Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/67f8ba3c-34eb-3e73-8db0-288b97377903.roa
File:                     67f8ba3c-34eb-3e73-8db0-288b97377903.roa (raw, json)
Hash identifier:          qBI/mQ6opvWOx2R4dX7/I/Kl9QAFCyKfvkifmlyxdMw=
Subject key identifier:   AA:CD:6D:29:15:76:40:24:4F:CB:CE:BB:8F:4B:B8:3B:62:8F:83:E7
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584A4962DFFF0ECB168354822B80
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/67f8ba3c-34eb-3e73-8db0-288b97377903.roa
Signing time:             Mon 23 Jun 2025 12:34:00 +0000
ROA not before:           Mon 23 Jun 2025 12:34:00 +0000
ROA not after:            Sun 21 Sep 2025 12:34:00 +0000
asID:                     20001
IP address blocks:        147.53.112.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:49:62:df:ff:0e:cb:16:83:54:82:2b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Jun 23 12:34:00 2025 GMT
            Not After : Sep 21 12:34:00 2025 GMT
        Subject: CN=750b9763-ad88-490a-8ad9-db235a2a7153
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:3d:1a:b8:e2:40:3b:f3:b6:43:24:25:52:5e:
                    1a:38:7b:c0:c7:0f:d0:ed:79:05:82:16:36:80:3f:
                    4d:40:64:6a:85:57:ff:cd:87:ee:04:47:f7:b9:b9:
                    75:ad:a6:6b:7b:51:79:f3:44:e4:1e:b7:3d:f1:87:
                    ab:5d:d1:c9:f4:a1:f3:04:83:2d:68:24:6d:fb:a7:
                    17:43:e7:ce:d0:0f:44:37:ae:07:92:32:ae:12:2c:
                    3f:d2:dc:8a:38:95:5e:e4:2c:f0:95:ae:7f:5d:73:
                    f2:a5:91:ac:8d:b8:bf:c6:ad:a4:fd:92:ba:a5:d1:
                    b2:85:46:1b:70:45:6c:c1:ae:b2:9c:67:14:93:44:
                    36:cc:59:e1:5e:d6:ff:b2:0b:d3:63:25:bf:c3:11:
                    b2:42:42:88:71:d3:22:31:47:e7:01:25:b8:87:04:
                    e6:1c:90:ed:92:ef:48:09:2b:99:02:12:46:fd:87:
                    33:c8:6e:78:78:9d:6f:7b:28:f2:bf:85:4e:c4:a5:
                    74:b1:79:35:97:64:3d:08:de:a5:53:65:c7:3f:37:
                    28:35:95:8f:9f:85:6b:c5:e3:1a:c3:bc:97:f3:74:
                    12:99:1a:99:d9:2a:f1:e7:3c:f9:62:31:83:87:6c:
                    3f:54:63:30:27:0e:8b:d0:9f:32:31:de:32:7a:dc:
                    af:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:CD:6D:29:15:76:40:24:4F:CB:CE:BB:8F:4B:B8:3B:62:8F:83:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/67f8ba3c-34eb-3e73-8db0-288b97377903.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.53.112.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b5:5b:a3:09:af:81:e4:16:13:30:96:9c:ed:75:b5:b0:f4:78:
         ba:60:24:de:65:89:2d:ec:6e:4c:53:d0:a8:a9:d2:79:49:65:
         fb:0c:8f:4a:ca:12:d5:04:62:f9:7d:e5:ff:f0:9b:0c:48:f4:
         a6:63:bf:37:be:0e:0c:d0:f7:3c:8d:50:1e:bd:81:db:d0:55:
         20:49:1d:bb:01:ad:83:81:e3:76:a6:d9:f9:e7:aa:a6:cc:f5:
         ee:42:4d:f8:88:27:5d:8f:ea:a9:6c:b3:97:c9:5d:d8:18:15:
         67:6e:a1:f3:e9:20:4e:03:15:4b:38:ec:fa:18:cd:86:ed:9b:
         da:38:ab:d3:63:65:69:fe:10:44:f9:68:4d:de:ea:bc:76:48:
         91:d5:b4:8d:d3:74:01:d1:d1:ba:7a:16:5e:65:e8:87:cc:f6:
         10:cf:46:b9:c5:22:31:96:34:42:f7:c8:fa:61:06:42:1b:fd:
         7b:9a:ad:78:a7:b2:31:65:98:8a:5b:8c:7b:9f:6d:ee:1f:58:
         3c:1c:1c:62:3f:3f:54:5c:dd:5a:3e:d4:66:02:3c:76:d3:9f:
         75:89:4b:75:08:47:00:64:e2:0d:b4:87:d7:3d:8b:fd:8e:1c:
         82:05:b9:1e:d9:fb:3f:ce:c5:27:49:e2:a1:04:99:35:36:0b:
         9f:9e:0a:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 00:22:23 2025 by rpki-client