Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/2b6dc27a-fc45-35f1-82f5-86b23877a265.roa
File:                     2b6dc27a-fc45-35f1-82f5-86b23877a265.roa (raw, json)
Hash identifier:          9xAfp/IdPChYDIrr85bthroC6TDAPkRzrLJQd0QWLlU=
Subject key identifier:   8C:E2:65:F6:DC:8A:9E:D5:B4:2A:6E:DC:BE:68:22:22:83:F6:52:54
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F4328584A363FF9A1BC4C6BA848965200
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/2b6dc27a-fc45-35f1-82f5-86b23877a265.roa
Signing time:             Mon 16 Jun 2025 16:03:19 +0000
ROA not before:           Mon 16 Jun 2025 16:03:19 +0000
ROA not after:            Sun 14 Sep 2025 16:03:19 +0000
asID:                     81
IP address blocks:        152.26.198.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Jun 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:36:3f:f9:a1:bc:4c:6b:a8:48:96:52:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: Jun 16 16:03:19 2025 GMT
            Not After : Sep 14 16:03:19 2025 GMT
        Subject: CN=8fc2e344-6355-419b-8c33-4b6b63badade
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:43:f7:8e:78:7b:02:72:36:47:ea:6c:f9:b1:
                    39:99:d1:74:af:b4:e5:25:0c:7e:09:42:18:df:a2:
                    56:e8:21:b1:7c:48:d6:bc:5f:0c:d3:8c:0a:f0:87:
                    3c:20:1f:ae:47:e7:03:58:da:24:fb:f8:ef:dd:3c:
                    e4:f4:61:14:c4:74:8d:22:b5:b8:48:3a:b5:7f:49:
                    2b:8a:d4:95:96:b2:10:0d:51:e0:5c:46:c0:02:e5:
                    c8:8d:80:bd:ad:06:ae:58:c5:4a:ca:3e:e3:51:96:
                    7c:9b:7e:25:75:aa:84:43:c5:0a:5f:92:85:0d:b7:
                    7f:6d:67:46:4d:48:d8:02:dd:14:fc:aa:48:ac:3e:
                    d9:50:f6:53:8d:91:9e:06:27:74:62:a3:de:1f:73:
                    93:16:bb:65:31:eb:22:61:eb:70:69:c0:ee:b6:a9:
                    7b:ed:db:3d:9e:8a:de:e2:e3:9c:0b:95:ef:1b:d3:
                    7a:78:c3:0d:54:55:57:36:cf:5d:23:6c:49:44:02:
                    81:6f:8a:06:e5:32:42:35:96:cd:72:d8:09:f2:88:
                    08:d9:57:2b:7c:16:dd:fc:35:5f:d0:74:83:6e:57:
                    b8:43:71:c1:0c:0e:77:6e:c5:ec:ff:8f:61:9c:25:
                    2d:ff:13:94:83:64:c8:2b:9c:f3:1c:6f:30:31:37:
                    6a:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:E2:65:F6:DC:8A:9E:D5:B4:2A:6E:DC:BE:68:22:22:83:F6:52:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/2b6dc27a-fc45-35f1-82f5-86b23877a265.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.26.198.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:2a:1d:41:54:ae:bf:07:8e:bd:51:7c:55:e3:c6:01:b1:05:
         49:00:5d:a1:ce:62:f6:9b:92:80:14:0b:32:9e:67:52:6f:8a:
         f8:71:60:eb:b4:c8:da:f8:06:e9:34:14:c3:bb:15:77:49:e6:
         09:fa:17:6e:b9:77:52:d7:5a:39:20:3f:d4:dc:36:69:63:21:
         7b:65:b3:15:74:8b:9b:44:bb:6c:e3:ac:e4:c4:70:66:62:70:
         4c:a8:a8:c3:ab:ea:bd:84:c2:be:d7:be:08:6a:29:8e:4c:e7:
         92:c9:4b:31:7e:7b:25:7a:03:cc:5e:fb:d4:98:71:97:86:b1:
         c5:64:2b:f3:1f:11:b7:a8:82:9e:d5:75:76:e4:7e:65:81:01:
         63:fc:7d:c0:05:78:ff:8a:d5:dd:09:45:c4:e8:7b:cd:f7:56:
         91:23:ac:39:00:98:63:13:5b:24:a5:e6:64:98:b7:d5:e6:c2:
         9a:8b:46:31:ce:75:18:13:08:a8:87:e3:06:b7:84:95:e8:49:
         17:bc:4f:66:e2:de:43:90:3e:87:89:e9:42:2d:5d:18:34:12:
         5e:d0:89:c6:65:8f:62:ab:aa:e4:bf:dc:6f:1a:a9:c8:9e:b2:
         d3:c0:70:d7:4e:50:17:19:23:21:a2:cc:32:95:0d:17:d1:1d:
         b5:61:5e:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 05:55:02 2025 by rpki-client