Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/04303cbf-76da-338a-8b6d-2fb37fa57c03.roa
File:                     04303cbf-76da-338a-8b6d-2fb37fa57c03.roa (raw, json)
Hash identifier:          SGIBCwOPHPGWG8EzC9VkjMT5MDWvIWJ3WWzZlLMhwiM=
Subject key identifier:   72:A4:86:34:F1:70:58:61:69:37:BA:B3:25:F3:44:A3:E3:81:5E:68
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F4328584972E2EFF052CD716162256500
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/04303cbf-76da-338a-8b6d-2fb37fa57c03.roa
Signing time:             Mon 07 Apr 2025 16:33:14 +0000
ROA not before:           Mon 07 Apr 2025 16:33:14 +0000
ROA not after:            Sun 06 Jul 2025 16:33:14 +0000
asID:                     81
IP address blocks:        152.46.3.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:72:e2:ef:f0:52:cd:71:61:62:25:65:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: Apr  7 16:33:14 2025 GMT
            Not After : Jul  6 16:33:14 2025 GMT
        Subject: CN=5eca6440-23ca-4789-ad3d-4f2dc3e87352
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:55:03:df:1e:1b:d7:07:7d:cd:51:88:bf:25:
                    f5:0e:bc:f8:fe:7c:be:22:81:db:d8:d3:db:60:f6:
                    ff:02:8f:98:87:24:e4:91:31:a1:02:3c:d6:2f:79:
                    fe:5c:65:61:19:c9:63:cd:93:c8:ef:bd:2d:12:d4:
                    ed:93:66:3b:30:09:78:7a:19:8b:56:a5:a9:e7:15:
                    36:21:b0:31:a8:47:e0:56:9c:92:f6:9e:c3:e4:a4:
                    a2:83:fc:de:95:6c:6b:48:67:fc:b6:71:da:6e:a7:
                    fe:9b:23:15:f7:ee:8c:93:e6:e8:ff:7e:0a:d2:09:
                    a7:e9:d3:64:f6:75:bb:b5:68:67:cf:14:2f:4d:ca:
                    55:c8:cf:c3:65:a3:e8:fc:d9:f7:6c:95:53:05:50:
                    b4:d6:d7:4c:da:c4:7e:27:cc:cd:6c:77:85:e8:c1:
                    74:54:fa:47:d8:ec:91:74:47:2f:3e:e9:74:28:85:
                    a1:d4:9d:8b:fa:9e:c7:44:60:e8:c9:e8:e4:7d:4e:
                    8c:f8:52:6e:1f:de:cb:44:7e:fd:5e:fd:77:7d:c2:
                    79:e0:96:ef:b1:b6:18:59:40:92:88:67:e1:9b:bf:
                    d3:9b:91:d9:c2:47:0f:b5:3d:49:b1:51:83:5a:8a:
                    5f:9a:1b:7c:2f:72:51:2d:00:c8:83:9b:dc:aa:38:
                    37:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:A4:86:34:F1:70:58:61:69:37:BA:B3:25:F3:44:A3:E3:81:5E:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/04303cbf-76da-338a-8b6d-2fb37fa57c03.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.46.3.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:df:24:63:e5:f1:3a:f5:99:d5:a4:13:3a:ea:97:c5:04:c1:
         b9:20:6d:7a:9f:c5:a1:17:5e:c9:43:86:a7:9c:95:11:06:d6:
         70:51:27:c7:65:67:f2:a6:2a:e3:a0:95:e9:6c:e1:d8:e1:ea:
         c4:5e:89:10:22:b9:28:03:2c:5f:35:4a:ca:09:cd:ba:c6:74:
         2e:56:a0:be:b3:21:93:26:00:4a:89:f2:d1:e4:f4:48:34:bf:
         90:85:22:71:0f:b3:b6:d7:a1:e0:f7:12:51:37:e9:41:95:68:
         8b:f3:dc:4c:43:04:3e:f5:2b:46:06:bf:c6:02:1e:e2:fd:32:
         67:cb:22:76:8d:e2:7c:ac:13:06:b3:af:15:c0:34:8d:b6:14:
         dc:f5:09:c9:99:e4:43:cf:08:93:24:3e:0b:7a:f7:d9:3c:12:
         d1:66:7c:53:0f:f6:d5:63:b4:b5:7e:d9:da:79:3b:2a:87:f8:
         7e:b2:df:4c:c0:36:30:3c:12:f0:c3:22:81:32:dc:db:d1:9f:
         07:b6:35:89:56:43:ee:bf:5b:1e:66:f1:51:3e:f8:83:be:67:
         db:1c:ab:50:cf:a0:29:5b:84:2a:32:0f:d3:71:7a:a9:91:53:
         ce:e0:ca:29:04:32:e5:c3:65:eb:c9:39:fe:6c:b5:36:47:d3:
         a2:f7:70:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 15:24:36 2025 by rpki-client