Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/358a0b9c-8578-31f0-b8e7-a183ff8a0124.roa
File:                     358a0b9c-8578-31f0-b8e7-a183ff8a0124.roa (raw, json)
Hash identifier:          bim4KcbOWwZndBA3K5hg52DDy8MAF1XQeglZVpU74d4=
Subject key identifier:   D8:D5:D4:E6:7A:43:D8:05:9E:68:AA:DC:8F:1C:8C:CC:E7:30:8D:3C
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F4328584972E2F12B4B7FD584B64AF600
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/358a0b9c-8578-31f0-b8e7-a183ff8a0124.roa
Signing time:             Mon 07 Apr 2025 16:33:14 +0000
ROA not before:           Mon 07 Apr 2025 16:33:14 +0000
ROA not after:            Sun 06 Jul 2025 16:33:14 +0000
asID:                     81
IP address blocks:        152.46.6.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:72:e2:f1:2b:4b:7f:d5:84:b6:4a:f6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: Apr  7 16:33:14 2025 GMT
            Not After : Jul  6 16:33:14 2025 GMT
        Subject: CN=0d7f6269-36dc-482d-95e7-90199d7dd52f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:2a:b9:f1:9f:fa:a7:da:a4:94:83:36:0e:03:
                    3d:47:e0:ec:93:81:b5:08:8b:d4:bd:ef:3b:aa:93:
                    c6:e8:0b:24:38:d1:0a:d7:22:78:45:9f:1c:14:a9:
                    3b:46:6a:b4:59:e2:92:13:73:c3:b6:1a:b4:23:82:
                    53:60:a4:2f:77:5c:47:18:95:58:24:76:0f:fb:dc:
                    78:65:26:2f:a7:f7:9e:9f:36:7e:e8:ed:cc:3f:29:
                    14:f6:c1:7e:89:bd:8d:ea:ad:5e:03:6c:40:12:4f:
                    08:a3:0f:c6:cb:44:89:39:70:ee:17:e1:bd:16:4d:
                    09:7d:8c:c8:41:29:cc:64:aa:5d:32:68:a8:fe:96:
                    4c:bd:96:81:92:da:d8:6c:47:42:b2:c8:6a:b0:3b:
                    c4:c5:25:ad:87:92:91:b5:db:8b:fc:ad:b1:5a:97:
                    73:5e:84:d9:45:60:90:c9:68:64:89:d3:2c:8d:c1:
                    23:07:03:5b:5c:54:fa:af:b0:85:19:2d:45:8d:c7:
                    34:e8:dc:d2:d8:b8:6d:ca:8c:bf:ff:ec:53:26:27:
                    18:24:60:6a:5d:10:dd:a4:e0:85:41:e7:d9:8e:d7:
                    f9:5a:57:13:0f:e9:a9:2f:d9:40:d0:36:31:cf:58:
                    00:33:5a:c4:ea:81:ec:05:5f:52:d1:50:00:79:b3:
                    65:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:D5:D4:E6:7A:43:D8:05:9E:68:AA:DC:8F:1C:8C:CC:E7:30:8D:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/358a0b9c-8578-31f0-b8e7-a183ff8a0124.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.46.6.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:99:73:b1:a9:3f:51:84:c7:e7:72:f5:d7:7f:d8:d0:70:d7:
         fc:1d:27:68:40:4d:0e:21:d4:48:57:9b:f8:e9:23:80:93:fc:
         e8:db:ed:6f:be:56:ce:ef:0a:a8:b3:7d:68:66:7d:e9:29:a1:
         d9:c7:1b:ca:a4:ba:75:e3:ca:32:ed:75:a2:fd:63:c4:12:2b:
         d7:26:d9:1d:47:ae:61:82:5d:05:2f:93:70:61:f1:a1:04:68:
         57:6d:d0:5d:3a:53:ce:9d:ba:30:2d:1d:5f:06:9f:70:23:47:
         3e:3a:cb:42:33:b0:a7:eb:54:b5:60:29:2a:68:af:7a:64:75:
         8b:7e:d9:b8:7b:f1:50:66:ba:9e:30:2f:3d:5b:33:8c:9a:83:
         4c:2a:87:5c:3a:80:27:c6:c9:d9:fd:35:b5:45:18:f8:3c:3e:
         0d:a4:09:97:70:32:10:d9:95:d8:01:80:e5:e9:08:47:b4:03:
         c3:0d:0f:c1:ea:84:a0:c2:88:e9:3e:93:ad:7c:bc:97:1b:e2:
         f8:d3:f5:75:98:5d:39:2c:c1:15:96:a4:ee:b8:a5:ab:fb:70:
         a5:c1:0a:f9:06:ac:a8:60:3d:60:03:65:71:f4:09:28:61:9c:
         e0:16:93:9b:f3:1b:6f:c5:22:14:0c:98:63:0d:df:b9:80:c3:
         e9:93:12:ca
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEly4vErS3/VhLZK9gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh
YTZhMB4XDTI1MDQwNzE2MzMxNFoXDTI1MDcwNjE2MzMxNFowLzEtMCsGA1UEAxMk
MGQ3ZjYyNjktMzZkYy00ODJkLTk1ZTctOTAxOTlkN2RkNTJmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkiq58Z/6p9qklIM2DgM9R+Dsk4G1CIvUve87
qpPG6AskONEK1yJ4RZ8cFKk7Rmq0WeKSE3PDthq0I4JTYKQvd1xHGJVYJHYP+9x4
ZSYvp/eenzZ+6O3MPykU9sF+ib2N6q1eA2xAEk8Iow/Gy0SJOXDuF+G9Fk0JfYzI
QSnMZKpdMmio/pZMvZaBktrYbEdCsshqsDvExSWth5KRtduL/K2xWpdzXoTZRWCQ
yWhkidMsjcEjBwNbXFT6r7CFGS1Fjcc06NzS2Lhtyoy//+xTJicYJGBqXRDdpOCF
QefZjtf5WlcTD+mpL9lA0DYxz1gAM1rE6oHsBV9S0VAAebNl+QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNjV1OZ6Q9gFnmiq3I8cjMznMI08MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy
YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvMzU4YTBiOWMtODU3OC0z
MWYwLWI4ZTctYTE4M2ZmOGEwMTI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj
OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz
YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi
OWY5M2FhNmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmC4GMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAF2Zc7GpP1GEx+dy9dd/2NBw1/wdJ2hATQ4h1EhXm/jpI4CT/Ojb7W++
Vs7vCqizfWhmfekpodnHG8qkunXjyjLtdaL9Y8QSK9cm2R1HrmGCXQUvk3Bh8aEE
aFdt0F06U86dujAtHV8Gn3AjRz46y0IzsKfrVLVgKSpor3pkdYt+2bh78VBmup4w
Lz1bM4yag0wqh1w6gCfGydn9NbVFGPg8Pg2kCZdwMhDZldgBgOXpCEe0A8MND8Hq
hKDCiOk+k618vJcb4vjT9XWYXTkswRWWpO64pav7cKXBCvkGrKhgPWADZXH0CShh
nOAWk5vzG2/FIhQMmGMN37mAw+mTEso=
-----END CERTIFICATE-----
Generated at Mon Apr 28 02:08:35 2025 by rpki-client