Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/99d1c125-49e6-3549-a390-b976cc7b3382.roa
File:                     99d1c125-49e6-3549-a390-b976cc7b3382.roa (raw, json)
Hash identifier:          5Rf/LTmFZ5p2WwiEpwrCOUi3wmAl0ziyVwiWS8mGQE4=
Subject key identifier:   DE:4F:2B:71:B0:85:C0:F5:98:7E:A2:AB:B8:0F:FE:1A:3D:0C:BD:A3
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F4328584A363FFC8D4E102A5AFB1A0D80
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/99d1c125-49e6-3549-a390-b976cc7b3382.roa
Signing time:             Mon 16 Jun 2025 16:03:20 +0000
ROA not before:           Mon 16 Jun 2025 16:03:20 +0000
ROA not after:            Sun 14 Sep 2025 16:03:20 +0000
asID:                     81
IP address blocks:        152.45.8.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Jun 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:36:3f:fc:8d:4e:10:2a:5a:fb:1a:0d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: Jun 16 16:03:20 2025 GMT
            Not After : Sep 14 16:03:20 2025 GMT
        Subject: CN=b8c62a09-7fd3-439c-8b1b-5fb691a6c604
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:9e:c6:e6:da:1a:ed:ce:c3:be:41:33:eb:7c:
                    80:49:0b:db:e5:1b:a6:01:ff:03:50:aa:81:d6:60:
                    5e:cb:ed:ab:a2:15:30:e1:92:b2:eb:8a:1f:b5:aa:
                    68:ce:09:e8:dd:c8:b3:57:f2:2c:a4:eb:5d:ff:34:
                    99:0e:e4:58:06:28:b6:5e:4d:3b:14:80:95:a5:12:
                    1f:41:11:19:e8:92:10:5b:8b:5e:de:59:92:fb:59:
                    39:f1:18:e3:88:29:53:37:da:fa:25:bb:76:7f:39:
                    43:e7:fa:ed:69:f0:da:cd:be:79:c8:73:58:ca:f1:
                    b4:51:ad:11:da:b1:7e:47:50:08:f4:9b:d7:19:13:
                    d2:bc:72:b1:ce:cc:f4:62:0d:1e:91:ea:82:fe:8c:
                    0b:54:f7:39:02:6a:ae:eb:92:d0:7f:4d:b0:46:f8:
                    6a:1d:e9:65:04:0f:0e:cb:63:72:d3:35:00:d9:fb:
                    cd:d9:64:b8:2b:f6:67:0d:f6:73:7e:7e:12:97:79:
                    3c:ab:72:37:30:53:72:fa:8e:d3:ab:3c:4f:25:24:
                    ab:d2:28:d6:e4:b0:54:03:38:39:e8:8b:08:17:31:
                    7a:80:c2:41:0e:56:13:cd:f6:12:b7:e7:ad:54:6f:
                    ca:e4:9c:bf:82:0c:af:c7:1f:7a:7b:e2:3f:0f:25:
                    bb:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:4F:2B:71:B0:85:C0:F5:98:7E:A2:AB:B8:0F:FE:1A:3D:0C:BD:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/99d1c125-49e6-3549-a390-b976cc7b3382.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.45.8.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:92:88:23:4a:82:53:e1:12:8f:66:6b:39:a7:97:ee:a5:2f:
         67:fb:20:fe:e1:94:f9:6c:78:82:85:3f:be:e0:6c:38:70:59:
         4c:31:3d:40:0c:cd:21:e2:15:22:0a:bc:a8:bb:a0:4a:33:79:
         6e:2d:6b:c4:a1:46:be:bd:b6:54:19:c1:8a:5a:a8:3c:3f:68:
         b2:cc:51:f4:3e:12:b3:e4:41:74:61:8c:62:20:8c:49:93:2d:
         28:cd:88:c3:80:d1:dc:0a:f6:9a:94:76:e3:0f:3a:7e:e4:86:
         e4:5b:3a:d5:9d:2b:91:27:c8:73:90:9b:19:a1:1e:d4:09:9d:
         7d:3f:ef:31:3b:77:61:37:8e:c0:aa:fe:27:f4:ae:c2:8d:4e:
         17:e6:e4:88:3e:58:81:05:ab:50:86:8e:d8:86:a2:7a:ad:3c:
         84:ba:51:06:ee:a2:a7:e1:d4:fa:1b:6f:b8:01:da:24:14:02:
         86:75:e5:20:51:95:3a:df:7a:b4:8d:f0:73:55:e7:dd:51:e2:
         7f:f3:10:0e:98:f6:22:c4:49:fc:74:fe:9b:e5:6a:a7:2a:2e:
         4c:09:ba:9e:c6:40:36:2d:ff:f6:ae:ad:0c:a3:be:49:85:7a:
         23:a9:69:10:df:f9:dc:50:96:98:b8:da:0e:fc:93:70:4a:22:
         32:dd:92:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 14:59:38 2025 by rpki-client