Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/33793065-9a38-3cb8-b050-0be3cd415a87.roa
File:                     33793065-9a38-3cb8-b050-0be3cd415a87.roa (raw, json)
Hash identifier:          xj0Gqe+QaMqd7ARastDFjDVWmW1xHqDn5x4XCZyqWn4=
Subject key identifier:   3B:79:B7:1D:DA:D0:80:7C:B6:60:4C:00:79:63:99:DF:31:15:29:99
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F4328584A363FFAE6FF44094D80CD3280
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/33793065-9a38-3cb8-b050-0be3cd415a87.roa
Signing time:             Mon 16 Jun 2025 16:03:20 +0000
ROA not before:           Mon 16 Jun 2025 16:03:20 +0000
ROA not after:            Sun 14 Sep 2025 16:03:20 +0000
asID:                     19718
IP address blocks:        152.26.56.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 20 Jun 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:36:3f:fa:e6:ff:44:09:4d:80:cd:32:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: Jun 16 16:03:20 2025 GMT
            Not After : Sep 14 16:03:20 2025 GMT
        Subject: CN=5c6fbcfa-fb87-4360-bfab-5fa915f76507
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:89:cf:1a:98:da:45:a6:0d:20:cd:80:2d:c6:
                    15:9e:6a:e1:fc:43:f4:e7:62:24:4c:30:4c:72:ff:
                    9a:29:5e:fe:34:35:02:01:58:f0:a5:d3:b0:43:ae:
                    45:4b:07:05:7d:74:f3:fd:58:97:e1:60:33:28:a5:
                    c2:a4:2e:42:da:7f:07:9b:0f:b4:80:5e:33:33:56:
                    f1:46:4f:66:97:45:8a:f6:86:9a:a6:a2:2c:24:70:
                    34:d2:b1:30:c6:3d:86:6b:80:08:cb:0f:96:91:9b:
                    b0:81:94:31:bc:41:eb:f5:bc:27:ff:1d:a3:ce:7e:
                    b8:26:06:cd:e5:55:e9:c4:35:ca:b4:11:2d:98:6b:
                    b6:00:a2:4c:32:20:8d:e0:1b:26:c9:3c:91:19:d2:
                    37:c5:cb:82:d4:ef:9b:9e:bc:d8:a6:e0:52:3e:ab:
                    5f:b8:27:de:19:13:9b:6a:c9:b8:48:dd:a5:95:35:
                    53:5c:73:8d:1f:13:8d:2a:4b:05:ac:62:d5:9a:05:
                    b5:2b:e5:3b:5f:46:d9:3a:df:15:8a:1a:f6:47:0c:
                    da:e9:9c:29:0b:d3:53:eb:77:97:5d:ed:44:f3:1b:
                    50:3d:84:d5:00:c5:80:2b:52:09:16:f6:13:57:b9:
                    56:c7:24:9a:d7:0b:71:71:70:3e:fe:f1:59:98:99:
                    8f:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:79:B7:1D:DA:D0:80:7C:B6:60:4C:00:79:63:99:DF:31:15:29:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/33793065-9a38-3cb8-b050-0be3cd415a87.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.26.56.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:ca:2a:0e:41:16:e0:19:8b:e0:26:4c:61:de:50:ee:01:12:
         40:ff:c5:16:19:52:32:7f:5f:ee:d5:b2:e9:80:f0:4b:b7:c2:
         a8:78:d5:e6:8a:35:72:4f:05:fc:6e:bd:db:ec:64:0b:3f:cc:
         db:5c:52:e4:bb:6e:ea:50:9b:0d:90:fd:7f:58:32:95:d3:43:
         69:2f:f4:0e:dd:7f:ff:23:fd:eb:29:6e:90:b0:55:24:93:cb:
         22:8e:af:11:0c:f2:3e:c6:9e:0d:0f:ce:74:60:84:e6:16:1f:
         d4:7b:7a:47:64:f3:17:0b:04:f5:ec:7d:63:44:d6:4f:9e:e6:
         a9:ce:c0:c7:0b:80:3e:17:b2:1e:e4:14:dc:eb:c5:3c:a9:5d:
         cd:e6:b8:3c:06:bf:38:b8:8a:8e:c6:38:1a:bc:51:05:1f:fd:
         1d:91:47:98:27:3a:84:84:72:e0:29:58:06:5a:c7:f2:47:3f:
         96:a8:1a:f5:11:74:fd:e7:ad:7c:ee:c6:1c:53:cb:06:36:ab:
         8a:3f:5d:e0:b7:37:fb:2f:d1:db:f5:be:e9:11:8e:06:64:7b:
         c1:53:38:2e:0e:2b:75:e8:5b:40:4d:88:b8:f0:3a:75:43:a7:
         3e:1d:55:39:c3:81:83:1c:4a:f9:30:48:62:78:63:6e:aa:da:
         83:46:a4:d4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo2P/rm/0QJTYDNMoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh
YTZhMB4XDTI1MDYxNjE2MDMyMFoXDTI1MDkxNDE2MDMyMFowLzEtMCsGA1UEAxMk
NWM2ZmJjZmEtZmI4Ny00MzYwLWJmYWItNWZhOTE1Zjc2NTA3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxonPGpjaRaYNIM2ALcYVnmrh/EP052IkTDBM
cv+aKV7+NDUCAVjwpdOwQ65FSwcFfXTz/ViX4WAzKKXCpC5C2n8Hmw+0gF4zM1bx
Rk9ml0WK9oaapqIsJHA00rEwxj2Ga4AIyw+WkZuwgZQxvEHr9bwn/x2jzn64JgbN
5VXpxDXKtBEtmGu2AKJMMiCN4BsmyTyRGdI3xcuC1O+bnrzYpuBSPqtfuCfeGROb
asm4SN2llTVTXHONHxONKksFrGLVmgW1K+U7X0bZOt8Vihr2Rwza6ZwpC9NT63eX
Xe1E8xtQPYTVAMWAK1IJFvYTV7lWxySa1wtxcXA+/vFZmJmPDQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDt5tx3a0IB8tmBMAHljmd8xFSmZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy
YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvMzM3OTMwNjUtOWEzOC0z
Y2I4LWIwNTAtMGJlM2NkNDE1YTg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj
OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz
YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi
OWY5M2FhNmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmBo4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEHKKg5BFuAZi+AmTGHeUO4BEkD/xRYZUjJ/X+7VsumA8Eu3wqh41eaK
NXJPBfxuvdvsZAs/zNtcUuS7bupQmw2Q/X9YMpXTQ2kv9A7df/8j/espbpCwVSST
yyKOrxEM8j7Gng0PznRghOYWH9R7ekdk8xcLBPXsfWNE1k+e5qnOwMcLgD4Xsh7k
FNzrxTypXc3muDwGvzi4io7GOBq8UQUf/R2RR5gnOoSEcuApWAZax/JHP5aoGvUR
dP3nrXzuxhxTywY2q4o/XeC3N/sv0dv1vukRjgZke8FTOC4OK3XoW0BNiLjwOnVD
pz4dVTnDgYMcSvkwSGJ4Y26q2oNGpNQ=
-----END CERTIFICATE-----
Generated at Thu Jun 19 05:54:20 2025 by rpki-client