Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/1f7ab97c-c960-3a45-af93-af2c8adb5fd9.roa
File:                     1f7ab97c-c960-3a45-af93-af2c8adb5fd9.roa (raw, json)
Hash identifier:          6n2RceBIkj2tShdlnuFSVHKCLRIz1IrylNg0XOA0rrs=
Subject key identifier:   F8:3C:E2:26:E3:23:28:94:E7:C6:72:D5:78:6B:A6:6F:28:B2:7E:9B
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F4328584972E2E900F3061EDA89033680
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/1f7ab97c-c960-3a45-af93-af2c8adb5fd9.roa
Signing time:             Mon 07 Apr 2025 16:33:10 +0000
ROA not before:           Mon 07 Apr 2025 16:33:10 +0000
ROA not after:            Sun 06 Jul 2025 16:33:10 +0000
asID:                     81
IP address blocks:        152.45.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:72:e2:e9:00:f3:06:1e:da:89:03:36:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: Apr  7 16:33:10 2025 GMT
            Not After : Jul  6 16:33:10 2025 GMT
        Subject: CN=f51c220c-2373-4c76-a45d-eac93a26139f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:11:2e:e3:60:29:36:b0:62:6f:38:a1:c8:5a:
                    03:5a:d5:f9:84:13:da:7c:51:d1:76:1a:2d:31:0f:
                    43:93:f3:c8:c7:e1:05:90:a5:27:ea:17:06:34:9a:
                    26:cc:fa:22:9b:a9:25:69:8d:30:bd:d1:ab:1a:3b:
                    29:ad:4a:0d:f1:5f:0b:0f:29:78:47:56:e6:ea:f4:
                    e7:3e:c2:51:74:fd:4f:fb:a7:90:70:4c:44:cd:85:
                    01:b9:51:a8:87:9e:97:3a:d3:78:c1:8a:b8:ae:d9:
                    5b:03:12:df:82:7d:c5:0c:59:21:ab:0d:1e:f0:3b:
                    f4:b9:1b:a8:9e:7a:61:c1:58:d9:35:ed:3f:19:12:
                    9e:04:38:f6:21:00:13:1d:79:d3:e2:75:5c:da:eb:
                    76:53:b1:8f:7c:9f:d9:e7:07:e6:8a:94:9c:36:29:
                    9a:67:89:df:f7:0f:ec:57:fb:07:80:d0:6d:a3:31:
                    7a:2f:a6:3b:51:89:3c:d7:04:6c:2d:5f:09:e7:30:
                    2a:ce:2c:d8:17:63:c2:de:e6:53:ec:11:be:55:38:
                    7c:f3:0f:63:b9:8f:56:4a:36:85:69:0f:35:5b:ac:
                    a1:ea:fb:46:ba:3d:e3:f8:2c:81:1c:ff:de:4d:c8:
                    73:31:2d:e5:b6:c7:b1:20:d1:54:f5:60:9c:64:7f:
                    e0:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:3C:E2:26:E3:23:28:94:E7:C6:72:D5:78:6B:A6:6F:28:B2:7E:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/1f7ab97c-c960-3a45-af93-af2c8adb5fd9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.45.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:21:eb:f7:bf:95:b4:b6:f2:1c:9b:bf:e7:40:67:9e:ab:58:
         9c:4c:8d:69:e4:3d:35:de:0f:12:f3:57:be:2e:75:45:a0:cf:
         0d:d3:bd:07:a9:5d:9c:33:1d:fa:31:b3:cd:af:4e:b5:12:fd:
         ac:c8:77:71:f4:36:59:61:6e:8d:76:b8:2f:2b:64:99:b2:03:
         03:04:8b:71:5d:2f:e7:67:f1:8e:b0:20:46:36:2e:45:1b:4c:
         52:50:51:4e:9b:d2:83:2c:fd:48:b1:38:f4:4a:09:cb:76:1a:
         ae:cd:24:09:3b:ca:c0:b6:fa:e0:58:c0:a0:e7:e8:69:2c:b6:
         3a:53:c7:8c:65:3d:c0:eb:27:cb:1d:c2:07:73:b6:ef:79:dc:
         59:00:9b:d5:12:79:9d:dc:b6:57:2f:6a:5f:73:39:0d:f7:e3:
         a0:23:0f:48:9b:c0:a4:50:66:9a:36:fa:c0:b2:2b:21:d3:8a:
         0e:f3:53:1d:1b:05:23:84:ee:dc:9e:01:b9:49:02:58:11:ec:
         5b:70:e8:18:05:66:ac:af:02:a2:34:51:27:9f:b2:84:dd:1a:
         02:d8:c4:54:8f:3a:97:76:53:1e:76:92:aa:55:fc:e5:35:f5:
         a0:48:8e:2f:fe:f0:56:ca:ee:f1:fc:3d:fb:c9:0f:2b:41:25:
         ca:6a:7b:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 23:28:41 2025 by rpki-client