Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/45c41135-d2b8-3745-aabf-b884fc92cf55.roa
File:                     45c41135-d2b8-3745-aabf-b884fc92cf55.roa (raw, json)
Hash identifier:          z5pHF7a2/YXUSYJSEgZwInsh6FQ2b5s08OHSBdc5H9Y=
Subject key identifier:   FC:99:F0:A0:52:CA:1B:68:9C:B0:EF:DB:46:40:06:D1:7F:3A:71:C5
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584A384C840E56CE4AB81A81B400
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/45c41135-d2b8-3745-aabf-b884fc92cf55.roa
Signing time:             Tue 17 Jun 2025 09:40:12 +0000
ROA not before:           Tue 17 Jun 2025 09:40:12 +0000
ROA not after:            Mon 15 Sep 2025 09:40:12 +0000
asID:                     7029
IP address blocks:        147.53.125.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 21 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:38:4c:84:0e:56:ce:4a:b8:1a:81:b4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Jun 17 09:40:12 2025 GMT
            Not After : Sep 15 09:40:12 2025 GMT
        Subject: CN=d3822672-f14c-4e8b-a120-7b31d7de0c15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:65:bb:38:4c:54:09:15:30:89:0d:d6:06:ea:
                    29:82:c3:5c:59:59:89:30:7c:23:fd:df:71:fb:13:
                    b1:b6:33:c4:14:d9:85:4a:66:c6:22:eb:82:b9:e2:
                    49:b5:c0:8e:0b:6b:f9:78:c6:3e:fd:5a:9f:22:06:
                    dc:07:00:28:d4:71:22:44:3c:13:5b:8a:d8:08:42:
                    ea:56:a5:39:b9:cf:db:70:fa:78:ad:ce:70:41:23:
                    a8:95:94:a8:84:33:58:f3:c4:2d:da:5e:e8:86:3f:
                    0e:41:77:14:f9:bd:8b:6e:a6:cc:c5:e2:7e:d7:93:
                    77:06:13:72:d5:35:28:fd:d7:37:53:b6:47:1a:59:
                    4a:cf:16:c2:cf:ab:f4:f8:eb:ae:ae:e3:44:f0:aa:
                    12:11:85:b9:11:b3:e3:6f:ef:86:e9:59:e3:fd:37:
                    7d:78:b7:3c:0a:9a:2b:d7:ef:fb:44:95:2b:1e:2f:
                    2f:18:53:af:81:05:2b:f0:e6:ee:26:93:d4:33:38:
                    58:7a:20:ce:a9:68:64:6f:71:73:54:fa:8a:8a:3a:
                    4d:db:4c:a4:f4:c0:eb:4a:59:f1:33:4e:7d:16:dc:
                    32:65:39:ca:59:19:e4:32:dc:91:5b:00:73:bf:00:
                    53:fd:d3:71:ee:7a:be:d3:ba:10:f6:d3:e9:88:9f:
                    af:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:99:F0:A0:52:CA:1B:68:9C:B0:EF:DB:46:40:06:D1:7F:3A:71:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/45c41135-d2b8-3745-aabf-b884fc92cf55.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.53.125.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:b8:1f:bf:5f:7a:f3:27:e4:c7:df:e9:c2:18:8d:6f:8e:bb:
         39:67:b9:ce:bd:ac:43:cc:69:39:3d:94:19:66:bf:42:e9:e8:
         f6:8d:c4:61:a4:ab:89:20:41:76:df:9f:be:40:04:45:32:c5:
         10:69:e2:40:ca:2a:a6:9b:1e:93:94:9a:91:00:08:5a:f9:a5:
         5e:66:7a:ce:5c:f4:b1:ad:e5:43:9e:49:4e:7a:b8:44:6f:c3:
         75:1c:cc:55:26:84:00:ae:bc:23:2e:99:8e:ab:a9:c0:9a:a4:
         7c:ff:ba:db:b1:b9:b4:ba:f4:21:c3:2b:06:d2:a0:03:cd:ec:
         4e:84:a0:c4:55:e5:7b:31:a3:83:8b:c7:91:a3:b2:cc:6e:ba:
         65:01:76:b2:e1:e7:e5:f2:3b:da:9e:e2:4a:a5:36:0d:19:91:
         35:5b:17:48:f9:97:60:67:3a:78:3b:2d:5f:fa:06:42:aa:ce:
         61:49:b1:c9:40:17:6c:24:8c:7f:71:17:e6:e1:49:09:f8:e2:
         10:04:ea:3c:ec:b1:d1:17:d8:c8:17:40:53:2a:b5:2b:94:5c:
         3b:17:74:3b:3f:a7:f8:c9:70:46:14:55:59:a3:42:cd:5b:2e:
         3e:1b:8a:89:94:4d:11:76:37:95:a5:25:11:b9:52:a4:b8:84:
         b2:fd:7a:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 01:20:54 2025 by rpki-client