Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/9ff78830-d598-3c30-b54a-e5a6ee37efea.roa
File:                     9ff78830-d598-3c30-b54a-e5a6ee37efea.roa (raw, json)
Hash identifier:          ydpzfEymg7j6VBIn4LPhpVuScOTBfmcmXOVPkHh/RCU=
Subject key identifier:   F1:9B:C1:0A:25:78:A6:A8:31:26:B8:4A:29:6F:5D:2E:4D:AC:9A:FA
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F4328584972E2EEF0FB0731241B468890
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/9ff78830-d598-3c30-b54a-e5a6ee37efea.roa
Signing time:             Mon 07 Apr 2025 16:33:13 +0000
ROA not before:           Mon 07 Apr 2025 16:33:13 +0000
ROA not after:            Sun 06 Jul 2025 16:33:13 +0000
asID:                     81
IP address blocks:        152.46.1.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Apr 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:72:e2:ee:f0:fb:07:31:24:1b:46:88:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: Apr  7 16:33:13 2025 GMT
            Not After : Jul  6 16:33:13 2025 GMT
        Subject: CN=0e891fe7-24d1-4cae-928c-4fb62c739d43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:8a:18:d0:dd:bb:97:c5:8a:7d:3d:b9:a0:1b:
                    18:82:5f:6c:4d:1d:00:a7:4f:79:e7:94:c0:df:7f:
                    e1:c8:0d:01:24:bd:df:71:af:22:46:df:b3:0e:b0:
                    12:76:c3:d7:0c:84:a4:9b:e8:f2:1c:0f:db:f5:32:
                    2a:b9:74:a8:e4:9f:b0:ff:2c:af:e6:72:21:61:ee:
                    c4:1a:f8:3c:46:dd:fe:ea:08:42:39:7c:44:0c:41:
                    0e:2d:45:ec:b9:9d:49:83:18:bf:f8:60:38:f3:c8:
                    3a:11:13:04:65:3b:a9:26:0d:11:86:ef:92:bd:bc:
                    c3:7a:f7:c6:aa:16:42:01:85:56:d6:cb:7e:e7:63:
                    b7:55:4e:01:92:4b:9e:86:53:d1:3d:89:e6:74:de:
                    b3:b0:76:e7:bb:37:a4:a1:fd:73:f5:9d:34:a1:30:
                    15:ab:99:e5:79:ab:87:07:36:80:56:ab:0f:69:42:
                    44:a4:c4:c8:1a:6e:fc:4e:42:cc:7e:7c:20:a2:c8:
                    95:77:d8:c2:2f:5f:7c:fa:cb:09:a2:dd:c7:5b:f5:
                    97:fb:95:72:27:fa:dd:8c:c8:d1:fe:76:3c:01:39:
                    b7:9b:df:45:70:98:03:e6:cd:0c:2b:35:d6:5f:0f:
                    cc:cf:7d:91:50:a8:a1:f8:2e:16:77:c1:ef:6d:4d:
                    84:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:9B:C1:0A:25:78:A6:A8:31:26:B8:4A:29:6F:5D:2E:4D:AC:9A:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/9ff78830-d598-3c30-b54a-e5a6ee37efea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.46.1.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:d2:e1:f4:76:7b:55:fc:d2:b6:ad:96:8a:74:a4:8a:a0:24:
         e3:2f:87:a8:d4:f1:c6:d4:95:d6:46:27:f5:11:90:6f:ce:31:
         90:d5:86:64:98:f8:c5:a0:fd:3e:98:b6:12:ec:42:f0:b4:fd:
         c2:ff:48:82:ee:b2:f6:6e:45:50:67:99:78:56:93:29:90:c8:
         58:35:49:4e:f7:00:8b:17:a2:87:77:ae:e5:34:25:ca:51:ae:
         a0:48:4f:e7:5b:3a:60:9d:6f:48:b9:63:76:11:d0:0b:46:e0:
         a6:1c:5c:a4:5e:03:c8:08:bd:17:09:61:3e:db:89:f0:fd:09:
         b5:2d:19:65:35:b6:67:a1:d4:c5:a3:c9:5c:66:f5:cf:51:70:
         3e:a8:e1:8b:94:f0:8c:dc:14:a2:99:11:d2:48:01:44:0d:47:
         f2:ab:d2:89:05:26:07:10:1b:46:2c:e3:36:0d:b3:25:ad:c7:
         75:0a:bb:84:6c:a8:b7:47:82:c7:ac:ae:bd:1b:93:84:72:8f:
         59:3e:2c:bd:48:cd:8d:76:a1:9c:bb:96:3d:26:68:6a:8c:84:
         b4:bf:2c:e0:69:8d:47:be:1f:e6:ea:14:01:61:c7:89:5a:f5:
         da:60:6c:fe:92:66:7c:43:f2:20:e9:30:0e:23:74:08:25:0c:
         2e:ad:71:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 12:53:20 2025 by rpki-client