Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/21159c2a-f340-357b-b42c-81c0a031c899.roa
File:                     21159c2a-f340-357b-b42c-81c0a031c899.roa (raw, json)
Hash identifier:          4wvG2DR8jp/PjDOwFgf9myyHnkxMkmQ8u0dYIhLV85s=
Subject key identifier:   80:3F:BC:AB:45:09:C6:B9:D6:E9:7E:4B:E4:D9:4D:1B:AA:D8:F6:2A
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F4328584972E2EBF301163F2B5CA79380
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/21159c2a-f340-357b-b42c-81c0a031c899.roa
Signing time:             Mon 07 Apr 2025 16:33:12 +0000
ROA not before:           Mon 07 Apr 2025 16:33:12 +0000
ROA not after:            Sun 06 Jul 2025 16:33:12 +0000
asID:                     81
IP address blocks:        152.26.195.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Apr 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:72:e2:eb:f3:01:16:3f:2b:5c:a7:93:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: Apr  7 16:33:12 2025 GMT
            Not After : Jul  6 16:33:12 2025 GMT
        Subject: CN=18b0f16b-5a30-40b5-b3e4-0db22c42e9cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:e0:f4:1c:9e:54:78:5d:b4:62:f5:86:94:55:
                    60:4c:ef:4d:1e:89:de:df:09:b6:64:50:69:69:1b:
                    dc:56:03:f8:44:3a:1b:53:df:b1:2e:26:5f:7d:a7:
                    13:52:9e:75:00:25:c2:cf:d1:61:c3:d7:25:42:cb:
                    42:51:36:7e:87:2e:a8:f8:3a:da:57:43:86:c3:0e:
                    bc:eb:85:89:ca:83:55:27:c9:1c:6e:64:41:2a:91:
                    90:46:8f:4c:ca:78:fd:3d:5d:74:d0:05:8f:e8:72:
                    f0:98:40:b8:a2:48:54:d5:01:02:db:0e:95:aa:2f:
                    8b:ca:86:c3:e2:ad:c8:66:d0:b0:95:44:99:78:1f:
                    5c:5c:15:19:d0:44:8c:ae:a3:e8:42:c5:75:a1:9e:
                    dd:a1:8b:1e:d5:59:31:f5:4e:22:b6:27:e3:00:d4:
                    1b:5b:0e:49:55:d0:53:3f:5e:3e:2d:4c:42:b5:75:
                    8d:85:dc:26:b3:fd:f6:1f:20:02:d9:56:5c:47:eb:
                    24:cd:9a:e2:d4:28:06:e5:3c:33:93:83:1e:19:e8:
                    05:95:ed:c6:80:30:f5:c2:27:d1:f6:52:58:6c:f9:
                    f3:06:6d:de:18:58:e4:80:5b:d3:4d:87:5a:c8:20:
                    78:29:44:08:5a:d7:20:35:eb:60:f4:74:e9:1a:3e:
                    dc:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:3F:BC:AB:45:09:C6:B9:D6:E9:7E:4B:E4:D9:4D:1B:AA:D8:F6:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/21159c2a-f340-357b-b42c-81c0a031c899.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.26.195.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:fb:62:39:95:fa:3d:29:09:47:85:31:3f:37:b3:21:19:d0:
         86:e2:9a:1e:e9:44:e3:d5:50:14:89:02:b4:d0:04:8d:aa:d8:
         91:81:52:09:73:6b:c4:2a:8e:71:63:3f:00:72:0f:9c:9d:2f:
         5d:ac:2c:43:53:24:ea:5b:1f:8f:d3:27:41:e3:df:39:ad:3d:
         fc:80:c8:a8:fa:98:b3:2a:bf:ed:0a:9a:ef:10:de:83:63:8c:
         1e:d7:57:34:7e:4c:68:62:cf:49:56:ef:be:8f:de:0c:2f:db:
         4b:27:d3:69:6e:8c:0f:c6:ea:a1:3d:48:38:9c:25:d6:04:d2:
         7a:22:db:56:f2:44:bc:a1:3e:6c:71:12:ed:d1:38:48:49:6a:
         9f:23:d3:50:c7:1f:e9:1c:22:5f:4a:8d:5d:e5:38:82:e2:4a:
         17:1e:6a:6b:3f:3b:3f:4d:d6:2c:9e:1c:14:cd:55:67:4e:f8:
         51:cb:c4:bd:ac:4d:b4:67:bc:fd:c0:3b:9c:6c:cf:87:79:9a:
         4c:8b:5d:02:6e:ce:7b:9e:67:26:c3:bc:c3:44:fc:5c:ff:49:
         23:e3:a9:da:8d:8d:e3:c3:d3:62:1d:2c:0c:f5:8b:b9:1a:98:
         01:74:96:16:a3:bd:09:fb:cc:83:49:2a:ad:27:46:83:6c:68:
         b8:38:49:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 07:20:07 2025 by rpki-client