Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/009d4177-60c2-3de1-8595-59a64073456e.roa
File:                     009d4177-60c2-3de1-8595-59a64073456e.roa (raw, json)
Hash identifier:          F6pehekpQosqoTQWaA07WmPOTsa124v8HG/aw8GcrU8=
Subject key identifier:   5C:EA:49:A9:91:04:01:0C:30:F9:D5:0A:B7:03:AF:F1:82:55:B9:C2
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F4328584972E2EC92F267A9BD6F67EC80
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/009d4177-60c2-3de1-8595-59a64073456e.roa
Signing time:             Mon 07 Apr 2025 16:33:12 +0000
ROA not before:           Mon 07 Apr 2025 16:33:12 +0000
ROA not after:            Sun 06 Jul 2025 16:33:12 +0000
asID:                     81
IP address blocks:        152.26.212.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:72:e2:ec:92:f2:67:a9:bd:6f:67:ec:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: Apr  7 16:33:12 2025 GMT
            Not After : Jul  6 16:33:12 2025 GMT
        Subject: CN=c07f0834-07ed-462a-8042-54532f22e5a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:17:a6:0b:90:f9:23:eb:a9:c8:e8:11:c4:6b:
                    03:dd:d1:b6:7d:08:4a:63:cd:90:be:e4:e9:39:7e:
                    c9:7d:11:27:b5:dd:88:0e:1e:c9:74:e9:f0:2e:79:
                    1f:a3:2f:7e:9f:0e:39:88:29:62:c3:b5:70:20:0d:
                    95:be:ec:58:73:ef:a5:dc:9e:94:17:eb:47:1a:f6:
                    42:19:fe:19:10:62:ef:e8:4c:d5:f6:7c:c6:d3:dc:
                    fe:5a:44:19:61:ea:e7:ab:5e:16:bc:ed:7b:3f:95:
                    04:ce:f4:ed:af:58:f2:03:9c:7a:f0:a4:fb:32:c4:
                    7f:b8:a6:81:e4:ab:1c:6e:a9:0d:65:3e:05:f7:9f:
                    33:0a:3b:43:cf:2d:c4:b7:d0:a2:a0:bf:41:82:b7:
                    2b:d8:4d:0f:fc:75:5a:93:ec:0b:37:df:01:9c:72:
                    84:5e:91:72:62:a1:bd:04:47:ab:24:10:9f:d8:bb:
                    f5:b2:72:27:5b:56:d5:ca:6e:5d:72:5f:53:05:cb:
                    38:5b:ac:03:3d:93:40:7b:cd:8b:0e:7d:67:57:9a:
                    89:ff:5b:9d:6d:76:d0:b1:60:21:32:5b:8d:2d:77:
                    61:24:ea:36:f3:85:d1:7a:b5:d0:4e:5e:57:dd:1a:
                    15:04:93:26:b3:c6:66:37:69:3d:e8:90:e3:6f:c4:
                    2f:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:EA:49:A9:91:04:01:0C:30:F9:D5:0A:B7:03:AF:F1:82:55:B9:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/009d4177-60c2-3de1-8595-59a64073456e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.26.212.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:e8:1c:08:2f:80:52:32:47:97:b8:2b:73:a8:d8:29:74:2d:
         99:4c:56:e4:15:e1:83:5e:b1:e3:89:77:16:ab:6a:00:29:45:
         b3:4b:c1:3d:00:4a:ed:c2:1f:62:50:28:e9:8a:ef:27:b3:ff:
         1a:56:16:7f:47:04:49:9f:7a:e8:34:50:f7:26:4c:8a:49:82:
         1c:ba:1e:ce:26:b3:d5:10:17:f4:a8:c6:04:c7:65:09:99:f3:
         54:0c:24:35:09:13:ac:37:dd:18:b6:3d:fb:20:fe:82:70:d3:
         8c:52:d0:e1:fb:14:6f:35:7a:7b:fd:cc:1a:04:f4:37:c4:b5:
         d1:5e:c1:37:ff:46:ca:e1:50:34:2b:e3:f0:9d:ac:12:8b:4d:
         a5:c8:cb:eb:fd:d4:df:a3:88:35:1d:9e:6f:46:4d:0f:b4:78:
         2e:8b:c5:77:a1:06:17:2e:db:fa:2b:12:81:19:dd:ff:d2:5f:
         02:da:7e:7d:96:ed:9f:a9:68:93:ab:28:7c:e6:69:0a:c6:87:
         85:ac:b6:af:4f:01:28:b6:a9:a6:fb:af:fd:1b:9e:d0:e2:86:
         b8:4d:0e:38:b2:d8:63:13:83:54:64:3b:ee:b7:fd:b9:12:e7:
         3d:51:15:1f:ea:53:0b:72:53:08:d0:09:a1:5c:c7:86:85:51:
         3d:d4:ee:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 02:53:05 2025 by rpki-client