Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/a178f920-6e6e-3aa9-ab38-37f81e009264.roa
File:                     a178f920-6e6e-3aa9-ab38-37f81e009264.roa (raw, json)
Hash identifier:          LqCohju3GFPYFPpJikrYcZEZckyYEBYZSIS2XTW6Y+I=
Subject key identifier:   39:38:87:3A:0E:D7:0A:05:C2:28:76:F4:D2:86:B0:78:02:29:B2:41
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F4328584972E2ED1251B43A750CEE9700
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/a178f920-6e6e-3aa9-ab38-37f81e009264.roa
Signing time:             Mon 07 Apr 2025 16:33:12 +0000
ROA not before:           Mon 07 Apr 2025 16:33:12 +0000
ROA not after:            Sun 06 Jul 2025 16:33:12 +0000
asID:                     81
IP address blocks:        152.26.50.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:72:e2:ed:12:51:b4:3a:75:0c:ee:97:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: Apr  7 16:33:12 2025 GMT
            Not After : Jul  6 16:33:12 2025 GMT
        Subject: CN=b98c9464-7bfe-4698-8b31-f2a3dc870a57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:0e:42:7a:d8:83:89:b2:a0:7b:85:17:05:69:
                    16:dc:b4:94:2b:35:80:ff:d1:d7:17:00:c5:68:6f:
                    83:75:10:f0:05:bc:e8:ea:d6:55:ab:24:3d:e1:63:
                    b0:09:cd:1f:bb:c3:f8:9f:ac:6f:65:60:a0:79:26:
                    b8:75:25:07:41:e7:d5:f4:f8:db:23:c9:89:b1:49:
                    1a:d1:92:f3:39:41:3f:0e:ef:cc:e5:53:46:b4:95:
                    7e:1c:35:44:02:b6:61:30:3e:81:25:ed:3f:e9:a9:
                    3e:0e:6a:5a:58:75:ba:0d:87:a8:4e:60:e0:29:99:
                    be:2b:a3:1e:6a:2d:e1:2d:5b:0f:4d:fe:24:73:a6:
                    88:2e:71:b5:97:71:42:5c:88:b6:0a:da:80:98:94:
                    6b:cf:93:f5:19:db:92:c1:dd:52:1d:05:b8:03:36:
                    5c:03:68:47:b5:3b:ff:7d:8d:28:ed:0d:37:ba:8c:
                    95:08:4d:8b:2e:d3:fd:5a:68:7a:86:a4:86:ee:39:
                    02:e5:9a:8c:bc:5c:0d:5f:aa:3d:20:62:57:a5:e6:
                    c6:6b:c3:9b:3d:9c:6f:5b:ee:6d:ef:33:8a:3c:73:
                    87:dd:ee:f2:10:ad:1d:9e:b5:26:b0:b3:b8:d7:4d:
                    6a:91:b7:06:78:b7:86:bf:7b:93:15:1a:0c:2f:79:
                    aa:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:38:87:3A:0E:D7:0A:05:C2:28:76:F4:D2:86:B0:78:02:29:B2:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/a178f920-6e6e-3aa9-ab38-37f81e009264.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.26.50.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:ce:3f:61:c3:56:75:c8:02:e9:12:a1:21:ac:bd:8b:73:da:
         95:17:0a:8c:4f:15:96:0a:e8:53:fc:9d:72:fd:ad:f6:42:03:
         df:9b:40:9a:32:d1:d7:7a:fd:d9:42:f4:00:d3:4a:f1:8b:52:
         b8:1b:14:de:c0:b4:10:0e:80:dc:26:d6:53:ae:ec:4b:7f:a5:
         19:48:ef:68:28:b4:87:db:6f:13:7b:aa:c1:09:88:9d:e3:04:
         4f:55:3f:cb:6c:2e:c8:5b:21:07:ef:58:72:da:fd:64:6c:3b:
         b3:46:7a:98:72:59:3f:8d:2a:b7:4d:6b:81:b0:07:9f:89:5c:
         b5:f8:47:14:ee:44:e8:a1:22:0d:5e:b2:9a:33:73:6d:27:08:
         4a:50:e0:fb:12:a1:42:29:bf:d3:c2:07:09:3b:e9:17:4f:d6:
         3b:bf:6d:83:08:74:bb:46:bf:31:76:27:d6:d4:e1:f9:a4:52:
         bd:da:30:58:a0:f3:26:4b:1d:d3:88:b5:79:2a:7a:92:11:cb:
         97:8d:c0:8b:c3:49:0b:3d:98:b9:9c:fb:71:7d:0c:79:90:8c:
         29:b9:8a:74:c5:d2:71:94:01:06:a3:4b:28:80:f9:92:91:6d:
         04:67:34:58:3d:9b:df:a5:8a:0f:76:03:47:76:42:20:72:fc:
         18:0b:99:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 18:43:00 2025 by rpki-client