Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/429bd221-1567-30b5-bb75-f97de08bfdac.roa
File:                     429bd221-1567-30b5-bb75-f97de08bfdac.roa (raw, json)
Hash identifier:          LODAQn1JFLQvprb5szh4tb6OhTbePWFdw4rZ2qlE/jE=
Subject key identifier:   B6:E9:96:36:11:BD:36:C4:F9:A7:E6:7E:4B:26:08:7A:CD:89:1E:3B
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F4328584A0727D1A772CEC216A5D9DFB0
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/429bd221-1567-30b5-bb75-f97de08bfdac.roa
Signing time:             Fri 30 May 2025 19:11:39 +0000
ROA not before:           Fri 30 May 2025 19:11:39 +0000
ROA not after:            Thu 28 Aug 2025 19:11:39 +0000
asID:                     81
IP address blocks:        152.28.1.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:07:27:d1:a7:72:ce:c2:16:a5:d9:df:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: May 30 19:11:39 2025 GMT
            Not After : Aug 28 19:11:39 2025 GMT
        Subject: CN=2f7d26a7-d344-484c-bc2c-9b9ec6dfee0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:54:95:f9:06:d8:84:fe:ad:aa:51:9c:5b:cf:
                    05:4c:af:d2:8e:4c:2a:eb:73:83:bf:da:5b:07:97:
                    bf:e4:66:d3:21:f1:0b:d2:c1:68:73:47:80:6e:65:
                    13:9a:d1:6e:23:b8:c1:81:02:f9:4d:8a:3d:ad:f6:
                    ab:00:3a:da:a8:68:42:99:73:15:6b:5a:2a:b9:d0:
                    9f:0d:48:00:1d:88:20:c3:54:5d:0f:85:39:79:ab:
                    45:02:2f:86:36:44:e5:2b:7b:f6:74:31:25:6b:5d:
                    d5:36:60:74:e1:52:79:7b:6b:0f:8e:d4:b5:51:23:
                    65:ef:98:7f:09:54:0a:7f:ea:c2:9c:cc:f3:5d:15:
                    ec:78:df:d0:30:23:fb:9c:1e:4b:bf:9c:2c:97:cf:
                    ad:ba:9f:db:47:9d:02:62:f8:d6:4e:26:de:84:ab:
                    38:76:48:77:22:e3:58:53:b7:27:bd:2a:4a:44:a9:
                    ed:3c:0d:0a:f1:24:3c:4d:d6:78:15:7c:84:9d:f0:
                    47:47:a3:f4:8b:47:d4:3b:cf:76:50:df:32:ba:2f:
                    e7:27:c5:ec:b7:91:68:d3:75:37:95:67:d9:6d:ec:
                    68:4f:53:3f:59:7f:6f:2b:94:7a:14:8f:c0:81:4f:
                    19:0a:f4:79:2b:50:41:e5:b9:31:54:a3:de:14:7e:
                    ee:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:E9:96:36:11:BD:36:C4:F9:A7:E6:7E:4B:26:08:7A:CD:89:1E:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/429bd221-1567-30b5-bb75-f97de08bfdac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.28.1.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:ed:21:b7:86:7e:f1:18:87:dc:96:b1:4c:1f:e3:17:1d:61:
         d5:82:9c:1c:4c:5a:9a:d6:9e:97:37:40:ba:51:8e:e3:6a:57:
         95:3e:b2:10:98:c4:dc:11:f6:44:0e:49:23:25:94:67:10:98:
         38:01:47:b4:6a:6e:07:64:45:b7:ff:ff:a8:ab:e9:dc:c7:cb:
         7f:3a:83:8a:e6:3a:e6:b9:c5:77:a0:8f:0a:60:95:3f:4c:77:
         52:56:0f:fa:c1:b6:c3:13:8a:b0:cc:55:76:ee:fb:5f:39:05:
         0f:f5:75:2b:8e:4e:52:c7:9c:1b:46:a5:4d:1a:64:ae:ee:a1:
         8f:25:24:40:c7:1e:f0:8e:1b:f9:e1:61:2d:4d:6e:2e:e4:ae:
         3a:24:15:04:d4:9e:12:d8:d2:a6:9a:4c:40:7d:04:90:dd:d4:
         c0:56:99:09:d7:c0:c4:dd:bb:93:ed:07:37:0e:e8:55:80:fb:
         d3:e8:49:81:79:28:7e:1a:fb:40:b4:3d:5b:64:a6:81:a2:d5:
         cf:75:ad:d3:2b:80:0a:b2:5b:60:58:14:25:01:5e:84:74:9f:
         e9:43:60:04:0d:96:61:8c:30:e8:59:a1:11:28:8d:6e:f8:d5:
         09:1c:79:f9:9c:0a:da:ab:aa:a2:fe:3b:f6:53:6d:bd:be:a6:
         89:50:2c:5d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoHJ9Gncs7CFqXZ37AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh
YTZhMB4XDTI1MDUzMDE5MTEzOVoXDTI1MDgyODE5MTEzOVowLzEtMCsGA1UEAxMk
MmY3ZDI2YTctZDM0NC00ODRjLWJjMmMtOWI5ZWM2ZGZlZTBhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA31SV+QbYhP6tqlGcW88FTK/Sjkwq63ODv9pb
B5e/5GbTIfEL0sFoc0eAbmUTmtFuI7jBgQL5TYo9rfarADraqGhCmXMVa1oqudCf
DUgAHYggw1RdD4U5eatFAi+GNkTlK3v2dDEla13VNmB04VJ5e2sPjtS1USNl75h/
CVQKf+rCnMzzXRXseN/QMCP7nB5Lv5wsl8+tup/bR50CYvjWTibehKs4dkh3IuNY
U7cnvSpKRKntPA0K8SQ8TdZ4FXyEnfBHR6P0i0fUO892UN8yui/nJ8Xst5Fo03U3
lWfZbexoT1M/WX9vK5R6FI/AgU8ZCvR5K1BB5bkxVKPeFH7ubwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLbpljYRvTbE+afmfksmCHrNiR47MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy
YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvNDI5YmQyMjEtMTU2Ny0z
MGI1LWJiNzUtZjk3ZGUwOGJmZGFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj
OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz
YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi
OWY5M2FhNmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmBwBMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC3tIbeGfvEYh9yWsUwf4xcdYdWCnBxMWprWnpc3QLpRjuNqV5U+shCY
xNwR9kQOSSMllGcQmDgBR7RqbgdkRbf//6ir6dzHy386g4rmOua5xXegjwpglT9M
d1JWD/rBtsMTirDMVXbu+185BQ/1dSuOTlLHnBtGpU0aZK7uoY8lJEDHHvCOG/nh
YS1Nbi7krjokFQTUnhLY0qaaTEB9BJDd1MBWmQnXwMTdu5PtBzcO6FWA+9PoSYF5
KH4a+0C0PVtkpoGi1c91rdMrgAqyW2BYFCUBXoR0n+lDYAQNlmGMMOhZoREojW74
1QkcefmcCtqrqqL+O/ZTbb2+polQLF0=
-----END CERTIFICATE-----
Generated at Mon Jun 16 13:24:51 2025 by rpki-client