Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/961912f1-6f68-3426-bf3c-5cdcf6931ada.roa
File:                     961912f1-6f68-3426-bf3c-5cdcf6931ada.roa (raw, json)
Hash identifier:          ZuXQYkERX+2IhRjbUDvH5IGDWl7jirYHQpByGb7/sds=
Subject key identifier:   BB:EC:A1:DB:CC:45:54:31:12:95:4C:5F:97:20:F2:8E:17:7B:EA:E2
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F4328584972E2EDC4272293EF4F499A00
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/961912f1-6f68-3426-bf3c-5cdcf6931ada.roa
Signing time:             Mon 07 Apr 2025 16:33:13 +0000
ROA not before:           Mon 07 Apr 2025 16:33:13 +0000
ROA not after:            Sun 06 Jul 2025 16:33:13 +0000
asID:                     81
IP address blocks:        152.27.12.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:72:e2:ed:c4:27:22:93:ef:4f:49:9a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: Apr  7 16:33:13 2025 GMT
            Not After : Jul  6 16:33:13 2025 GMT
        Subject: CN=d4b5ad64-d89a-4f3b-aecd-b2ac3b98de3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:c0:ad:8b:f8:46:c4:a5:ac:27:69:f7:e9:b0:
                    fb:f1:dc:46:c0:49:66:ce:86:c8:85:2f:76:93:52:
                    65:71:64:7e:ec:cb:e0:2b:90:67:10:52:33:8c:d3:
                    19:39:5b:83:f7:5e:38:6b:f7:47:f5:2e:cc:b6:77:
                    7c:c2:e1:3e:e8:bb:00:c9:71:60:2f:3c:30:f5:2e:
                    68:d5:cb:e4:74:a3:3a:a5:73:f2:fb:74:c7:32:4c:
                    b2:c7:fa:66:8a:f1:3a:af:b4:ab:25:b6:61:32:40:
                    4b:6f:05:ff:c4:4c:43:af:0f:56:d6:8a:48:87:99:
                    fa:33:d2:23:88:63:af:b8:31:61:d4:30:3d:a2:60:
                    fd:0b:16:ab:bf:7e:47:d9:52:58:85:75:4c:51:89:
                    8d:63:a0:33:d5:17:f5:36:8d:83:94:6e:94:35:f7:
                    1a:f8:ad:4a:9a:bf:f1:e7:2f:ea:67:a6:e0:94:b3:
                    3c:60:a0:a7:37:f0:d8:32:31:05:ad:c1:e2:22:32:
                    29:0c:72:db:0d:09:6c:fb:81:35:df:a6:f4:a6:f8:
                    39:12:a3:e0:ad:aa:a1:a0:49:b1:b8:dc:2b:4c:91:
                    91:f5:4e:8a:74:d3:99:42:72:34:5c:6f:1f:29:a4:
                    9c:66:fe:d4:bf:03:a6:ed:5e:6a:6f:fe:dd:7a:fc:
                    0b:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:EC:A1:DB:CC:45:54:31:12:95:4C:5F:97:20:F2:8E:17:7B:EA:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/961912f1-6f68-3426-bf3c-5cdcf6931ada.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.27.12.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:93:4a:9d:e0:85:0e:63:fc:1e:8b:c8:f0:68:9f:25:df:cf:
         9a:42:5b:38:2b:86:21:00:f0:89:93:7d:ff:5b:02:61:a2:9a:
         50:de:71:ab:f7:43:f2:d3:13:49:65:fc:b2:a5:aa:d3:58:f1:
         1d:1a:f7:4a:9b:31:fd:d8:4b:10:2b:e7:ef:be:4f:e5:6e:c0:
         0a:73:ba:28:81:9d:be:5e:3e:49:cf:52:ff:11:28:67:f5:c5:
         24:f5:d6:cc:b0:77:67:1b:93:c7:02:64:8f:b6:81:01:3a:f3:
         f4:a2:be:22:79:09:0e:ba:3f:8a:bf:53:5f:b9:51:1a:ef:a7:
         ba:0b:fd:99:71:38:86:cb:31:31:e3:7b:6c:ac:bc:78:ef:48:
         5a:97:c9:9c:4b:1f:68:5a:21:ba:6b:54:28:b6:c5:3a:07:24:
         e5:09:2a:0e:bb:e9:2b:66:51:47:76:30:f6:06:b0:4b:37:eb:
         b7:a2:cf:3e:d5:a4:1f:b3:35:86:8f:6c:d5:c9:7b:88:c0:b5:
         a1:7f:4b:4d:47:86:05:1d:b0:ee:2f:14:ab:d9:1e:12:87:47:
         df:d1:d8:c1:0e:84:3c:5e:c4:85:fa:76:37:25:46:1d:24:ab:
         ef:ee:ee:89:76:0a:18:2b:45:6f:41:05:0a:9c:8e:10:b3:16:
         fc:b1:36:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 02:25:09 2025 by rpki-client