Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/6e1d7b24-b34d-3163-bc9c-3c1c31af3e08.roa
File:                     6e1d7b24-b34d-3163-bc9c-3c1c31af3e08.roa (raw, json)
Hash identifier:          TLpCKWPti4ic3tZflH2NE/8ExZTyB/GelfjrYj+U3B4=
Subject key identifier:   45:C8:40:6B:DB:56:A5:BA:15:73:B9:92:C1:DF:FC:2E:80:E1:C3:2C
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F4328584972E2EE6D41AD74868BE8C960
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/6e1d7b24-b34d-3163-bc9c-3c1c31af3e08.roa
Signing time:             Mon 07 Apr 2025 16:33:13 +0000
ROA not before:           Mon 07 Apr 2025 16:33:13 +0000
ROA not after:            Sun 06 Jul 2025 16:33:13 +0000
asID:                     81
IP address blocks:        152.45.2.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:72:e2:ee:6d:41:ad:74:86:8b:e8:c9:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: Apr  7 16:33:13 2025 GMT
            Not After : Jul  6 16:33:13 2025 GMT
        Subject: CN=0a632e8d-0409-4b09-a7a8-dc3d2f3b1e2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:f1:3e:02:4f:fb:ab:e6:33:41:74:d9:b7:4f:
                    24:ac:b5:6a:f1:31:8a:ce:ca:f7:6e:56:2a:17:b8:
                    8b:a0:e7:04:2c:5e:07:c5:14:31:a0:3e:c2:d8:9f:
                    6a:ea:68:cf:fe:58:5c:8f:d4:a0:75:8a:47:f0:64:
                    c8:e0:8a:90:21:6b:9c:e1:9c:cb:42:9b:d2:1f:64:
                    10:25:6e:ef:14:09:e5:f5:ad:41:2e:1c:15:aa:c4:
                    db:8d:90:df:f6:6d:3f:5e:33:70:e4:b2:e5:98:6a:
                    cc:fa:70:28:17:45:d4:0f:08:de:d2:d7:45:f0:57:
                    5c:18:21:b6:79:f9:65:50:0d:29:d0:f1:12:9e:8d:
                    50:a6:57:54:f8:47:7d:14:39:12:c7:a6:15:03:53:
                    9b:0b:15:0f:e2:9d:73:6f:8a:a1:45:cd:3e:c9:5b:
                    73:e5:98:d1:83:6e:4c:c8:36:b7:e4:11:c3:8a:cc:
                    0c:50:5c:93:6e:a2:b3:88:26:82:fd:e1:e8:f6:58:
                    7e:0a:80:19:c1:d7:aa:0d:52:c9:6e:d2:a3:71:50:
                    2d:c9:02:21:ea:c4:62:84:5f:3c:f5:36:c5:1b:a5:
                    c2:6e:97:a6:3c:1d:60:7e:0d:db:b1:4e:73:e1:0b:
                    77:01:89:4c:fc:28:6b:c4:78:70:85:89:91:29:e9:
                    cb:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:C8:40:6B:DB:56:A5:BA:15:73:B9:92:C1:DF:FC:2E:80:E1:C3:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/6e1d7b24-b34d-3163-bc9c-3c1c31af3e08.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.45.2.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:2c:96:be:84:74:87:95:ad:91:0d:82:9d:0d:62:14:33:4a:
         a0:41:cb:55:7b:66:fe:62:c7:a5:47:4e:d4:d4:cc:8d:83:92:
         e0:27:9f:be:00:29:db:ba:08:d7:e6:53:17:da:00:12:fd:79:
         55:40:12:bf:f4:89:96:fa:24:59:3f:40:80:e4:a1:54:1a:c4:
         cb:05:0e:d1:27:d9:da:fe:8c:ab:26:36:58:d7:63:9a:0b:f3:
         6f:1b:17:99:fc:dc:42:90:40:20:47:92:bd:cb:26:19:f9:71:
         96:3f:42:a2:1e:d4:00:d3:29:86:ce:13:bb:5c:6a:5e:6d:4d:
         16:e1:4c:5f:6e:96:39:ea:7c:b9:81:45:c2:bf:0c:a1:8e:7e:
         4e:bd:70:16:22:53:c0:7b:ef:7c:43:9d:f7:1e:65:70:57:4c:
         b4:ab:aa:4f:0b:ae:f3:64:24:8f:b3:77:ba:5f:2e:ee:17:86:
         31:58:47:e0:4a:07:41:26:43:48:2d:a3:d7:52:e2:e5:2e:1b:
         7d:24:a7:1b:42:b1:d9:e1:66:33:f1:0c:f2:85:dd:c6:69:97:
         21:81:0e:d6:d6:b2:e2:85:ba:91:61:f0:0a:07:3b:99:d8:4d:
         67:5b:57:2e:07:6e:9d:df:50:e7:b5:78:67:fe:35:d4:78:45:
         be:7b:c8:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:27:20 2025 by rpki-client