Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/a528e40a-979b-3aec-bc9a-e2097f2d86de.roa
File:                     a528e40a-979b-3aec-bc9a-e2097f2d86de.roa (raw, json)
Hash identifier:          XOZ/Z1cO98Rw8Uj4QxFAuMhns+85x97E2YG3le8Cg7Q=
Subject key identifier:   ED:2A:AE:F1:0C:A9:35:65:A7:3F:36:16:C7:DC:36:15:1A:CE:90:42
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584CC612050458D74BF3CF340D00
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/a528e40a-979b-3aec-bc9a-e2097f2d86de.roa
Signing time:             Fri 06 Feb 2026 14:00:40 +0000
ROA not before:           Fri 06 Feb 2026 14:00:40 +0000
ROA not after:            Thu 07 May 2026 13:00:40 +0000
asID:                     64267
IP address blocks:        147.53.116.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:c6:12:05:04:58:d7:4b:f3:cf:34:0d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Feb  6 14:00:40 2026 GMT
            Not After : May  7 13:00:40 2026 GMT
        Subject: CN=3c1fd33e-e39f-4efd-baf5-2328e64dd268
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:a3:31:6f:15:5a:ad:4d:9e:8e:52:99:b2:dd:
                    f0:9c:00:74:f5:40:ad:77:18:58:6a:71:f6:c1:bf:
                    cc:d1:b2:cb:dd:7d:da:b2:85:74:2d:6a:f6:54:27:
                    46:a5:fe:e0:e3:cc:ef:7d:cb:5b:9c:eb:2d:fb:5c:
                    29:c6:d2:db:3a:39:8b:aa:0c:aa:f4:57:31:76:c5:
                    69:89:67:81:c2:ae:4e:c7:06:0b:3a:86:cf:39:7c:
                    ff:78:88:e9:c0:bf:47:32:27:7e:b2:9f:81:21:f9:
                    dd:85:80:e3:7f:22:b0:c7:4f:ca:bf:29:87:2b:9c:
                    bd:e4:3e:44:73:e9:45:b4:c6:8d:08:78:f8:8d:d7:
                    b2:6f:17:20:19:67:ab:ac:d9:9b:d4:ab:64:fb:02:
                    81:ce:1f:c8:c7:1d:0a:90:6a:cd:25:65:56:a1:7c:
                    03:4f:d3:f6:29:af:be:bd:23:e4:bf:89:be:fd:d6:
                    39:a5:7c:f1:73:69:87:a9:0c:11:ea:ea:23:70:3a:
                    ac:b0:38:c5:bd:ae:67:39:ef:af:d4:c1:f4:8b:bb:
                    be:b6:19:9b:71:95:66:28:71:c8:2b:88:98:05:c0:
                    22:24:f0:7c:32:7a:bc:c2:c6:5e:56:e5:36:8b:21:
                    d9:04:dd:2f:f1:94:7f:9a:92:a1:7c:45:a3:b7:72:
                    51:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:2A:AE:F1:0C:A9:35:65:A7:3F:36:16:C7:DC:36:15:1A:CE:90:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/a528e40a-979b-3aec-bc9a-e2097f2d86de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.53.116.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:63:1c:4e:f3:22:ae:9d:b9:8a:a4:db:5f:e2:9f:2b:d6:1c:
         78:1e:52:36:ee:ee:f9:e3:cd:73:a3:43:e6:d1:2c:f7:87:a3:
         6b:39:99:b2:01:ab:65:b5:9b:4a:3a:53:ee:09:5d:05:00:e1:
         2b:21:ea:aa:fb:c5:eb:60:c4:43:c9:2f:19:5e:1c:c5:a0:08:
         de:a6:6f:84:fa:69:05:50:03:95:f3:27:3c:b2:ce:62:18:ab:
         b9:43:6e:99:79:30:95:29:e6:ae:c6:fb:b4:72:62:e1:96:6d:
         bd:3d:0d:f1:f9:c0:ad:75:55:71:92:dc:2f:4a:4a:35:9e:1b:
         7f:bb:af:a9:bd:94:67:a3:d0:08:56:0b:4f:e3:18:63:99:78:
         85:3a:fb:43:b8:fc:dc:d4:be:51:03:69:47:f5:20:50:6a:09:
         37:94:c6:0f:65:d8:fe:06:ef:7d:b8:c2:b2:06:18:f4:0d:e7:
         dd:07:4d:25:fd:9d:cc:14:4a:3c:c4:81:a8:be:1a:92:96:c2:
         3a:fe:6e:91:8b:d9:ed:ff:18:60:c9:4c:28:a4:66:8d:40:85:
         8e:56:15:86:f9:88:1f:07:64:ba:78:6b:4f:71:22:e0:b5:03:
         c4:9b:bc:93:b8:46:0e:a0:3f:19:a5:9d:38:04:a4:21:db:7a:
         5f:e5:c5:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:37:56 2026 by rpki-client