Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/7cdac11a-c16c-35b9-9878-b591e872495c.roa
File:                     7cdac11a-c16c-35b9-9878-b591e872495c.roa (raw, json)
Hash identifier:          SImXh3P5M5mzn5QA90A+6HW7Z6joJAmyP8te3CtIAPk=
Subject key identifier:   FC:8B:BF:CE:FC:6D:C4:6C:9A:0E:D2:05:70:06:79:EF:2F:E8:7D:B3
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F4328584972E2F0F9EFC94FBCD1A1D184
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/7cdac11a-c16c-35b9-9878-b591e872495c.roa
Signing time:             Mon 07 Apr 2025 16:33:14 +0000
ROA not before:           Mon 07 Apr 2025 16:33:14 +0000
ROA not after:            Sun 06 Jul 2025 16:33:14 +0000
asID:                     81
IP address blocks:        152.46.47.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:72:e2:f0:f9:ef:c9:4f:bc:d1:a1:d1:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: Apr  7 16:33:14 2025 GMT
            Not After : Jul  6 16:33:14 2025 GMT
        Subject: CN=20b13be9-3e0b-49f7-897b-463b53118d8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:9a:23:46:a9:73:8c:f6:2c:cf:89:33:7e:ba:
                    8d:c9:b3:14:14:31:03:b6:3d:36:8a:68:d2:00:4d:
                    33:c0:12:7c:27:cd:44:1b:c7:64:31:eb:98:00:e3:
                    7c:8d:79:10:15:93:ad:1e:fd:12:41:61:da:14:45:
                    e4:28:c0:fc:65:94:04:b8:d8:a6:a0:cb:99:b6:bf:
                    f5:b4:b5:ae:98:ed:5e:94:0c:6f:34:80:bc:d1:fc:
                    44:6d:4a:dd:4d:be:88:d5:76:ff:88:da:9d:cd:cf:
                    10:3f:f5:02:b1:72:42:33:84:33:a7:08:05:df:1b:
                    12:b1:1b:9c:57:fe:b2:6d:b4:9c:c7:82:6d:fa:32:
                    4c:5e:0f:30:a6:99:ad:28:4e:ec:df:90:99:11:73:
                    50:7c:37:bf:5c:90:32:44:89:e4:89:bf:b8:80:c6:
                    d2:49:7a:33:3e:62:33:dd:22:2c:d2:46:19:b0:de:
                    63:e0:96:bd:8a:ef:e3:22:ec:43:e1:25:86:1b:16:
                    28:b6:9d:5d:11:fe:7a:79:d2:40:ad:c4:40:53:33:
                    a5:66:21:5a:83:4f:5f:fb:6a:9e:da:70:f7:32:c8:
                    29:1b:a2:bb:6b:95:5e:45:44:79:39:3f:f7:48:f0:
                    a8:b9:a8:08:32:a1:92:e1:19:ac:5b:b3:80:61:1d:
                    e3:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:8B:BF:CE:FC:6D:C4:6C:9A:0E:D2:05:70:06:79:EF:2F:E8:7D:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/7cdac11a-c16c-35b9-9878-b591e872495c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.46.47.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:70:e3:1d:42:89:90:97:f1:62:c1:a4:8b:90:1a:44:fe:cb:
         5d:f3:b2:89:84:36:01:5f:9b:89:62:73:22:ef:fc:f1:69:18:
         ef:3f:68:dc:39:55:a2:6d:8c:4e:8f:a5:5b:c5:9d:b5:08:6a:
         16:91:aa:6a:2b:a6:ee:19:74:17:6a:58:48:d2:93:35:31:89:
         0b:1f:24:6c:5a:90:13:39:3d:6c:8f:84:c7:8a:0a:82:d1:1f:
         6b:93:9c:d2:d4:f3:c5:d7:dd:3e:38:82:a1:b7:fc:d6:b4:5f:
         e0:76:5b:2e:ae:08:4d:77:f2:89:53:e4:ed:dd:4c:ff:c1:ec:
         da:74:10:72:70:21:3b:b4:9f:72:fd:8f:08:d3:de:3e:b3:7b:
         98:de:e6:b7:d0:fb:a4:fa:1c:82:6a:34:80:5a:db:fd:2e:74:
         33:6d:82:58:ff:dd:4e:17:ed:af:43:65:fc:b0:31:38:6e:d9:
         c3:ee:db:49:57:37:5c:70:15:10:09:7f:98:b4:2a:b1:2b:37:
         72:3a:7b:08:2e:3c:a7:6e:2e:6e:1a:1a:cd:f1:8a:6b:01:1d:
         bb:fa:57:47:af:49:b3:30:db:16:76:9e:cb:5c:d1:73:be:d2:
         c2:30:9d:a1:23:9f:4a:cb:9a:f3:0b:f9:86:06:7b:88:df:82:
         3b:0d:bf:65
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEly4vD578lPvNGh0YQwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh
YTZhMB4XDTI1MDQwNzE2MzMxNFoXDTI1MDcwNjE2MzMxNFowLzEtMCsGA1UEAxMk
MjBiMTNiZTktM2UwYi00OWY3LTg5N2ItNDYzYjUzMTE4ZDhjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnJojRqlzjPYsz4kzfrqNybMUFDEDtj02imjS
AE0zwBJ8J81EG8dkMeuYAON8jXkQFZOtHv0SQWHaFEXkKMD8ZZQEuNimoMuZtr/1
tLWumO1elAxvNIC80fxEbUrdTb6I1Xb/iNqdzc8QP/UCsXJCM4QzpwgF3xsSsRuc
V/6ybbScx4Jt+jJMXg8wppmtKE7s35CZEXNQfDe/XJAyRInkib+4gMbSSXozPmIz
3SIs0kYZsN5j4Ja9iu/jIuxD4SWGGxYotp1dEf56edJArcRAUzOlZiFag09f+2qe
2nD3MsgpG6K7a5VeRUR5OT/3SPCouagIMqGS4RmsW7OAYR3jkwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPyLv878bcRsmg7SBXAGee8v6H2zMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy
YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvN2NkYWMxMWEtYzE2Yy0z
NWI5LTk4NzgtYjU5MWU4NzI0OTVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj
OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz
YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi
OWY5M2FhNmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmC4vMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAE5w4x1CiZCX8WLBpIuQGkT+y13zsomENgFfm4licyLv/PFpGO8/aNw5
VaJtjE6PpVvFnbUIahaRqmorpu4ZdBdqWEjSkzUxiQsfJGxakBM5PWyPhMeKCoLR
H2uTnNLU88XX3T44gqG3/Na0X+B2Wy6uCE138olT5O3dTP/B7Np0EHJwITu0n3L9
jwjT3j6ze5je5rfQ+6T6HIJqNIBa2/0udDNtglj/3U4X7a9DZfywMThu2cPu20lX
N1xwFRAJf5i0KrErN3I6ewguPKduLm4aGs3ximsBHbv6V0evSbMw2xZ2nstc0XO+
0sIwnaEjn0rLmvML+YYGe4jfgjsNv2U=
-----END CERTIFICATE-----
Generated at Tue Apr 29 08:29:46 2025 by rpki-client