Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/a8ff4b45-9fb2-30d1-8d87-7d539b079515.roa
File:                     a8ff4b45-9fb2-30d1-8d87-7d539b079515.roa (raw, json)
Hash identifier:          lvzGjWDIZKRkqY5DV1lUlGOezFmZ6SeGGkKkOzorXJg=
Subject key identifier:   CD:10:60:DF:F3:13:9C:4F:46:9C:DC:07:C2:22:BB:D3:97:93:42:93
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584B1806F52409DC27816A25AAC0
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/a8ff4b45-9fb2-30d1-8d87-7d539b079515.roa
Signing time:             Fri 05 Sep 2025 13:00:41 +0000
ROA not before:           Fri 05 Sep 2025 13:00:41 +0000
ROA not after:            Thu 04 Dec 2025 14:00:41 +0000
asID:                     22516
IP address blocks:        147.53.124.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Sep 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:18:06:f5:24:09:dc:27:81:6a:25:aa:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Sep  5 13:00:41 2025 GMT
            Not After : Dec  4 14:00:41 2025 GMT
        Subject: CN=942a47be-03a4-489e-a03d-d5c348187fb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:bf:a9:7d:60:c7:d7:02:2e:ae:d0:c1:03:7e:
                    ba:cb:41:87:1b:63:f1:e7:1e:83:96:41:6a:83:14:
                    e4:24:a2:da:3d:96:38:07:1a:c1:7c:43:de:d0:1b:
                    b6:42:ce:8f:4c:d9:d0:7e:a8:5f:d3:3a:74:ef:99:
                    f2:c6:12:3d:4f:a2:41:d3:d6:61:e0:b3:d2:77:c9:
                    65:93:9d:27:d1:7a:5f:1c:d3:9e:df:ba:f7:49:62:
                    ff:0e:87:70:b1:59:47:da:23:ca:11:a8:3e:b5:ce:
                    a1:04:6a:12:b8:63:87:41:42:9f:d0:09:89:0f:22:
                    a4:05:8f:f2:ad:14:83:6d:42:e6:e2:f2:ed:d0:64:
                    e7:8e:a6:73:9a:db:3d:ab:df:f8:fa:f3:78:e6:b3:
                    9f:ab:e9:7f:33:c7:9c:3d:8f:80:a5:a5:0d:ed:9e:
                    47:60:d1:c0:12:6e:52:70:3e:79:16:eb:14:0c:a3:
                    d5:b9:31:d3:59:44:d7:57:3a:52:c2:94:b1:ed:60:
                    77:58:69:c2:8b:32:fb:46:02:2d:22:77:0d:a6:c7:
                    36:9e:6f:d3:13:8b:dc:2b:22:7c:90:74:c6:89:e3:
                    0d:76:f8:e7:77:04:1a:b9:7f:95:4a:d4:2c:bf:e3:
                    d1:78:6e:2c:2d:95:93:e9:0b:c0:6f:ee:df:66:02:
                    50:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:10:60:DF:F3:13:9C:4F:46:9C:DC:07:C2:22:BB:D3:97:93:42:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/a8ff4b45-9fb2-30d1-8d87-7d539b079515.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.53.124.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:90:9c:f0:54:02:cd:d8:ce:a1:61:df:71:c7:3d:71:c7:e6:
         4e:3a:1a:37:df:46:07:ce:da:31:28:65:5b:c1:8b:6f:e6:b1:
         6a:d9:81:f2:e4:90:6c:c2:a6:2a:5b:8e:57:3f:56:ee:a8:17:
         e1:8c:56:59:47:50:af:f8:a1:e1:8e:3a:a1:22:41:70:5f:46:
         1c:31:1c:bc:d0:3b:6c:6f:71:1c:1c:4b:65:0b:01:34:cc:27:
         e9:fe:a7:06:e5:f0:eb:da:43:99:92:ff:37:6c:57:71:b6:88:
         eb:d4:61:6b:2f:e7:c8:4f:6c:58:20:55:5c:e5:4e:ba:57:01:
         82:5e:af:e1:34:bb:b8:2d:4d:b4:98:10:14:c6:64:8e:97:d7:
         a9:7d:bc:61:b6:49:79:02:a8:a6:d9:39:32:5c:f5:cc:e9:dd:
         ed:4e:c7:7b:f2:4b:ff:4d:70:f5:eb:82:e0:b4:7d:ae:d0:19:
         23:92:9d:21:f9:39:fb:b2:62:a9:b3:10:0e:87:45:ab:5a:b4:
         5f:44:eb:9c:51:b2:ba:c7:40:e4:52:8f:a9:41:2d:e9:a8:4c:
         ea:29:be:c0:b7:50:f4:70:a8:7e:d8:45:14:46:eb:af:ba:79:
         36:e7:75:10:6c:d4:a0:1e:e5:bb:10:cb:4e:65:04:01:28:52:
         ce:d5:d8:cc
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsYBvUkCdwngWolqsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0
YTY3MB4XDTI1MDkwNTEzMDA0MVoXDTI1MTIwNDE0MDA0MVowLzEtMCsGA1UEAxMk
OTQyYTQ3YmUtMDNhNC00ODllLWEwM2QtZDVjMzQ4MTg3ZmI1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1r+pfWDH1wIurtDBA366y0GHG2Px5x6DlkFq
gxTkJKLaPZY4BxrBfEPe0Bu2Qs6PTNnQfqhf0zp075nyxhI9T6JB09Zh4LPSd8ll
k50n0XpfHNOe37r3SWL/DodwsVlH2iPKEag+tc6hBGoSuGOHQUKf0AmJDyKkBY/y
rRSDbULm4vLt0GTnjqZzmts9q9/4+vN45rOfq+l/M8ecPY+ApaUN7Z5HYNHAEm5S
cD55FusUDKPVuTHTWUTXVzpSwpSx7WB3WGnCizL7RgItIncNpsc2nm/TE4vcKyJ8
kHTGieMNdvjndwQauX+VStQsv+PReG4sLZWT6QvAb+7fZgJQzwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFM0QYN/zE5xPRpzcB8Iiu9OXk0KTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw
M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvYThmZjRiNDUtOWZiMi0z
MGQxLThkODctN2Q1MzliMDc5NTE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx
NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl
NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm
NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkzV8MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACuQnPBUAs3YzqFh33HHPXHH5k46GjffRgfO2jEoZVvBi2/msWrZgfLk
kGzCpipbjlc/Vu6oF+GMVllHUK/4oeGOOqEiQXBfRhwxHLzQO2xvcRwcS2ULATTM
J+n+pwbl8OvaQ5mS/zdsV3G2iOvUYWsv58hPbFggVVzlTrpXAYJer+E0u7gtTbSY
EBTGZI6X16l9vGG2SXkCqKbZOTJc9czp3e1Ox3vyS/9NcPXrguC0fa7QGSOSnSH5
OfuyYqmzEA6HRatatF9E65xRsrrHQORSj6lBLemoTOopvsC3UPRwqH7YRRRG66+6
eTbndRBs1KAe5bsQy05lBAEoUs7V2Mw=
-----END CERTIFICATE-----
Generated at Sat Sep 6 02:17:32 2025 by rpki-client