Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/4b9334e1-7b14-3a62-b895-6125477dfa7f.roa
File:                     4b9334e1-7b14-3a62-b895-6125477dfa7f.roa (raw, json)
Hash identifier:          5Mi4wXRhGe38gJ/tE4jMxnleAwxJD5nNNQM7QaiendI=
Subject key identifier:   A8:67:2E:59:F0:F7:07:26:CB:0C:24:FE:9C:E6:4E:95:7C:02:78:26
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F4328584A363FFE4A5E0C8583A9918680
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/4b9334e1-7b14-3a62-b895-6125477dfa7f.roa
Signing time:             Mon 16 Jun 2025 16:03:21 +0000
ROA not before:           Mon 16 Jun 2025 16:03:21 +0000
ROA not after:            Sun 14 Sep 2025 16:03:21 +0000
asID:                     81
IP address blocks:        152.46.39.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Jun 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:36:3f:fe:4a:5e:0c:85:83:a9:91:86:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: Jun 16 16:03:21 2025 GMT
            Not After : Sep 14 16:03:21 2025 GMT
        Subject: CN=6134ca3d-2a3c-4867-825d-5580283b7419
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:c1:eb:69:48:9b:59:7b:55:2c:7d:1d:06:a0:
                    89:66:58:05:35:2d:03:db:89:32:44:52:ee:10:d4:
                    61:bf:3a:f1:09:7b:eb:d9:06:3c:24:be:9c:1a:b3:
                    ec:ca:07:97:c8:48:66:04:63:b7:f2:ea:5a:25:fc:
                    2a:67:bb:4f:e4:a6:a0:9e:2e:91:bb:32:bc:77:19:
                    ae:60:aa:2e:4e:4c:67:45:00:56:39:b9:91:29:ee:
                    f7:09:7f:2b:ba:19:69:68:c3:68:b6:dc:be:f9:25:
                    e3:13:e1:c6:cd:97:fd:85:bc:8c:c4:67:cd:29:45:
                    76:d4:22:7b:21:71:08:00:af:ca:d0:02:c1:39:19:
                    6b:c8:a0:41:ed:19:c5:27:fb:73:1d:61:d4:c7:ba:
                    d2:9b:67:b8:7e:ba:ca:86:ed:1a:dd:78:b1:90:26:
                    e5:13:31:89:06:b3:00:02:f7:ce:d2:9b:29:b8:6b:
                    e3:c3:67:46:2f:28:cc:a4:48:05:44:1b:d8:b3:1a:
                    bb:23:0f:56:e9:be:63:19:86:05:e2:f6:fe:dc:19:
                    9d:9b:a8:6c:88:3d:04:ca:dd:57:1c:a9:5f:1c:d1:
                    1c:47:0f:70:a9:44:b9:73:cb:9c:ac:d4:39:39:26:
                    f4:73:70:d9:fd:e3:fa:2a:b8:ba:50:ef:94:a7:d4:
                    41:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:67:2E:59:F0:F7:07:26:CB:0C:24:FE:9C:E6:4E:95:7C:02:78:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/4b9334e1-7b14-3a62-b895-6125477dfa7f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.46.39.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:1a:88:62:d6:07:c4:b3:92:fc:73:cf:09:6c:a5:ef:b5:23:
         5f:33:af:0f:55:6b:44:e4:82:e5:0e:a0:40:68:66:44:73:54:
         90:65:de:5a:e1:56:fb:21:9a:0a:d3:68:a2:5d:67:1e:4a:3c:
         73:3d:4a:cf:9e:39:3b:2f:d2:41:6f:6a:d9:35:f8:cd:8f:07:
         e2:07:f3:90:51:20:82:73:9c:cb:19:4b:3a:ab:4a:13:c9:2a:
         04:9d:7d:87:21:de:11:53:3e:df:7b:16:d3:e2:17:f7:94:e7:
         51:1e:3b:94:17:ef:94:23:42:24:06:28:64:1a:de:7e:84:61:
         41:50:6f:dc:e3:ec:b9:f6:9e:f8:81:de:95:34:37:e6:d0:09:
         7f:de:ff:3c:1a:a4:c6:48:bd:cd:0e:07:cf:3f:69:98:26:03:
         6b:d7:6d:a6:d5:a7:47:02:84:99:48:51:c0:cc:5f:32:79:d7:
         74:8c:9a:eb:cd:2e:c0:73:c1:09:5d:55:c5:16:08:c4:7f:73:
         c4:91:d8:2e:6e:96:56:47:72:9b:09:bb:88:48:09:9a:0c:0a:
         3d:c5:16:6c:bd:21:91:36:56:59:94:76:b7:31:0a:3a:9d:c6:
         9e:0d:c9:6b:8f:7d:ce:1c:c9:6f:74:85:d6:bc:a8:55:db:3f:
         c3:47:6a:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 14:49:43 2025 by rpki-client