Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/4eb0630f-0096-3ef4-9edd-a5b3ee2fc4d1.roa
File:                     4eb0630f-0096-3ef4-9edd-a5b3ee2fc4d1.roa (raw, json)
Hash identifier:          XqaCHMFYlZlwqghl8KZ3YamBUb70nJYCL7AvGOCO1Xc=
Subject key identifier:   13:85:AB:54:62:10:03:14:30:98:6A:0F:A4:5B:05:85:D4:82:F1:CA
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584A384C22B79714580282A76580
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/4eb0630f-0096-3ef4-9edd-a5b3ee2fc4d1.roa
Signing time:             Tue 17 Jun 2025 09:39:26 +0000
ROA not before:           Tue 17 Jun 2025 09:39:26 +0000
ROA not after:            Mon 15 Sep 2025 09:39:26 +0000
asID:                     7029
IP address blocks:        147.53.124.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 21 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:38:4c:22:b7:97:14:58:02:82:a7:65:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Jun 17 09:39:26 2025 GMT
            Not After : Sep 15 09:39:26 2025 GMT
        Subject: CN=5b1c8803-79a7-44e6-9979-e7545f39e253
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:05:d8:27:69:de:28:d9:90:58:7f:9f:5b:fd:
                    e3:f9:9f:b5:1b:a1:6c:3e:20:c8:22:ed:1b:7b:78:
                    35:b7:c6:04:66:ca:e2:4f:4d:e5:73:18:77:5a:10:
                    eb:0a:48:64:ad:a7:3e:dd:05:7d:73:92:41:90:fc:
                    b5:29:c1:4d:7a:6f:07:4e:20:42:6d:1c:40:85:7d:
                    2c:c6:e5:8f:29:08:d3:2b:16:05:39:97:6d:65:37:
                    f8:46:4d:bb:7a:b1:5e:d1:7b:5b:96:78:0c:2f:8c:
                    82:09:fc:64:1f:55:47:f5:22:98:96:81:2a:ad:c8:
                    6c:6f:47:87:88:90:7f:dc:9f:0d:62:39:40:1d:b3:
                    8a:94:f0:b4:1d:47:f0:f2:aa:b2:b9:6b:49:22:51:
                    ec:97:32:37:23:9b:b0:f5:22:44:5f:5d:41:de:52:
                    6d:86:c4:54:29:9e:5a:a6:28:90:ad:f6:d0:b0:01:
                    5e:89:d3:57:bf:25:29:50:09:2f:11:89:6a:aa:45:
                    87:e1:f6:45:40:25:26:f5:71:f6:d5:97:d8:95:f4:
                    9f:9c:61:ed:0b:39:5f:b4:7c:8b:a7:73:72:e9:99:
                    f9:de:fe:aa:ec:9f:64:58:d7:90:4f:7c:f0:38:cf:
                    98:6f:ea:b2:72:60:45:46:30:2c:76:84:a4:fc:95:
                    99:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:85:AB:54:62:10:03:14:30:98:6A:0F:A4:5B:05:85:D4:82:F1:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/4eb0630f-0096-3ef4-9edd-a5b3ee2fc4d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.53.124.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:a1:f5:09:61:a7:24:25:1d:c3:b7:d2:73:f1:45:3d:fc:aa:
         08:57:18:45:99:d7:8c:a9:50:8e:34:79:3b:15:a8:b0:ad:81:
         2f:8b:6c:a4:02:f8:fd:d0:5c:69:b4:b4:c5:21:ba:cf:fc:02:
         45:08:bc:c9:23:88:6f:c6:1c:af:82:60:b9:c8:15:48:bc:3b:
         f7:e4:ee:46:2d:3c:26:cd:b5:74:73:02:4b:90:f8:b3:b0:91:
         ec:09:be:28:62:e1:3f:d1:26:c4:de:b9:f5:58:cb:f2:44:18:
         46:7c:7b:59:01:95:35:34:9f:2a:3b:4e:39:b5:03:80:d3:38:
         0b:ca:c0:50:72:8b:c0:dc:1d:82:f2:ac:23:9d:be:fb:0a:d4:
         0a:0b:cd:41:5f:49:5c:32:e1:49:4b:53:af:eb:31:a5:79:aa:
         07:e9:e9:62:f4:b6:f6:e5:5f:fe:75:57:08:2e:3d:1f:d0:8b:
         5f:d7:6a:69:82:33:cb:3d:f8:bd:f5:05:0b:71:61:dd:31:58:
         44:dc:ac:f5:c7:a9:a4:95:ff:e3:15:70:b5:08:02:34:88:c8:
         d9:dc:e9:1d:d8:e2:14:1a:48:c1:05:11:b6:eb:5a:ca:4e:2d:
         61:73:05:ad:cd:d1:ea:4e:45:6c:9d:5a:ea:6d:b4:af:b9:e0:
         b9:dc:18:c4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo4TCK3lxRYAoKnZYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0
YTY3MB4XDTI1MDYxNzA5MzkyNloXDTI1MDkxNTA5MzkyNlowLzEtMCsGA1UEAxMk
NWIxYzg4MDMtNzlhNy00NGU2LTk5NzktZTc1NDVmMzllMjUzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzgXYJ2neKNmQWH+fW/3j+Z+1G6FsPiDIIu0b
e3g1t8YEZsriT03lcxh3WhDrCkhkrac+3QV9c5JBkPy1KcFNem8HTiBCbRxAhX0s
xuWPKQjTKxYFOZdtZTf4Rk27erFe0XtblngML4yCCfxkH1VH9SKYloEqrchsb0eH
iJB/3J8NYjlAHbOKlPC0HUfw8qqyuWtJIlHslzI3I5uw9SJEX11B3lJthsRUKZ5a
piiQrfbQsAFeidNXvyUpUAkvEYlqqkWH4fZFQCUm9XH21ZfYlfSfnGHtCzlftHyL
p3Ny6Zn53v6q7J9kWNeQT3zwOM+Yb+qycmBFRjAsdoSk/JWZ/QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBOFq1RiEAMUMJhqD6RbBYXUgvHKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw
M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvNGViMDYzMGYtMDA5Ni0z
ZWY0LTllZGQtYTViM2VlMmZjNGQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx
NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl
NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm
NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkzV8MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB2h9QlhpyQlHcO30nPxRT38qghXGEWZ14ypUI40eTsVqLCtgS+LbKQC
+P3QXGm0tMUhus/8AkUIvMkjiG/GHK+CYLnIFUi8O/fk7kYtPCbNtXRzAkuQ+LOw
kewJvihi4T/RJsTeufVYy/JEGEZ8e1kBlTU0nyo7Tjm1A4DTOAvKwFByi8DcHYLy
rCOdvvsK1AoLzUFfSVwy4UlLU6/rMaV5qgfp6WL0tvblX/51VwguPR/Qi1/XammC
M8s9+L31BQtxYd0xWETcrPXHqaSV/+MVcLUIAjSIyNnc6R3Y4hQaSMEFEbbrWspO
LWFzBa3N0epORWydWupttK+54LncGMQ=
-----END CERTIFICATE-----
Generated at Thu Jun 19 09:22:51 2025 by rpki-client