Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/797bcf53-22df-372c-8986-913c71c5a1c5.roa
File:                     797bcf53-22df-372c-8986-913c71c5a1c5.roa (raw, json)
Hash identifier:          aoWkE6vV0BWZ7uX90Rfa6acb5KFe3NLH2uMWWEd8KYM=
Subject key identifier:   A5:39:47:3A:72:FD:82:3C:C9:6D:4A:54:A5:22:C1:AB:44:9C:61:65
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F4328584A0727CEC63B33B93E491AD200
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/797bcf53-22df-372c-8986-913c71c5a1c5.roa
Signing time:             Fri 30 May 2025 19:11:38 +0000
ROA not before:           Fri 30 May 2025 19:11:38 +0000
ROA not after:            Thu 28 Aug 2025 19:11:38 +0000
asID:                     19718
IP address blocks:        152.22.240.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:07:27:ce:c6:3b:33:b9:3e:49:1a:d2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: May 30 19:11:38 2025 GMT
            Not After : Aug 28 19:11:38 2025 GMT
        Subject: CN=5e459977-eed6-4841-afd1-3598a5f4eb9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:84:60:51:d3:7a:20:67:8c:55:03:2f:5a:dc:
                    42:91:aa:46:8d:10:b2:9e:c9:71:2d:08:13:a7:0b:
                    73:bc:89:28:56:5e:03:56:43:33:3e:15:3f:cf:0e:
                    b9:87:27:ec:1b:7c:3f:df:22:31:ac:9c:d3:d4:1d:
                    4d:ae:87:2a:65:1b:92:97:df:02:db:37:1f:4c:5c:
                    8c:37:ad:98:04:98:8e:1e:2b:d9:fa:d6:09:d8:ed:
                    11:e8:7a:a4:49:e5:6e:a3:12:95:a2:d6:56:f0:b9:
                    70:4c:61:fb:8c:8c:8e:60:07:ce:e9:56:38:6b:f5:
                    0f:ce:c0:34:03:e8:43:1e:ca:34:62:6b:50:15:32:
                    69:42:b6:27:a4:ae:f3:da:3c:43:da:9f:39:c0:f6:
                    f5:85:52:85:38:17:6f:a9:e1:d4:7e:c5:d5:b0:43:
                    80:ea:c7:fd:a8:1d:a9:ff:da:22:be:72:0e:3c:f7:
                    07:46:0f:b1:d4:0f:a8:e2:4e:36:16:61:b9:04:d0:
                    0a:0a:83:4a:d6:c8:fd:98:ae:f6:9a:63:b1:4b:49:
                    b0:c4:4f:fa:6f:3f:3d:24:ce:fd:9e:27:97:33:c8:
                    bb:b6:6c:01:ab:21:14:29:bc:9a:34:5a:8b:fc:b1:
                    73:26:50:be:d8:f6:5d:00:89:f7:d8:53:70:71:83:
                    02:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:39:47:3A:72:FD:82:3C:C9:6D:4A:54:A5:22:C1:AB:44:9C:61:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/797bcf53-22df-372c-8986-913c71c5a1c5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.22.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:e8:6e:37:73:8e:b6:c6:c8:38:a1:02:5d:d0:3b:9d:3b:6a:
         8e:74:19:47:58:b7:f6:2a:e0:55:47:be:59:d2:c2:85:c7:1c:
         2f:4e:96:b9:6d:fd:ac:93:f2:4e:70:5b:eb:58:30:b9:48:16:
         1c:da:a5:07:3c:89:fc:fe:29:e9:73:2f:39:cc:20:21:f8:9f:
         a2:d6:53:63:67:d7:76:84:b6:21:7e:e7:58:33:8d:d7:4c:21:
         f1:eb:39:c8:0b:ed:6a:0a:43:67:fa:58:d9:99:8d:2b:b9:46:
         30:c4:9f:17:7a:29:38:0f:1d:2f:c9:73:e0:8c:0d:e8:90:43:
         3e:e9:95:41:41:14:f4:3f:c1:30:a6:01:f3:b2:5f:e0:3a:fd:
         08:b6:96:89:16:0c:c1:d0:a5:02:06:b8:21:5e:22:24:a5:39:
         c5:9d:12:d4:f8:79:e2:e5:e1:2f:1a:ee:8d:40:8f:5e:2e:da:
         28:35:7e:82:32:52:7f:0a:e4:1b:1e:1f:49:46:5b:c9:87:16:
         35:f9:dc:a5:80:60:b3:b5:ba:71:95:88:13:8a:51:2f:62:37:
         a8:a5:c4:7b:32:a2:bf:74:88:51:24:ed:28:ba:8a:0d:42:c4:
         94:4f:89:e0:1f:f3:e2:c5:ce:07:1e:31:8b:6e:b0:42:07:d7:
         c7:41:5e:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 13:16:43 2025 by rpki-client