Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/7fff2205-8837-3310-bc52-15fa45af3ac0.roa
File:                     7fff2205-8837-3310-bc52-15fa45af3ac0.roa (raw, json)
Hash identifier:          jm9Ly+cbzBLqsjgcGZOnfKVAFNmsmH7OHQKPsQdk0b0=
Subject key identifier:   D0:67:08:9E:80:5E:5C:C6:82:A1:76:8F:1C:BD:1B:40:6B:39:89:5A
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584F3CE2977340E2B6E7494A33A0
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/7fff2205-8837-3310-bc52-15fa45af3ac0.roa
Signing time:             Sun 20 Sep 2026 13:00:12 +0000
ROA not before:           Sun 20 Sep 2026 13:00:12 +0000
ROA not after:            Sat 19 Dec 2026 14:00:12 +0000
asID:                     22516
IP address blocks:        152.44.103.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3c:e2:97:73:40:e2:b6:e7:49:4a:33:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Sep 20 13:00:12 2026 GMT
            Not After : Dec 19 14:00:12 2026 GMT
        Subject: CN=025f80d7-99de-4289-94d6-c1df3fa383bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:6c:41:1f:c5:81:f6:91:62:e0:93:f6:95:9f:
                    92:73:fa:70:36:57:f7:da:56:e9:60:e2:36:64:3f:
                    c3:e2:6e:12:cd:d1:f5:dc:93:fb:dd:4c:5e:e2:ec:
                    bd:96:1a:dd:5a:74:b8:15:35:90:b5:c6:e3:1d:fa:
                    2d:f1:d2:8e:6c:c1:9e:c6:26:09:a3:65:77:a2:de:
                    66:4b:05:83:2b:12:04:4a:b9:e8:62:ba:22:ab:8d:
                    ea:38:49:d6:4c:21:e5:11:71:67:e3:ef:2a:be:5d:
                    38:d2:f2:e0:ce:81:c4:e2:10:35:e5:80:06:bd:b8:
                    b8:81:41:bd:0b:1f:72:28:b2:5e:13:4d:eb:49:06:
                    af:a1:ed:66:b0:f7:a6:d8:ea:a3:72:ef:41:f5:ad:
                    1c:9b:b2:2e:6e:d5:1f:24:b1:8a:8a:7e:c1:52:f3:
                    ff:e0:0f:56:fb:9b:f7:4a:66:d4:e4:f8:09:ef:99:
                    e1:ee:31:f0:a4:26:8a:69:ea:71:af:e8:0f:30:b0:
                    bf:d0:43:41:02:bd:26:2f:25:9b:8c:9a:6c:b9:d6:
                    d3:bd:03:ea:a5:b8:5d:b7:04:6f:1f:61:e4:ff:24:
                    56:0e:49:2a:fd:53:a0:55:0a:2a:3b:e8:77:81:12:
                    55:90:06:44:4c:9b:a8:58:55:b6:94:77:c3:27:53:
                    ec:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:67:08:9E:80:5E:5C:C6:82:A1:76:8F:1C:BD:1B:40:6B:39:89:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/7fff2205-8837-3310-bc52-15fa45af3ac0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.44.103.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:09:82:eb:c2:b6:80:30:a8:60:38:6e:d5:3c:af:04:0a:95:
         ae:70:15:9e:e4:3d:6c:8c:2b:72:42:01:f3:2c:8a:9a:a2:6e:
         e9:ef:e9:b0:77:a5:b5:ed:46:6d:eb:af:36:86:08:9d:f3:2a:
         80:43:cc:73:a7:12:aa:4c:ac:0d:72:96:d0:36:24:30:30:6c:
         53:ff:2a:c9:8b:43:4d:f5:e2:90:af:30:9e:4a:02:58:a0:97:
         31:4c:51:6f:d5:0e:8b:eb:e9:56:52:c4:83:7f:58:03:7d:bf:
         b0:fa:77:28:00:aa:93:2c:f1:7d:5f:50:de:4f:5a:02:82:63:
         ab:97:59:7c:71:24:d4:f9:bb:44:ca:c3:9f:5a:b7:73:37:32:
         54:5f:8f:6e:90:d2:38:da:cc:5b:b0:8d:50:f1:ac:f3:14:05:
         44:cd:77:33:3e:b2:6e:09:1e:c3:03:9b:19:25:9a:b2:cc:9a:
         cd:ce:eb:51:82:9a:04:1d:23:6c:17:b3:da:0e:9e:30:b4:9e:
         2a:50:5e:e9:74:91:a6:78:1f:39:31:d0:13:d5:61:3d:77:33:
         78:ff:20:2b:5b:e1:b8:49:5e:32:fd:19:2e:28:f5:e5:36:09:
         9f:7d:be:b8:ef:ed:73:a6:90:9d:a3:1e:02:3a:8b:96:bc:23:
         be:57:07:87
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE884pdzQOK250lKM6AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0
YTY3MB4XDTI2MDkyMDEzMDAxMloXDTI2MTIxOTE0MDAxMlowLzEtMCsGA1UEAxMk
MDI1ZjgwZDctOTlkZS00Mjg5LTk0ZDYtYzFkZjNmYTM4M2JiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzWxBH8WB9pFi4JP2lZ+Sc/pwNlf32lbpYOI2
ZD/D4m4SzdH13JP73Uxe4uy9lhrdWnS4FTWQtcbjHfot8dKObMGexiYJo2V3ot5m
SwWDKxIESrnoYroiq43qOEnWTCHlEXFn4+8qvl040vLgzoHE4hA15YAGvbi4gUG9
Cx9yKLJeE03rSQavoe1msPem2Oqjcu9B9a0cm7IubtUfJLGKin7BUvP/4A9W+5v3
SmbU5PgJ75nh7jHwpCaKaepxr+gPMLC/0ENBAr0mLyWbjJpsudbTvQPqpbhdtwRv
H2Hk/yRWDkkq/VOgVQoqO+h3gRJVkAZETJuoWFW2lHfDJ1Ps/wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNBnCJ6AXlzGgqF2jxy9G0BrOYlaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw
M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvN2ZmZjIyMDUtODgzNy0z
MzEwLWJjNTItMTVmYTQ1YWYzYWMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx
NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl
NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm
NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmCxnMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJAJguvCtoAwqGA4btU8rwQKla5wFZ7kPWyMK3JCAfMsipqibunv6bB3
pbXtRm3rrzaGCJ3zKoBDzHOnEqpMrA1yltA2JDAwbFP/KsmLQ0314pCvMJ5KAlig
lzFMUW/VDovr6VZSxIN/WAN9v7D6dygAqpMs8X1fUN5PWgKCY6uXWXxxJNT5u0TK
w59at3M3MlRfj26Q0jjazFuwjVDxrPMUBUTNdzM+sm4JHsMDmxklmrLMms3O61GC
mgQdI2wXs9oOnjC0nipQXul0kaZ4Hzkx0BPVYT13M3j/ICtb4bhJXjL9GS4o9eU2
CZ99vrjv7XOmkJ2jHgI6i5a8I75XB4c=
-----END CERTIFICATE-----
Generated at Sun Sep 20 17:55:29 2026 by rpki-client