Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/d9539683-6b8c-3be2-ad36-3ec7c7a069b4.roa
File:                     d9539683-6b8c-3be2-ad36-3ec7c7a069b4.roa (raw, json)
Hash identifier:          3ssDWNqZuW7SZwtdMS0GCwsUKbYPLa3kiDYGJgsyRmY=
Subject key identifier:   7F:84:A4:ED:49:82:45:3F:3E:57:17:99:70:33:E4:E4:A0:D8:24:70
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584B1806F491AB0747E57ADCD800
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/d9539683-6b8c-3be2-ad36-3ec7c7a069b4.roa
Signing time:             Fri 05 Sep 2025 13:00:41 +0000
ROA not before:           Fri 05 Sep 2025 13:00:41 +0000
ROA not after:            Thu 04 Dec 2025 14:00:41 +0000
asID:                     7029
IP address blocks:        147.53.116.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:18:06:f4:91:ab:07:47:e5:7a:dc:d8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Sep  5 13:00:41 2025 GMT
            Not After : Dec  4 14:00:41 2025 GMT
        Subject: CN=2bc4fc97-8dd8-4312-936a-5a7c922505a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:15:06:22:ca:8d:d5:77:77:c9:ce:eb:88:31:
                    3a:ad:44:8b:63:24:84:0c:37:11:19:42:b1:42:36:
                    6d:12:a9:62:7d:2f:e4:ed:8c:2a:4d:60:6e:fe:1b:
                    ee:46:14:45:34:ba:a3:c9:6d:4b:2f:db:44:79:0b:
                    c1:2b:7d:50:d3:e7:13:44:c3:5c:bb:ba:b5:42:3e:
                    f2:a6:3d:59:c5:9c:b2:55:49:30:06:c6:c2:f6:bb:
                    ef:7a:7d:a3:37:73:75:2b:88:33:5c:15:10:e3:11:
                    9d:f8:92:23:84:4b:1a:cb:f0:e6:bb:f5:7b:93:1a:
                    d1:23:01:1c:f0:1f:1e:74:f3:a4:e9:58:70:e0:fd:
                    12:52:f9:d2:09:95:75:d3:88:e1:dd:37:9b:6b:cd:
                    64:b9:ae:0a:0e:65:d3:bb:7a:a8:35:a1:8c:5c:66:
                    ba:ce:3c:e3:d6:c9:ac:70:94:96:10:ba:b3:14:36:
                    eb:1a:39:2d:88:09:d0:02:26:66:68:60:53:b1:1b:
                    f8:66:1f:56:34:ff:97:cc:36:32:23:f7:bc:cb:3b:
                    7a:43:ec:01:17:4f:c7:25:84:2a:a2:48:8b:aa:2d:
                    ca:35:41:07:ae:76:fa:28:f0:45:1a:e3:d7:71:58:
                    c5:1d:42:dd:e2:78:5e:5d:aa:49:98:bf:41:5f:a7:
                    2b:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:84:A4:ED:49:82:45:3F:3E:57:17:99:70:33:E4:E4:A0:D8:24:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/d9539683-6b8c-3be2-ad36-3ec7c7a069b4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.53.116.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:34:ea:83:83:bd:d5:be:b9:4f:65:84:36:b2:fe:13:d4:5e:
         12:15:b2:98:15:13:48:e5:3c:f1:8e:c6:b8:e9:dc:da:3b:7e:
         9d:da:3c:6d:c8:5a:63:fc:98:ac:61:ac:b1:a8:45:59:3d:b9:
         77:e9:26:65:d3:bf:b0:64:8b:4a:71:56:a6:54:97:41:40:01:
         25:b1:a7:f3:d9:79:80:d6:1d:de:de:21:3b:2c:34:7b:b3:33:
         1f:65:fb:34:be:82:f9:b0:96:e9:43:ae:76:4f:f3:c6:98:22:
         30:64:0d:db:c6:38:35:55:db:11:90:fe:63:2e:8f:a5:36:71:
         17:19:25:b5:89:c4:e3:8a:5c:82:53:77:bb:67:c2:cc:76:9d:
         1e:62:bc:61:45:f5:e5:3f:7d:5f:5c:a6:c6:55:35:13:df:58:
         06:c6:9f:d5:3b:fb:5f:eb:8a:2e:2c:b0:50:5c:3c:6d:5d:1a:
         8e:bc:4f:74:d0:43:f4:79:64:3b:cd:39:f7:0b:73:05:1f:08:
         1b:77:ce:21:a5:17:80:f9:df:a7:4c:97:db:d4:b9:df:4c:6b:
         3b:e5:a6:39:68:0d:fd:9a:a0:9c:e9:3f:69:3c:19:fa:47:fc:
         88:8b:d4:88:62:0b:e4:44:5b:5f:1c:d3:33:55:3a:92:c9:32:
         5e:18:9b:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:38:40 2025 by rpki-client