Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/12ad7e22-1bd4-30a0-be79-a3dcd1c56904.roa
File:                     12ad7e22-1bd4-30a0-be79-a3dcd1c56904.roa (raw, json)
Hash identifier:          vWrXGdj8cMLhKnM5DxfXJv3uDwqPimqB6UkH4hOpk8w=
Subject key identifier:   D8:65:E0:FC:A3:9E:0C:29:40:F3:46:E1:29:C9:D8:3D:0A:FB:2D:E7
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F43285849ABB4A22736DFD47E896555C0
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/12ad7e22-1bd4-30a0-be79-a3dcd1c56904.roa
Signing time:             Mon 28 Apr 2025 01:00:48 +0000
ROA not before:           Mon 28 Apr 2025 01:00:48 +0000
ROA not after:            Sun 27 Jul 2025 01:00:48 +0000
asID:                     397630
IP address blocks:        147.53.121.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 04 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ab:b4:a2:27:36:df:d4:7e:89:65:55:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Apr 28 01:00:48 2025 GMT
            Not After : Jul 27 01:00:48 2025 GMT
        Subject: CN=72118866-6402-46d0-b208-7743f2dfbe1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:d7:87:b8:dc:f6:68:dc:4c:bf:52:cf:61:0f:
                    03:14:d5:3c:5b:64:59:87:12:a1:43:5a:43:cc:b7:
                    f9:34:49:e3:a4:71:c0:f9:f8:42:37:eb:c8:a6:1a:
                    7e:1f:e8:d4:2c:b9:09:4a:d7:ff:31:75:fe:a1:51:
                    4b:24:54:36:8e:51:ed:4c:96:c4:b6:77:6a:8e:d2:
                    47:4d:14:15:7b:45:cd:89:2b:81:a8:b7:0d:2c:1b:
                    41:cc:59:88:e4:00:10:5c:32:e7:22:02:dd:0c:07:
                    65:96:7d:9e:2e:23:59:c3:79:46:a2:5d:88:c5:51:
                    97:f5:4a:70:25:cc:f8:03:9c:1e:1e:56:a7:52:ae:
                    fe:da:0e:87:dd:97:b0:f8:db:87:70:12:e4:23:ec:
                    21:f4:1b:dd:d2:cf:1c:b9:45:d5:db:28:4e:88:a9:
                    4a:a5:f2:fa:80:af:29:88:9d:e3:7b:6d:e3:78:27:
                    ad:57:bd:e1:95:cd:a7:7c:00:80:a5:d1:2b:f1:95:
                    90:37:ab:67:32:32:9d:34:34:12:37:7e:ba:6f:b4:
                    7e:af:0b:56:7a:89:2f:f0:fb:ae:d0:80:98:32:1f:
                    f5:a9:db:76:5c:58:76:85:65:b7:39:39:2f:be:0a:
                    ad:92:89:0c:b5:8c:07:a1:c9:fd:27:b4:f7:65:33:
                    00:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:65:E0:FC:A3:9E:0C:29:40:F3:46:E1:29:C9:D8:3D:0A:FB:2D:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/12ad7e22-1bd4-30a0-be79-a3dcd1c56904.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.53.121.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:4a:0c:a4:e6:2a:be:42:d5:9d:2e:53:bf:70:3c:9b:01:1e:
         e7:dc:7e:85:ae:df:d7:23:0f:69:ce:96:2a:3f:70:ee:02:0c:
         18:eb:35:fd:e4:2c:c2:7a:3b:e2:e2:4c:08:2d:b4:e3:9a:7c:
         27:45:a3:24:88:33:3d:02:6f:24:3d:88:52:54:03:a6:c6:b6:
         5c:12:fe:3b:52:b1:5a:dd:29:b2:18:be:ff:ed:f5:03:60:c5:
         0f:22:99:c1:ee:c6:a3:47:a6:24:81:34:9b:cf:f2:55:8e:57:
         bb:08:66:ef:50:40:bc:fd:ce:57:ce:5f:1a:ab:f6:60:f5:f7:
         fb:4c:df:e6:f1:7e:15:a0:7c:e3:46:ca:15:cd:83:a7:dc:3a:
         99:b9:bc:df:cf:30:65:33:26:f3:96:61:8b:98:f8:30:ce:62:
         5a:a8:93:1d:46:89:3a:58:f0:28:ad:9c:48:70:d6:ee:c3:d2:
         8c:15:a9:42:15:6b:a7:60:f2:be:5c:ce:df:ae:f5:d6:45:da:
         64:67:39:e0:f4:f1:f7:ca:62:4d:b0:a6:04:32:51:35:2e:ff:
         3f:e6:3e:0c:c8:2a:eb:dd:19:af:4e:1c:30:83:1e:39:26:79:
         e7:83:51:d0:ad:bf:cf:ab:79:b3:99:1e:7c:d2:a0:1c:a7:75:
         b2:a1:02:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 13:30:31 2025 by rpki-client