:bd:a3:56:51:c1:fb:
         43:59:fe:9a:39:d9:d0:23:3c:de:c4:a8:2f:d3:9f:2e:9e:c3:
         aa:82:ff:b8:7e:5c:7a:7f:b7:3f:e8:93:1a:85:cc:a7:2e:10:
         21:f5:e4:c0:61:f9:29:62:93:61:7f:04:40:41:c9:bf:ed:c6:
         9d:d4:f3:91:b2:f3:c1:db:46:57:6c:ac:76:fd:b4:c0:20:a9:
         f3:83:3a:9f:bb:1d:d1:91:63:c7:c3:bd:fe:77:d1:e2:53:af:
         d3:39:29:9e:10:f6:ba:54:6d:76:f6:b1:22:2e:9f:33:fd:d8:
         4a:44:85:b9:81:f2:2e:ec:a4:92:a1:0c:05:0f:15:8f:b8:9e:
         71:59:f9:f6:91:d2:ee:15:14:86:9b:f9:51:00:a6:99:2a:41:
         9f:8b:4e:c5:0a:72:c3:4e:1c:75:d7:f7:d3:bd:18:6a:8d:6e:
         f3:d1:c1:20:c6:75:14:21:3f:37:f4:a3:94:51:05:0f:08:e7:
         aa:3a:45:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 10:01:09 2026 by rpki-client