Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/2b5bb205-d26c-3633-b36b-0af3e508b73c.roa
File:                     2b5bb205-d26c-3633-b36b-0af3e508b73c.roa (raw, json)
Hash identifier:          vQwp1ZHnyIYdp3qBoD+cs4m9AZNBPrlSyakJcwogX+0=
Subject key identifier:   ED:F4:66:EB:39:92:22:72:12:4C:BA:80:3D:CF:8F:89:6B:51:F6:0D
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584A3849CE84A89A7985832CBE80
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/2b5bb205-d26c-3633-b36b-0af3e508b73c.roa
Signing time:             Tue 17 Jun 2025 09:34:44 +0000
ROA not before:           Tue 17 Jun 2025 09:34:44 +0000
ROA not after:            Mon 15 Sep 2025 09:34:44 +0000
asID:                     7029
IP address blocks:        147.53.113.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 21 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:38:49:ce:84:a8:9a:79:85:83:2c:be:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Jun 17 09:34:44 2025 GMT
            Not After : Sep 15 09:34:44 2025 GMT
        Subject: CN=c6cb224e-ebab-4f45-bc2d-598d169190be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:6c:73:f8:ef:28:98:9f:bf:72:87:c5:6e:90:
                    da:64:2a:1e:54:90:b2:6a:cb:0a:a1:65:68:58:55:
                    58:79:67:ff:fc:a8:90:48:0f:5c:bf:4f:e2:99:12:
                    2e:d9:95:54:49:a0:78:80:c7:37:03:a7:73:07:ef:
                    2a:93:8b:09:21:39:b0:35:7f:18:8a:b1:1c:ae:5c:
                    1a:83:c9:b1:93:dc:45:d7:80:58:8e:77:2d:4d:ec:
                    6d:f8:ec:ba:cd:6f:da:fe:3c:60:6e:2b:27:bd:a7:
                    56:e7:a1:56:67:16:fc:17:dc:88:d1:30:1f:bd:58:
                    78:b8:84:bf:36:8b:5b:f7:01:7b:01:e6:b1:7c:30:
                    e7:44:e9:a2:fe:d4:fb:7d:3b:e4:21:d4:a7:fe:43:
                    58:cc:72:13:09:06:cc:20:96:ba:7a:9f:22:9c:89:
                    7e:ad:5c:32:53:b5:2f:95:be:ae:b0:a5:98:da:33:
                    46:fe:05:a6:49:31:e8:ac:59:44:d3:f7:e9:d9:3b:
                    a6:f1:43:4e:ba:e2:3f:e4:43:c8:56:4d:71:15:6c:
                    6f:db:8e:21:2c:b9:54:10:b9:0d:14:cf:cf:0f:7f:
                    e4:6a:92:f5:bc:b7:e4:85:d2:9a:6f:55:85:da:61:
                    70:e1:9c:a8:56:2a:bb:6a:67:1a:b0:ef:3c:5a:ee:
                    f8:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:F4:66:EB:39:92:22:72:12:4C:BA:80:3D:CF:8F:89:6B:51:F6:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/2b5bb205-d26c-3633-b36b-0af3e508b73c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.53.113.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ba:4e:cd:6a:3c:bd:6c:cb:97:53:2e:80:98:39:a9:9e:4b:f9:
         6b:3c:bf:1b:76:cb:f3:ca:10:f1:a1:a0:1f:4e:7e:63:c8:21:
         73:bf:0a:de:f4:ca:bf:75:c5:0e:8e:70:ae:ec:df:6b:69:8f:
         0d:b1:f0:82:f7:f9:53:0a:ec:4c:e2:2e:38:d3:c4:49:dd:4b:
         59:2f:cb:2c:35:08:c2:70:63:63:4a:c6:91:a0:d9:f3:df:1d:
         cc:9d:0a:80:84:c1:aa:c0:15:f2:9a:3f:eb:24:ef:54:dd:3f:
         dc:a7:e6:13:95:f0:65:50:58:06:f6:68:d7:b9:aa:73:c4:68:
         95:97:38:78:99:53:6b:e8:47:d8:ea:cf:76:ea:90:0e:49:d4:
         d3:7b:b6:63:ff:e0:b2:55:be:68:a3:3d:f2:cb:1b:10:55:a6:
         20:f3:e2:6b:6d:10:9e:af:76:43:4a:9d:d3:b9:8a:a4:03:a8:
         7b:ac:68:02:8f:a0:ee:0c:3d:ca:fc:7b:2c:7d:72:38:ea:eb:
         33:78:40:b4:ca:bf:13:b0:40:da:33:de:8d:0f:4a:ff:4e:15:
         61:35:95:eb:14:a8:46:f1:81:dd:6a:4f:12:08:90:e0:4b:ba:
         03:88:2f:6f:6e:12:51:5b:a4:31:2f:8b:e3:55:c8:9e:95:f8:
         ab:d1:84:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 09:17:52 2025 by rpki-client