Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/83b83027-030c-3fd3-b6f2-f8901ac7dc22.roa
File:                     83b83027-030c-3fd3-b6f2-f8901ac7dc22.roa (raw, json)
Hash identifier:          C8BfQMcMx5YS285PQiMzZKHqQ1QQTjE1838qFQ5x5ZQ=
Subject key identifier:   37:B2:E8:86:85:89:A3:5D:7C:4A:C3:A6:C5:9D:E6:53:38:1A:03:D2
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F4328584A363FFC1AE5CCDF1DB7C47CC0
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/83b83027-030c-3fd3-b6f2-f8901ac7dc22.roa
Signing time:             Mon 16 Jun 2025 16:03:20 +0000
ROA not before:           Mon 16 Jun 2025 16:03:20 +0000
ROA not after:            Sun 14 Sep 2025 16:03:20 +0000
asID:                     81
IP address blocks:        152.45.15.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Jun 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:36:3f:fc:1a:e5:cc:df:1d:b7:c4:7c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: Jun 16 16:03:20 2025 GMT
            Not After : Sep 14 16:03:20 2025 GMT
        Subject: CN=05bb3fb3-986c-4f6d-b80e-1c2ed8e41535
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:44:3d:88:57:3f:c4:d9:df:b2:de:c1:2a:b6:
                    03:c2:06:b0:78:cf:2c:8d:16:a4:6b:12:5b:42:52:
                    6d:e2:3a:34:35:25:d0:8a:a1:98:e6:bc:a9:a6:15:
                    f4:48:c1:66:0e:35:8d:8e:79:8f:0d:14:0b:24:82:
                    09:11:79:e6:93:9b:67:d8:ff:9f:47:d5:f0:b2:bf:
                    ed:77:8b:2a:5d:b7:01:99:93:fb:f9:20:ac:64:75:
                    1d:a2:c9:8b:25:62:bb:4c:71:f6:eb:9b:c6:cb:da:
                    87:20:bd:b3:1c:98:29:8a:28:2f:d4:0c:55:f6:89:
                    51:96:3c:ef:4f:c6:8e:54:72:65:cb:ad:6c:c1:cc:
                    e5:67:03:55:d3:31:83:e4:ed:88:5b:26:fe:bd:d4:
                    63:40:a1:40:40:d7:83:2a:b0:a7:49:83:2b:7a:c4:
                    5d:9c:b0:31:fd:8f:c9:5c:ef:5c:d5:14:9b:2d:21:
                    b1:2d:3c:fe:eb:60:c9:eb:ee:e3:33:3b:2e:88:a0:
                    a3:e8:14:5b:e4:b7:07:fe:79:f3:fa:dd:02:a8:c4:
                    a8:f3:ce:ef:77:3f:f5:1b:c2:da:55:24:87:7a:ec:
                    d7:c1:73:08:7e:df:a0:bd:03:d4:49:83:77:be:3a:
                    bb:f9:5a:ba:7d:cc:57:71:af:85:4b:27:74:43:e5:
                    3d:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:B2:E8:86:85:89:A3:5D:7C:4A:C3:A6:C5:9D:E6:53:38:1A:03:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/83b83027-030c-3fd3-b6f2-f8901ac7dc22.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.45.15.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:77:e3:b3:4b:a2:b0:72:0e:84:5f:81:11:ca:69:b4:b0:50:
         7f:16:aa:df:3c:a8:e8:e1:1f:0f:af:4e:44:a6:fd:2d:bd:8b:
         6e:8b:d9:76:95:a2:cd:e9:e3:f4:82:29:9a:48:b5:ba:b4:c6:
         93:97:c0:ef:76:6e:cc:12:18:ef:37:e9:a4:53:8a:60:6c:83:
         38:c7:7d:b9:02:5a:f1:a7:50:00:e0:a5:f4:12:e5:0a:76:5d:
         0d:0e:3f:1f:37:c8:d8:f7:85:a7:c7:c2:24:1a:0d:c9:9b:13:
         e0:3a:a8:52:ee:78:64:e9:32:6f:4c:56:a3:a9:35:8b:c1:80:
         02:23:70:65:60:0c:13:b6:8c:d7:3f:26:5b:50:81:d8:3d:2a:
         bc:1e:00:86:46:68:68:59:eb:9e:4b:c3:fe:18:94:53:82:e5:
         8f:fb:de:20:ad:e9:55:75:21:a8:6a:84:0c:7a:36:09:53:64:
         b4:f2:24:85:62:d2:0d:53:ac:76:ac:74:bf:e5:23:b8:c4:c2:
         70:be:ee:e0:d4:3b:f9:4d:98:8d:20:0a:6c:32:fc:ba:e6:62:
         d3:15:eb:ad:2d:a7:f3:89:ec:63:b9:3d:12:ff:c3:81:8e:53:
         fe:cc:ff:e5:e9:0d:f1:31:cf:1a:32:18:f1:89:b0:ce:e7:b8:
         b1:1f:28:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 13:27:10 2025 by rpki-client