Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/b81bc05a-7966-3f8f-882c-78d4486dfe2d.roa
File:                     b81bc05a-7966-3f8f-882c-78d4486dfe2d.roa (raw, json)
Hash identifier:          r5g+8R9G3zXhfSQK+6x4Itxz8LSeNIkPpTavhoa1D3o=
Subject key identifier:   E6:B9:D6:4B:09:EA:04:63:13:06:76:C5:75:78:E5:A5:3A:46:BA:CC
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584EAE81A00747113F2571D30D00
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/b81bc05a-7966-3f8f-882c-78d4486dfe2d.roa
Signing time:             Fri 31 Jul 2026 13:00:12 +0000
ROA not before:           Fri 31 Jul 2026 13:00:12 +0000
ROA not after:            Thu 29 Oct 2026 13:00:12 +0000
asID:                     397630
IP address blocks:        147.53.124.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ae:81:a0:07:47:11:3f:25:71:d3:0d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Jul 31 13:00:12 2026 GMT
            Not After : Oct 29 13:00:12 2026 GMT
        Subject: CN=1b66c50f-7f74-4b96-8e6f-41cd92c88a8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:67:6a:1d:36:47:03:48:ca:43:f5:cf:69:49:
                    6c:17:20:ec:3a:82:db:a6:28:3a:cc:8f:29:60:b6:
                    f4:e4:d9:ad:99:ee:09:e3:5b:47:9c:d8:48:45:30:
                    b9:b0:75:72:88:49:37:12:a9:06:e6:b6:dc:84:f9:
                    43:51:ac:ce:34:3d:74:84:90:e3:4c:68:78:71:bd:
                    fd:63:18:62:9f:e1:bd:90:56:aa:11:b0:00:13:e2:
                    9e:52:c4:0e:50:dd:5d:e5:df:2a:d7:4a:bb:a9:85:
                    fa:e6:4f:bc:78:46:9c:d9:44:8e:5d:3d:89:9b:6d:
                    40:68:cd:e8:b6:16:b5:c0:08:31:10:07:af:c1:c1:
                    00:2f:fd:bd:ce:dd:96:74:e8:2c:8c:c9:ae:75:01:
                    10:92:ca:93:88:82:b9:bc:60:74:04:8b:52:e5:a1:
                    a0:5e:36:79:80:85:c8:7f:a8:8e:01:9e:8e:52:56:
                    81:72:36:61:40:0f:4b:36:dc:e1:79:9e:b4:19:b8:
                    c3:f7:cb:64:18:cd:a8:f0:54:fa:28:4b:ba:5b:19:
                    73:c8:90:27:16:d1:d5:af:4d:d2:bc:eb:8d:a6:f8:
                    f9:21:ba:56:dc:a8:c3:30:c8:1f:7c:be:3f:75:e0:
                    44:97:56:39:b4:89:77:88:71:0e:c8:0e:c9:89:f8:
                    57:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:B9:D6:4B:09:EA:04:63:13:06:76:C5:75:78:E5:A5:3A:46:BA:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/b81bc05a-7966-3f8f-882c-78d4486dfe2d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.53.124.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b8:27:04:ed:ed:f3:6f:a9:f0:b3:9c:6e:fc:2e:df:d6:e9:b1:
         39:07:e6:48:cc:7a:d6:79:71:fe:7d:fc:8e:b6:92:c3:77:b7:
         3f:f0:ca:a1:50:c1:4a:53:95:43:b5:d5:a4:58:d3:2d:74:38:
         b4:7b:6b:21:08:53:9a:41:77:95:06:1a:11:6a:65:9d:d9:f9:
         e4:27:96:b9:03:d9:46:6a:cb:0d:8b:09:88:69:ee:e4:58:8e:
         01:3d:0d:eb:79:dd:d9:e0:1b:a6:30:0d:f0:59:64:ba:07:1b:
         69:7e:b7:41:8c:f9:e2:4c:4d:4c:63:a1:bc:82:e0:a0:a2:3e:
         ad:17:83:72:cd:b0:be:6d:f6:1b:2b:47:f0:ce:1c:08:8b:91:
         4a:53:9a:72:b5:ce:9a:aa:e9:7d:ec:db:7f:8f:04:55:17:48:
         dc:9f:71:21:6e:80:35:17:88:ed:16:9e:95:3c:15:65:53:08:
         61:da:3d:b0:1d:36:a0:fe:bc:79:40:d2:98:39:7a:74:f0:f8:
         4f:e2:cc:c7:4e:a8:12:06:5e:39:6d:ee:ab:31:93:e9:0e:3b:
         e7:11:a0:89:92:a1:3a:80:af:1b:e5:67:ca:46:ea:bd:ba:55:
         24:7e:e0:a4:3f:94:9b:59:51:ee:41:fb:ca:b7:44:45:ef:1e:
         83:61:a9:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 19:17:01 2026 by rpki-client