Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/12ad7e22-1bd4-30a0-be79-a3dcd1c56904.roa
File:                     12ad7e22-1bd4-30a0-be79-a3dcd1c56904.roa (raw, json)
Hash identifier:          JsBz6xY0D3bUEeKLeWzaGBsJHiIJgsHLekpwcSYzb4k=
Subject key identifier:   FB:69:AE:9F:37:67:CA:78:39:A0:80:F5:29:98:B2:CC:AE:A6:6B:F5
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584A8B0B59E3B146C67F1E67E080
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/12ad7e22-1bd4-30a0-be79-a3dcd1c56904.roa
Signing time:             Thu 17 Jul 2025 01:00:51 +0000
ROA not before:           Thu 17 Jul 2025 01:00:51 +0000
ROA not after:            Wed 15 Oct 2025 01:00:51 +0000
asID:                     397630
IP address blocks:        147.53.121.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:8b:0b:59:e3:b1:46:c6:7f:1e:67:e0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Jul 17 01:00:51 2025 GMT
            Not After : Oct 15 01:00:51 2025 GMT
        Subject: CN=722d1da5-76f9-4075-bf30-3befc2acbc67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:66:a5:a9:76:a3:b3:97:7e:01:35:4a:58:88:
                    ca:41:6f:f4:86:51:0b:9d:9a:06:81:55:ac:d8:85:
                    60:fc:ec:a3:65:b3:56:b6:65:0e:76:3f:40:cf:71:
                    89:e3:c0:db:3a:a1:bf:25:84:4b:53:de:eb:7e:33:
                    6b:c7:81:37:47:ca:54:9a:97:09:11:a2:65:3b:d1:
                    98:02:92:dd:6e:ed:65:11:c9:a2:bc:63:cf:b9:8c:
                    9c:b1:75:6e:80:63:e7:66:23:a6:ce:b7:20:91:00:
                    a9:4e:e3:8e:b4:c5:e1:1a:91:df:f7:36:23:1d:6e:
                    02:9c:8e:b7:67:15:18:b1:85:ca:7e:2a:14:f9:48:
                    4d:49:52:32:b4:ef:b3:03:97:ba:97:e5:98:b8:40:
                    ec:fd:60:92:6c:77:c3:83:09:f2:5f:b4:9a:19:2c:
                    d0:f4:18:96:6b:a9:0b:b9:66:44:0d:0f:9c:4b:2e:
                    49:da:d5:54:d1:47:ba:e2:3f:d8:ed:b2:af:9b:37:
                    89:de:82:54:02:a9:64:dc:14:cd:f1:21:f7:85:50:
                    34:45:91:df:3f:c0:f2:ab:c0:b9:f2:0c:66:12:39:
                    41:af:b7:02:a9:af:23:dd:27:09:78:4f:56:70:00:
                    ae:0e:99:98:c0:78:da:5a:83:5d:3f:ee:35:a8:9c:
                    82:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:69:AE:9F:37:67:CA:78:39:A0:80:F5:29:98:B2:CC:AE:A6:6B:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/12ad7e22-1bd4-30a0-be79-a3dcd1c56904.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.53.121.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         e0:f7:13:ac:a8:46:30:f6:ff:c9:95:d8:5d:ce:82:1c:8a:3c:
         22:06:25:3a:ca:97:81:15:53:e7:43:5c:78:1c:e9:cd:c2:24:
         a2:26:fb:cd:b9:e0:61:72:58:55:39:fe:5b:57:b3:1f:1d:d1:
         2c:23:10:bb:ee:f5:9b:ef:da:08:2e:e9:f4:35:76:81:ef:d7:
         d1:c0:b9:26:89:91:f0:33:da:51:c0:87:6a:6c:1b:5d:c0:9a:
         08:e6:71:28:d9:89:e2:fa:ec:07:55:e3:ed:87:92:27:29:55:
         aa:7d:21:7f:f1:e2:db:f2:09:0e:2d:38:72:3c:c3:40:bb:5d:
         09:bc:bc:92:5d:76:91:5a:08:9e:97:06:bd:c5:96:66:8d:07:
         b5:ae:d9:5b:55:bd:51:40:49:85:1e:f3:a2:1f:81:a0:9a:12:
         3c:9b:f0:72:26:52:99:ae:66:69:5e:1b:6f:61:5e:5a:86:38:
         17:2c:c8:a8:46:0d:f6:4e:c5:93:04:2f:44:ce:02:c0:49:6d:
         e0:3a:5a:f7:2f:73:47:51:6e:96:e3:ee:7f:8d:ca:3f:2d:02:
         d2:f6:63:ce:95:dc:0f:57:dc:ca:e1:b6:7d:56:31:95:d4:34:
         71:89:7a:85:05:63:dd:a6:00:08:e1:47:c1:52:0c:5a:96:00:
         d1:29:5e:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 20:24:11 2025 by rpki-client