Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/2251e1ae-3f79-3a9e-8317-73565b3a5976.roa
File:                     2251e1ae-3f79-3a9e-8317-73565b3a5976.roa (raw, json)
Hash identifier:          Igh3pdHdRrklRvBRlK3uomCr2981fVQP2hcMjBqaIAA=
Subject key identifier:   2F:DF:34:CE:D1:6D:06:AD:FC:9A:1A:15:6A:F2:46:26:C7:97:55:9D
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F4328584972E2EB34B8D684F89F46C520
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/2251e1ae-3f79-3a9e-8317-73565b3a5976.roa
Signing time:             Mon 07 Apr 2025 16:33:11 +0000
ROA not before:           Mon 07 Apr 2025 16:33:11 +0000
ROA not after:            Sun 06 Jul 2025 16:33:11 +0000
asID:                     81
IP address blocks:        152.22.112.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:72:e2:eb:34:b8:d6:84:f8:9f:46:c5:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: Apr  7 16:33:11 2025 GMT
            Not After : Jul  6 16:33:11 2025 GMT
        Subject: CN=47967272-0b82-4c60-9f8e-5440bcc96f7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:51:f6:5a:e9:87:85:d4:da:b1:b6:be:48:0f:
                    7b:77:49:2b:3f:ce:10:c8:c7:3d:77:55:db:c0:4a:
                    11:4f:0f:c5:3b:b7:b3:c5:9d:fa:c6:a2:91:12:67:
                    74:ab:76:08:af:5b:62:34:6a:48:8a:70:ff:8b:09:
                    51:c9:51:a0:ca:61:cb:41:b8:a0:82:54:c6:0e:5e:
                    e4:cd:c4:a5:bd:7a:17:70:da:9e:d3:85:1b:63:c0:
                    58:01:46:51:5d:f4:c9:fa:86:7f:41:c0:66:71:f6:
                    cc:ae:54:4d:1f:4c:c1:43:11:51:e8:6d:15:9f:f3:
                    8a:12:94:28:06:39:02:68:47:db:ec:20:d8:67:2e:
                    91:92:f5:e4:d7:5e:b6:f1:d1:6a:af:3d:70:6d:4a:
                    fa:6e:e2:9e:53:1f:2d:de:b9:01:ee:30:1f:fd:4d:
                    9c:04:e8:15:97:3c:34:cf:d3:8c:46:bf:9f:d6:63:
                    4e:30:1f:86:0f:e9:9b:26:e4:21:c8:32:84:08:a8:
                    c4:0d:72:ee:51:64:35:6c:43:11:b4:3a:fb:0b:b9:
                    d4:d2:7d:19:06:c6:76:b5:fa:57:de:ea:86:33:90:
                    0e:e1:fd:7b:78:ab:43:6d:af:c0:bf:ac:98:fe:0f:
                    b2:37:33:68:0e:e6:33:0c:ff:c5:5c:93:96:52:84:
                    86:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:DF:34:CE:D1:6D:06:AD:FC:9A:1A:15:6A:F2:46:26:C7:97:55:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/2251e1ae-3f79-3a9e-8317-73565b3a5976.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.22.112.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:c1:08:48:2f:ba:2a:9d:b3:e3:97:82:9e:0b:59:83:36:59:
         14:8a:cf:f2:61:28:79:aa:79:83:85:1d:7f:b2:51:a7:3b:b7:
         dc:84:56:1b:64:ec:a1:08:55:0b:52:60:96:9b:e8:55:ba:13:
         41:20:42:fe:4a:78:1a:c0:f7:ff:be:4b:ed:6f:61:8c:10:ec:
         53:d6:53:3b:1f:22:d2:75:5e:79:2b:ae:e7:9a:62:9c:9e:22:
         28:c3:e2:8d:a5:47:74:0b:ee:f4:59:99:d7:d8:a5:38:aa:3e:
         a8:6f:7a:8b:1c:d3:02:98:84:09:13:08:f7:20:8a:7c:cf:3b:
         3b:e3:d6:c7:d2:a1:c2:a7:36:41:da:1a:b4:31:8c:15:19:02:
         ef:6c:37:4c:8d:1d:41:89:3b:56:bd:4e:10:f4:65:1b:8c:ed:
         ea:15:5b:c3:1f:5c:34:b3:14:cd:da:3e:1b:bb:1d:47:8d:50:
         e4:92:7a:d3:47:f2:29:c4:9a:57:1f:ac:d2:21:b4:4f:77:40:
         e4:a8:b4:57:f7:74:06:c9:fc:5a:2d:a9:aa:d9:fe:40:e9:05:
         f5:69:2b:ee:1d:ea:46:dd:b7:e4:e5:da:a0:0b:1f:58:51:1d:
         1c:86:81:5e:02:27:84:c6:95:d3:d8:73:ff:5c:dd:d2:70:36:
         24:6d:7f:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 07:11:01 2025 by rpki-client