Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/7934aa63-4028-36e0-93ad-64ff9f99bf5b.roa
File:                     7934aa63-4028-36e0-93ad-64ff9f99bf5b.roa (raw, json)
Hash identifier:          uCxESz0iEyKWLeQMtFmeU7msoOdoSBGiKY8Ytkg5g6M=
Subject key identifier:   83:67:19:4C:A4:2D:77:D7:C7:93:FA:89:52:65:41:14:D2:9C:BD:10
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584A8B0B5991CDE0A023FF27A880
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/7934aa63-4028-36e0-93ad-64ff9f99bf5b.roa
Signing time:             Thu 17 Jul 2025 01:00:51 +0000
ROA not before:           Thu 17 Jul 2025 01:00:51 +0000
ROA not after:            Wed 15 Oct 2025 01:00:51 +0000
asID:                     64267
IP address blocks:        147.53.117.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:8b:0b:59:91:cd:e0:a0:23:ff:27:a8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Jul 17 01:00:51 2025 GMT
            Not After : Oct 15 01:00:51 2025 GMT
        Subject: CN=6f0d33ea-9e4d-461b-8e78-9612a3226e6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:d0:ed:4a:b8:e4:93:14:d1:cb:ef:c1:f5:5d:
                    af:f8:7f:2a:ce:0d:97:84:84:81:65:9d:a0:67:a7:
                    4c:59:43:55:50:7a:02:67:a2:07:08:1d:81:dc:35:
                    59:98:1d:66:18:e0:81:70:4d:d9:6b:c0:b1:08:88:
                    dd:21:8e:be:c5:84:2e:ad:4b:d3:ce:5f:0b:9a:1f:
                    97:68:d7:9e:be:44:21:40:fa:53:d2:cf:23:d5:5a:
                    4c:23:68:31:36:c8:fd:8e:65:b3:5f:3f:29:17:07:
                    2f:5b:fd:57:6e:d9:fa:a8:14:b6:d3:51:b5:8b:b6:
                    c8:2c:23:0d:7f:52:31:2c:ce:b7:76:e0:f9:ee:91:
                    86:15:2d:df:bd:81:90:ad:18:f7:78:86:01:41:20:
                    59:74:4c:29:db:c5:7d:5d:ad:a6:29:05:13:e9:f6:
                    8a:82:ec:72:43:c4:fe:a5:4a:67:4d:ae:78:fb:53:
                    d1:71:08:8d:55:19:b0:59:4c:55:7b:dd:fe:e6:0c:
                    c4:7f:93:56:f3:48:43:31:c5:c6:67:be:84:1a:a8:
                    b7:7d:a3:33:cd:b0:33:2c:3c:14:a7:9e:61:e7:8f:
                    48:21:ef:d1:db:54:fc:53:52:8f:7e:50:b9:20:33:
                    97:c9:79:03:67:4e:73:46:4c:e9:b1:6d:b2:04:a6:
                    b0:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:67:19:4C:A4:2D:77:D7:C7:93:FA:89:52:65:41:14:D2:9C:BD:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/7934aa63-4028-36e0-93ad-64ff9f99bf5b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.53.117.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:8a:f9:78:c2:26:86:86:fa:e9:d9:b0:92:69:d7:f2:81:9c:
         81:c5:e9:65:8e:11:98:21:df:79:5a:b1:62:d9:70:b7:23:29:
         6c:73:96:a8:c4:dc:4c:fb:4d:4e:5d:55:fe:0e:ce:53:9d:31:
         7d:66:99:94:07:8d:6e:f0:28:ec:08:3b:d2:c5:21:d6:9c:88:
         f5:06:3a:1a:e4:59:b1:d9:32:8b:05:60:c1:8e:d6:8c:be:da:
         e0:05:6b:8e:ec:70:98:eb:54:d8:25:7d:e5:3c:c4:39:11:5e:
         33:42:93:2c:30:70:c3:85:71:2a:5c:a4:c3:e8:85:e6:7c:11:
         02:e1:dc:fa:f6:41:95:6f:fd:9d:ae:79:a1:d9:29:2a:30:67:
         95:bd:27:fc:f4:35:11:09:54:06:8e:42:fd:97:79:28:3d:68:
         1e:ae:6a:78:13:8f:c8:ad:1f:de:7d:ed:06:e3:1a:08:1c:55:
         7f:0e:3f:eb:f4:45:3e:11:2b:3c:24:8f:bb:7b:40:f8:57:41:
         2e:cd:a9:77:96:13:60:5d:d3:af:9b:16:dd:7f:de:d1:af:14:
         6e:29:b3:d2:97:9a:a5:aa:4e:84:19:12:6e:a9:e7:e8:d2:98:
         9a:74:85:e1:10:3d:16:c7:79:eb:02:61:34:f0:3c:f6:74:c6:
         5d:83:25:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 00:24:44 2025 by rpki-client