Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/74fe2130-ad5a-3071-a04d-4b73d31e815a.roa
File:                     74fe2130-ad5a-3071-a04d-4b73d31e815a.roa (raw, json)
Hash identifier:          3paXwNrPW0Y5lamrQgBpOaGjjnLCtIQXfD176cwrko8=
Subject key identifier:   8F:9C:C0:46:AD:05:97:62:7A:FF:33:CC:9A:31:E2:03:CD:6F:61:38
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F4328584972E2ED9246E14B7DA409CD00
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/74fe2130-ad5a-3071-a04d-4b73d31e815a.roa
Signing time:             Mon 07 Apr 2025 16:33:13 +0000
ROA not before:           Mon 07 Apr 2025 16:33:13 +0000
ROA not after:            Sun 06 Jul 2025 16:33:13 +0000
asID:                     81
IP address blocks:        152.26.79.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Apr 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:72:e2:ed:92:46:e1:4b:7d:a4:09:cd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: Apr  7 16:33:13 2025 GMT
            Not After : Jul  6 16:33:13 2025 GMT
        Subject: CN=069ee0c2-3453-4b75-b3eb-ecf47ccc6be0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:a1:2d:3e:6f:00:78:fd:9e:33:02:af:66:75:
                    ec:5e:06:2e:d0:6f:6b:f0:07:05:21:89:b3:2c:22:
                    be:4b:ee:2d:7e:14:f3:49:a6:1c:68:c7:c6:3e:da:
                    cd:6b:95:f8:0e:a4:fa:ed:15:4f:03:ab:56:f8:69:
                    f4:8e:5e:cc:45:58:68:93:e6:6b:aa:de:46:51:5a:
                    13:87:88:b8:87:4e:c0:5f:9f:35:10:d5:3b:e2:6e:
                    bb:67:c9:81:d8:a8:7a:3b:29:89:1d:5e:93:88:3c:
                    10:fc:88:2e:04:b4:27:6b:49:84:e2:ba:84:88:fb:
                    40:3c:0e:19:25:8f:e2:e3:37:fe:e2:f7:40:60:56:
                    32:bd:ba:23:8b:54:9f:0a:9b:5b:fb:dd:e9:45:e2:
                    97:61:9d:5c:20:67:94:8e:72:02:31:ba:8c:8c:1a:
                    cb:ad:a9:49:61:ff:80:4a:8d:81:76:0c:26:5e:fd:
                    0e:92:dc:ad:11:4a:b7:0f:33:f6:06:c5:41:55:30:
                    20:9a:cd:d1:66:17:06:13:b3:63:a5:ea:09:81:9c:
                    4f:a3:83:5c:2f:8f:60:6d:6b:90:74:c9:14:4b:17:
                    94:6e:f2:dd:c4:be:fe:e5:dd:0e:f1:39:29:a5:56:
                    eb:e5:3a:28:a4:fd:42:ea:21:e5:99:c9:ad:fd:4e:
                    35:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:9C:C0:46:AD:05:97:62:7A:FF:33:CC:9A:31:E2:03:CD:6F:61:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/74fe2130-ad5a-3071-a04d-4b73d31e815a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.26.79.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:6d:ac:36:42:39:8b:ed:e0:e6:75:b3:44:0c:c2:6f:a6:b0:
         df:3e:71:c0:fe:32:3d:25:44:75:03:7d:ba:cb:b4:57:04:de:
         ab:ce:93:33:d0:67:01:41:a4:4f:89:ef:b9:89:dc:bd:77:93:
         5e:dd:c8:bb:fc:20:66:82:2b:fc:a8:e9:ae:80:a8:67:04:6f:
         45:4c:69:fc:46:f6:38:d0:cf:88:89:6f:38:bd:72:23:78:4a:
         b9:fd:47:aa:3e:71:91:60:87:98:7d:79:58:12:3a:1b:0e:f6:
         5c:6d:57:71:25:5e:2d:ed:17:ee:54:e8:ff:d4:f3:2b:f4:d9:
         6a:ea:99:f2:83:ee:6e:44:a6:cd:74:a6:88:2e:44:83:44:90:
         b0:e8:a5:52:ad:cf:13:41:ad:f7:35:14:5d:5a:89:87:76:6e:
         67:c6:bc:dd:72:64:2b:52:3f:db:ee:87:e3:f7:bd:ee:35:39:
         10:df:3b:e8:a0:8d:33:fb:35:b0:85:b8:a4:c4:0d:a9:a9:a7:
         d7:2d:02:58:5d:14:c4:91:10:3c:b5:6c:6e:1e:ae:db:05:0c:
         a3:70:7f:92:2e:c4:99:8e:dc:ac:46:5d:28:71:51:5f:2c:2e:
         12:b4:ac:84:41:b6:04:3d:a5:25:57:58:9c:d2:f2:e0:7f:9c:
         bf:0c:8a:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 11:42:36 2025 by rpki-client