Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/fe4e5004-7e39-3780-9ef8-07e7bc6ea083.roa
File:                     fe4e5004-7e39-3780-9ef8-07e7bc6ea083.roa (raw, json)
Hash identifier:          oloSsekX6uySdnILDavq+g2wRgvs+bw/TVuwJ8ow6rQ=
Subject key identifier:   BF:7F:F1:41:5A:6A:16:15:87:5C:2E:C8:25:8A:DF:D4:CF:71:95:08
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584F4987AF0240B6159C310D6A00
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/fe4e5004-7e39-3780-9ef8-07e7bc6ea083.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     20001
IP address blocks:        147.53.122.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:87:af:02:40:b6:15:9c:31:0d:6a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=dbb379bf-3f38-41cb-8167-f72c2f6f8c6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:c9:69:f3:c0:a2:1a:28:3b:e3:2d:2a:d8:56:
                    3f:f7:4f:10:3c:e2:2a:4a:19:58:dd:8f:b7:c1:0d:
                    91:5a:3a:4a:38:38:5c:8a:8e:86:64:c3:47:61:3b:
                    c6:c2:90:b6:ab:d4:89:d1:27:93:31:0f:eb:79:a5:
                    c1:ed:62:dc:64:ca:0a:02:15:a2:44:62:d7:f0:51:
                    c2:b8:69:8e:0e:9d:73:68:ea:77:ff:5d:7f:b4:86:
                    05:d5:c3:07:4f:0f:6b:a2:ec:e2:c9:62:b5:5d:7c:
                    c7:72:32:1e:9c:85:1c:3c:a5:a5:9b:40:d1:a5:97:
                    f4:37:d7:64:1f:6f:14:e2:5a:f2:b2:1d:35:73:54:
                    50:a9:00:0f:d0:1d:f8:c5:44:79:88:c0:0d:b5:a3:
                    2f:29:c4:12:44:60:a6:85:bd:4d:cd:4c:2b:46:e7:
                    e1:4e:7e:e5:69:56:ba:be:4d:60:54:7d:7f:7d:d0:
                    be:38:f2:4a:cf:bb:11:5f:c7:2e:c3:eb:f7:00:c1:
                    38:e1:b8:39:cb:af:d8:ed:44:d7:2c:20:02:8f:11:
                    0d:cc:e2:ef:42:88:47:7e:a3:4d:67:d8:e8:2d:ee:
                    19:bc:c3:bb:c3:24:6e:44:89:9d:d4:70:45:91:65:
                    45:67:53:37:41:4c:9f:e4:b4:02:3a:5c:13:1d:08:
                    5d:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:7F:F1:41:5A:6A:16:15:87:5C:2E:C8:25:8A:DF:D4:CF:71:95:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/fe4e5004-7e39-3780-9ef8-07e7bc6ea083.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.53.122.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         af:68:94:1e:f2:99:da:48:15:35:d7:5c:10:f6:25:eb:ff:39:
         d7:d6:d4:81:8b:fb:bc:70:f0:7a:07:60:68:b9:06:5d:5c:20:
         51:63:71:f3:ae:a9:a8:c7:4b:b0:42:07:03:c7:05:90:7a:57:
         2c:63:3f:23:ed:83:55:f2:2e:02:ae:95:8a:de:2d:7e:27:6d:
         27:c8:61:84:50:54:9e:48:19:6e:3d:71:b8:bb:1d:b4:4c:aa:
         b4:cc:e1:91:36:86:92:a4:5d:9b:21:c5:31:d1:89:ab:f3:57:
         8f:e5:99:4a:85:c6:f7:14:c5:1b:a7:26:2f:6d:19:f8:8a:a4:
         86:9b:fd:55:3e:53:07:dd:6c:37:05:03:25:da:98:fe:53:10:
         33:45:c4:7f:7e:6f:20:2b:72:79:3e:70:e7:2d:0b:3c:52:06:
         3f:0c:49:4b:1e:90:0b:28:3e:23:ba:24:d4:c2:b3:4d:38:7c:
         a9:81:14:10:a3:a6:be:38:c5:22:fb:f1:74:22:3e:89:8c:12:
         75:c4:67:50:f1:4d:a0:0e:e8:ad:29:38:41:86:b4:32:fe:52:
         51:c1:e7:81:97:55:c2:36:f4:4f:c4:ab:4b:5c:aa:6f:76:05:
         83:bd:88:b8:f2:c1:6b:f6:32:68:5a:fe:5c:fd:28:60:5a:12:
         35:86:18:c9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jh68CQLYVnDENagAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0
YTY3MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
ZGJiMzc5YmYtM2YzOC00MWNiLTgxNjctZjcyYzJmNmY4YzZiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsslp88CiGig74y0q2FY/908QPOIqShlY3Y+3
wQ2RWjpKODhcio6GZMNHYTvGwpC2q9SJ0SeTMQ/reaXB7WLcZMoKAhWiRGLX8FHC
uGmODp1zaOp3/11/tIYF1cMHTw9rouziyWK1XXzHcjIenIUcPKWlm0DRpZf0N9dk
H28U4lrysh01c1RQqQAP0B34xUR5iMANtaMvKcQSRGCmhb1NzUwrRufhTn7laVa6
vk1gVH1/fdC+OPJKz7sRX8cuw+v3AME44bg5y6/Y7UTXLCACjxENzOLvQohHfqNN
Z9joLe4ZvMO7wyRuRImd1HBFkWVFZ1M3QUyf5LQCOlwTHQhdfwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFL9/8UFaahYVh1wuyCWK39TPcZUIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw
M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvZmU0ZTUwMDQtN2UzOS0z
NzgwLTllZjgtMDdlN2JjNmVhMDgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx
NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl
NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm
NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkzV6MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAK9olB7ymdpIFTXXXBD2Jev/OdfW1IGL+7xw8HoHYGi5Bl1cIFFjcfOu
qajHS7BCBwPHBZB6VyxjPyPtg1XyLgKulYreLX4nbSfIYYRQVJ5IGW49cbi7HbRM
qrTM4ZE2hpKkXZshxTHRiavzV4/lmUqFxvcUxRunJi9tGfiKpIab/VU+UwfdbDcF
AyXamP5TEDNFxH9+byArcnk+cOctCzxSBj8MSUsekAsoPiO6JNTCs004fKmBFBCj
pr44xSL78XQiPomMEnXEZ1DxTaAO6K0pOEGGtDL+UlHB54GXVcI29E/Eq0tcqm92
BYO9iLjywWv2Mmha/lz9KGBaEjWGGMk=
-----END CERTIFICATE-----
Generated at Sun Sep 27 09:55:59 2026 by rpki-client