Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/2deff639-90d8-3d59-a85a-34c79c9f9a7c.roa
File:                     2deff639-90d8-3d59-a85a-34c79c9f9a7c.roa (raw, json)
Hash identifier:          ADM/xGYTS9fG2m5lhnQzuM+TRPbZlNWEfcjXUZgwaXE=
Subject key identifier:   D0:63:5B:98:E8:19:91:49:6A:DE:77:D0:C5:CF:98:1A:81:9C:DF:E9
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584CD13CAFBB4D4BEAA47A454BC0
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/2deff639-90d8-3d59-a85a-34c79c9f9a7c.roa
Signing time:             Tue 10 Feb 2026 14:00:41 +0000
ROA not before:           Tue 10 Feb 2026 14:00:41 +0000
ROA not after:            Mon 11 May 2026 13:00:41 +0000
asID:                     397630
IP address blocks:        147.53.115.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:d1:3c:af:bb:4d:4b:ea:a4:7a:45:4b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Feb 10 14:00:41 2026 GMT
            Not After : May 11 13:00:41 2026 GMT
        Subject: CN=3ad10432-6215-4811-82be-4b0235d3d095
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:71:c2:d8:ae:29:d5:6d:5f:35:97:5f:ed:88:
                    5a:f2:a4:f6:91:07:7d:4a:f8:7f:ce:72:a1:c7:de:
                    8d:7f:dc:88:15:24:ea:81:21:4d:c1:93:cb:4f:e0:
                    52:65:08:47:b0:73:85:a0:5c:01:e9:96:08:cf:fc:
                    31:68:66:43:89:0e:87:e0:d5:2b:4b:69:2d:2c:ee:
                    a7:f8:a4:58:61:ff:6c:87:9c:25:22:3e:c4:46:4f:
                    85:24:07:43:b7:5b:b2:85:23:6e:72:44:39:b0:e7:
                    46:c3:e1:b5:f0:ff:b7:fc:19:95:d4:00:7a:cf:9a:
                    11:15:23:d9:55:d3:62:69:59:8d:d0:5b:af:ff:67:
                    13:ab:74:b8:cb:1f:88:eb:3c:89:ac:b9:75:69:07:
                    85:a7:a0:5f:67:1e:e1:a7:03:39:c0:66:aa:66:2a:
                    8c:c6:39:14:77:5d:13:d6:31:c6:c1:53:61:57:93:
                    c7:eb:f4:20:e7:f1:98:c7:f5:af:5b:ee:d0:ce:1f:
                    d6:b6:14:66:7c:c9:28:6c:f1:2c:69:a5:3a:13:44:
                    b0:f4:eb:70:d8:91:e7:01:e2:22:6f:8c:07:06:b0:
                    7e:e8:93:a2:60:29:6d:fb:fa:e2:9b:02:3a:f3:8f:
                    2a:89:5d:67:c0:08:1c:71:ba:7f:f6:29:65:ae:17:
                    0e:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:63:5B:98:E8:19:91:49:6A:DE:77:D0:C5:CF:98:1A:81:9C:DF:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/2deff639-90d8-3d59-a85a-34c79c9f9a7c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.53.115.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b4:1c:ff:8c:9e:f8:b6:62:79:60:ba:fc:d8:f6:95:d5:d2:f0:
         7f:5f:31:06:55:68:db:67:eb:25:77:3b:69:41:7d:25:94:b9:
         9b:b8:18:9b:6e:53:ec:83:1c:dd:81:f4:0c:af:47:34:7b:77:
         de:7b:d8:f2:9f:ef:9e:2d:6c:59:94:b8:d8:ac:8e:e2:46:69:
         f0:ac:77:ff:7e:f2:c3:8d:53:cc:ca:f5:c3:c5:eb:c9:d7:00:
         f0:0f:c3:b9:90:e5:04:6d:45:1c:1f:88:77:d5:65:67:65:8c:
         52:10:03:b9:b9:cb:71:11:87:a5:c1:a9:7c:cd:d4:9e:f8:86:
         14:70:8d:7b:7e:64:59:e0:f8:3e:11:dd:1e:54:5f:52:5d:c4:
         a7:51:e9:0a:16:2d:a1:d2:1f:91:29:99:f8:d6:43:b6:40:30:
         83:61:a1:42:b6:c8:a5:3b:50:e6:fe:a2:2f:48:2c:a4:1a:b4:
         92:89:ed:f2:42:79:e7:9d:12:ba:83:0c:ac:8c:70:1b:d5:16:
         6e:eb:c0:94:08:b1:cb:61:4b:8d:cf:2e:c8:3c:1f:38:3b:29:
         b4:70:fd:d5:21:14:37:ed:8f:2c:34:36:ec:78:78:fa:e3:a0:
         2d:b4:81:81:9d:95:dd:e8:ba:0d:46:9e:bc:0d:b2:5a:66:ed:
         d3:9e:da:17
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzRPK+7TUvqpHpFS8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0
YTY3MB4XDTI2MDIxMDE0MDA0MVoXDTI2MDUxMTEzMDA0MVowLzEtMCsGA1UEAxMk
M2FkMTA0MzItNjIxNS00ODExLTgyYmUtNGIwMjM1ZDNkMDk1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtXHC2K4p1W1fNZdf7Yha8qT2kQd9Svh/znKh
x96Nf9yIFSTqgSFNwZPLT+BSZQhHsHOFoFwB6ZYIz/wxaGZDiQ6H4NUrS2ktLO6n
+KRYYf9sh5wlIj7ERk+FJAdDt1uyhSNuckQ5sOdGw+G18P+3/BmV1AB6z5oRFSPZ
VdNiaVmN0Fuv/2cTq3S4yx+I6zyJrLl1aQeFp6BfZx7hpwM5wGaqZiqMxjkUd10T
1jHGwVNhV5PH6/Qg5/GYx/WvW+7Qzh/WthRmfMkobPEsaaU6E0Sw9Otw2JHnAeIi
b4wHBrB+6JOiYClt+/rimwI6848qiV1nwAgccbp/9illrhcOTQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNBjW5joGZFJat530MXPmBqBnN/pMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw
M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvMmRlZmY2MzktOTBkOC0z
ZDU5LWE4NWEtMzRjNzljOWY5YTdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx
NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl
NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm
NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkzVzMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALQc/4ye+LZieWC6/Nj2ldXS8H9fMQZVaNtn6yV3O2lBfSWUuZu4GJtu
U+yDHN2B9AyvRzR7d9572PKf754tbFmUuNisjuJGafCsd/9+8sONU8zK9cPF68nX
APAPw7mQ5QRtRRwfiHfVZWdljFIQA7m5y3ERh6XBqXzN1J74hhRwjXt+ZFng+D4R
3R5UX1JdxKdR6QoWLaHSH5EpmfjWQ7ZAMINhoUK2yKU7UOb+oi9ILKQatJKJ7fJC
eeedErqDDKyMcBvVFm7rwJQIscthS43PLsg8Hzg7KbRw/dUhFDftjyw0Nux4ePrj
oC20gYGdld3oug1GnrwNslpm7dOe2hc=
-----END CERTIFICATE-----
Generated at Mon Mar 2 16:10:18 2026 by rpki-client