Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/0d0510a5-fcdc-3276-b977-611e3d5baeae.roa
File:                     0d0510a5-fcdc-3276-b977-611e3d5baeae.roa (raw, json)
Hash identifier:          bZW3K0ySaxN67/XrNh8+96nLORpPePw6pvH1DPAjPE4=
Subject key identifier:   27:A4:CC:D4:8C:69:CF:16:0D:78:D7:21:70:B3:4B:30:5C:74:3A:BD
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F4328584A363FFE9CBF73197F035FD840
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/0d0510a5-fcdc-3276-b977-611e3d5baeae.roa
Signing time:             Mon 16 Jun 2025 16:03:21 +0000
ROA not before:           Mon 16 Jun 2025 16:03:21 +0000
ROA not after:            Sun 14 Sep 2025 16:03:21 +0000
asID:                     81
IP address blocks:        152.46.45.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:36:3f:fe:9c:bf:73:19:7f:03:5f:d8:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: Jun 16 16:03:21 2025 GMT
            Not After : Sep 14 16:03:21 2025 GMT
        Subject: CN=9848608a-b620-4244-b86e-2bfd9c3e4c13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:f3:75:90:64:3b:74:66:4b:4f:6b:9e:71:38:
                    17:03:0c:d3:df:39:1a:0b:33:a6:6f:05:99:2d:a9:
                    14:f4:4f:42:6a:e6:e2:84:13:4d:a9:0f:90:a7:8c:
                    42:86:07:4b:50:a5:c4:15:ce:26:94:9f:2f:60:2e:
                    53:1f:e1:24:99:08:4c:45:34:2f:7c:bd:67:51:ee:
                    8c:42:7c:1c:82:70:a5:ac:09:3b:1b:84:0f:87:46:
                    73:ae:52:0b:df:4f:d7:8a:d1:d9:d6:ab:a8:7b:1d:
                    90:5b:67:f3:ea:48:1e:34:f2:d4:46:b6:a6:7c:e3:
                    cf:bc:7a:0e:c0:b6:b5:04:d0:af:96:a6:9e:50:e9:
                    f1:cb:13:ce:dd:34:32:25:ad:e3:70:3c:d0:35:1c:
                    2b:1e:6a:71:e2:67:cd:2d:72:ca:ae:fd:0f:3d:92:
                    ba:a5:21:ee:47:3a:c2:91:8d:de:ba:d3:8b:cf:75:
                    80:e0:24:fd:90:34:35:33:b6:ac:4c:13:57:b8:67:
                    4d:03:8f:06:53:a1:53:ba:c6:ed:d9:71:57:73:7d:
                    91:e3:22:56:e3:54:2b:ad:16:14:21:4f:2f:2d:ab:
                    14:5b:71:1b:a7:c7:68:5b:4d:c6:32:f2:cb:8e:90:
                    53:38:92:13:44:69:9f:08:00:1a:2e:09:de:4e:56:
                    a8:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:A4:CC:D4:8C:69:CF:16:0D:78:D7:21:70:B3:4B:30:5C:74:3A:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/0d0510a5-fcdc-3276-b977-611e3d5baeae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.46.45.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:ce:a0:38:bd:bf:34:1c:ca:9e:7c:ea:41:8e:e5:b7:85:57:
         22:d9:5e:a6:08:26:e2:ba:2b:52:af:de:f4:8b:64:20:fa:de:
         4b:c5:4a:32:b1:d3:19:15:ca:9c:41:aa:f9:03:ba:f0:56:3c:
         ba:5d:cb:32:54:37:c4:6d:c3:ef:7d:2e:31:1a:fc:98:17:46:
         16:01:73:4b:97:5f:c0:98:8e:67:78:38:5e:ad:67:3e:6e:4e:
         03:04:df:7d:84:39:6b:9b:b9:39:ca:04:b2:59:b5:32:58:e3:
         12:1e:d6:14:7f:06:63:e8:18:c9:9a:3d:42:0f:6d:59:8b:d4:
         c2:98:a5:20:20:f0:de:fd:12:f6:cf:2d:30:fc:19:97:9f:d3:
         de:8e:5a:4b:71:da:cd:dd:68:b6:56:3f:a0:59:86:ab:57:43:
         21:71:0e:f5:7c:f8:6a:cc:c8:f0:72:8e:13:e5:d5:97:43:3b:
         97:e1:a6:21:7f:47:30:56:f6:cd:ec:d6:4a:e6:c9:f4:06:4d:
         83:3f:a0:63:10:9d:f0:9d:c0:0f:23:61:6d:2a:ad:e3:9b:76:
         e8:c5:ed:18:30:cb:38:39:03:dd:6b:b0:58:54:11:fc:51:c8:
         93:b7:cd:8b:2d:58:e9:d3:d2:10:6d:47:08:da:97:01:40:eb:
         f7:ae:f5:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 02:12:56 2025 by rpki-client