Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/218607a6-5ed3-3f9e-929e-c573645ad4e0.roa
File:                     218607a6-5ed3-3f9e-929e-c573645ad4e0.roa (raw, json)
Hash identifier:          AHQSmksVPRyRwmN0X4GtiC9GYo8b50DZHPzYpNttLTA=
Subject key identifier:   A8:56:54:F2:C5:1F:A9:8D:3A:47:F0:65:F3:84:17:3A:0F:C1:5D:7E
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584F3CE2AFAE0210EC97263FEF80
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/218607a6-5ed3-3f9e-929e-c573645ad4e0.roa
Signing time:             Sun 20 Sep 2026 13:00:12 +0000
ROA not before:           Sun 20 Sep 2026 13:00:12 +0000
ROA not after:            Sat 19 Dec 2026 14:00:12 +0000
asID:                     22516
IP address blocks:        147.53.122.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3c:e2:af:ae:02:10:ec:97:26:3f:ef:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Sep 20 13:00:12 2026 GMT
            Not After : Dec 19 14:00:12 2026 GMT
        Subject: CN=3052a967-4f81-4551-aa2d-80d2f8b5ed30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:45:56:c3:fe:e3:0a:8f:87:20:39:a6:f3:ed:
                    77:04:7c:b9:c5:ff:7d:ce:a4:2f:bf:9d:be:d4:d4:
                    ce:72:55:61:78:7d:f7:cf:e9:fc:cc:62:0d:ca:e0:
                    45:54:31:e7:43:c5:2a:18:0c:60:f1:fe:0b:48:a0:
                    8c:2d:10:67:52:55:f6:ae:00:29:8b:14:79:c2:6d:
                    05:c4:e1:a9:da:6a:bc:8c:36:d3:4d:7e:d8:35:a0:
                    92:34:1c:7e:70:a7:91:e0:da:7c:23:31:76:28:1a:
                    70:b4:9b:fe:73:65:e8:58:85:f2:c2:f7:65:39:1e:
                    ed:c4:47:e6:e8:52:1d:e9:54:8c:9b:45:60:8e:7b:
                    55:68:5e:d3:3c:a7:2d:87:cb:93:59:ec:58:31:2b:
                    09:05:10:c1:86:2a:73:0f:31:d0:58:85:99:50:60:
                    b5:7e:c7:28:59:8b:d7:8f:56:08:91:a6:d9:ab:8b:
                    9e:f3:11:9f:e4:d9:d9:67:9f:cc:59:26:06:a1:8e:
                    14:53:1e:d7:d3:1e:0d:65:f9:cc:c7:ee:ae:b5:62:
                    d6:40:9e:00:c5:3e:f8:a0:96:8a:c5:b6:25:e6:15:
                    70:1a:4f:7a:08:29:15:67:36:16:f0:5d:1b:8f:d7:
                    74:b0:d9:72:52:1f:40:ed:f8:ff:28:dd:d4:5d:52:
                    d6:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:56:54:F2:C5:1F:A9:8D:3A:47:F0:65:F3:84:17:3A:0F:C1:5D:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/218607a6-5ed3-3f9e-929e-c573645ad4e0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.53.122.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:2a:59:ef:4f:5c:8d:37:92:18:a9:6e:7e:6c:5e:8c:7e:75:
         98:78:35:96:f1:9f:ad:08:27:be:0b:22:08:5c:c6:09:18:61:
         5d:ea:b1:48:24:1e:ee:75:41:9d:67:85:47:65:1b:3f:52:13:
         4d:da:0b:64:b0:04:13:62:9b:6a:b1:f4:ff:a0:3d:e8:46:2f:
         8d:83:8e:26:fa:ae:37:48:d9:5a:a0:a7:8e:59:15:21:7f:9c:
         a1:24:6d:49:d1:42:dd:73:c2:b7:6f:c8:92:0d:93:b4:59:ff:
         a0:77:21:5f:88:03:7b:97:14:ed:01:c0:ca:8c:6e:e9:1d:b4:
         df:f2:15:54:e9:e9:a5:f0:f3:0d:f4:8f:40:30:8d:a7:e3:61:
         59:1d:1d:6a:41:91:88:bb:d9:72:7b:0f:d9:80:e9:a2:5e:e6:
         9b:38:c2:c5:5c:45:1c:f2:1d:c7:88:a8:3e:ce:0c:f4:29:a4:
         2d:a5:9a:f9:57:60:b3:68:c5:b5:da:2d:07:a5:6f:f2:5e:42:
         3e:72:be:6a:84:0d:f5:f8:c2:66:57:ca:fe:a1:b1:da:6e:06:
         d5:4b:47:8f:2e:17:c7:0d:5c:4e:41:e3:fa:fb:a2:dc:88:ae:
         8d:81:19:ab:9b:18:83:a3:fc:77:4b:60:61:c4:53:54:1f:89:
         32:85:36:63
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE884q+uAhDslyY/74AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0
YTY3MB4XDTI2MDkyMDEzMDAxMloXDTI2MTIxOTE0MDAxMlowLzEtMCsGA1UEAxMk
MzA1MmE5NjctNGY4MS00NTUxLWFhMmQtODBkMmY4YjVlZDMwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2UVWw/7jCo+HIDmm8+13BHy5xf99zqQvv52+
1NTOclVheH33z+n8zGINyuBFVDHnQ8UqGAxg8f4LSKCMLRBnUlX2rgApixR5wm0F
xOGp2mq8jDbTTX7YNaCSNBx+cKeR4Np8IzF2KBpwtJv+c2XoWIXywvdlOR7txEfm
6FId6VSMm0VgjntVaF7TPKcth8uTWexYMSsJBRDBhipzDzHQWIWZUGC1fscoWYvX
j1YIkabZq4ue8xGf5NnZZ5/MWSYGoY4UUx7X0x4NZfnMx+6utWLWQJ4AxT74oJaK
xbYl5hVwGk96CCkVZzYW8F0bj9d0sNlyUh9A7fj/KN3UXVLWIQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKhWVPLFH6mNOkfwZfOEFzoPwV1+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw
M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvMjE4NjA3YTYtNWVkMy0z
ZjllLTkyOWUtYzU3MzY0NWFkNGUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx
NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl
NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm
NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkzV6MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEYqWe9PXI03khipbn5sXox+dZh4NZbxn60IJ74LIghcxgkYYV3qsUgk
Hu51QZ1nhUdlGz9SE03aC2SwBBNim2qx9P+gPehGL42Djib6rjdI2Vqgp45ZFSF/
nKEkbUnRQt1zwrdvyJINk7RZ/6B3IV+IA3uXFO0BwMqMbukdtN/yFVTp6aXw8w30
j0AwjafjYVkdHWpBkYi72XJ7D9mA6aJe5ps4wsVcRRzyHceIqD7ODPQppC2lmvlX
YLNoxbXaLQelb/JeQj5yvmqEDfX4wmZXyv6hsdpuBtVLR48uF8cNXE5B4/r7otyI
ro2BGaubGIOj/HdLYGHEU1QfiTKFNmM=
-----END CERTIFICATE-----
Generated at Tue Sep 22 00:14:51 2026 by rpki-client