Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/a728ab0d-8d35-3792-a9d2-1c1e91a4d19c.roa
File:                     a728ab0d-8d35-3792-a9d2-1c1e91a4d19c.roa (raw, json)
Hash identifier:          XOvf8v/smlZuitRQ4n8Pnz7YvkDDKZ294+Pd3twUIzA=
Subject key identifier:   67:87:61:5C:0C:5F:BD:7C:80:F8:BE:3F:CA:E5:64:F0:19:06:C8:4B
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F4328584A363FFEDE531F61AAE5803F20
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/a728ab0d-8d35-3792-a9d2-1c1e91a4d19c.roa
Signing time:             Mon 16 Jun 2025 16:03:21 +0000
ROA not before:           Mon 16 Jun 2025 16:03:21 +0000
ROA not after:            Sun 14 Sep 2025 16:03:21 +0000
asID:                     81
IP address blocks:        152.46.6.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:36:3f:fe:de:53:1f:61:aa:e5:80:3f:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: Jun 16 16:03:21 2025 GMT
            Not After : Sep 14 16:03:21 2025 GMT
        Subject: CN=2b134ecd-7432-4338-9d43-bb0b385be50f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:54:7a:b6:fc:48:64:88:67:a8:07:7f:da:45:
                    aa:88:29:60:37:62:49:2d:13:b5:d7:66:e0:a4:74:
                    67:45:d9:c9:bb:c1:62:e0:25:7c:4c:0e:f9:89:18:
                    9b:f2:e6:00:7e:f8:1c:e0:e9:04:a2:ff:d5:e8:fc:
                    cc:83:0f:c8:8b:4f:61:a6:19:17:5f:aa:30:bc:32:
                    96:17:e5:87:6a:4b:2c:2c:80:b4:f6:c5:cb:bf:2c:
                    b3:33:05:20:fc:01:7c:31:84:5f:9e:c2:84:d4:7b:
                    d4:0b:89:a1:4f:71:fb:0d:3d:54:65:ca:e9:c9:9e:
                    91:84:a9:0b:48:ef:69:10:68:50:b7:23:e7:2a:24:
                    1a:e4:8e:63:87:af:7b:59:da:30:ea:ab:8d:ea:8c:
                    8b:e7:c6:f8:6e:3a:74:4d:17:8a:62:a5:d1:69:95:
                    ab:cb:6c:51:3a:e9:76:98:20:a2:c5:18:43:17:67:
                    9c:cf:ad:d0:b8:f5:df:d5:41:9e:44:01:58:7c:7e:
                    08:01:cc:75:f5:68:1c:b2:bb:d8:c0:a3:31:a4:3c:
                    36:d8:7c:1a:ed:31:4c:55:a5:34:e6:38:01:a3:10:
                    a4:4d:3d:b0:66:11:aa:33:c9:03:d1:dd:e9:0a:a7:
                    90:14:b0:ef:0c:58:5b:1d:80:09:72:99:6e:ef:c9:
                    b8:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:87:61:5C:0C:5F:BD:7C:80:F8:BE:3F:CA:E5:64:F0:19:06:C8:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/a728ab0d-8d35-3792-a9d2-1c1e91a4d19c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.46.6.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:0f:d2:70:6e:8f:0c:95:03:b0:bf:ff:5a:06:ea:e8:e8:73:
         9d:a9:6f:96:1e:e1:e5:3c:8b:5f:27:0a:6d:5d:22:1f:a0:5d:
         5e:49:d0:e0:06:04:e4:38:fe:2f:ff:19:6b:3d:2f:7d:3f:73:
         31:1f:97:60:06:44:af:d6:0c:3d:aa:6f:83:65:1f:7c:ce:d7:
         d1:34:d9:8c:d9:cb:60:f2:d9:65:2e:4d:ba:06:1a:02:91:65:
         00:81:e0:ae:b3:44:02:1e:4d:d4:a8:65:59:48:00:df:00:7d:
         3d:9c:85:be:68:a8:0d:d2:87:eb:a1:b0:c1:85:0c:e8:f2:41:
         b3:4f:87:a7:4a:75:8b:e1:0d:0b:55:b7:65:e3:99:ec:87:5c:
         f5:8b:43:2b:9b:91:7e:98:f9:ba:ae:71:45:7f:77:b4:ba:c2:
         f6:bd:87:34:db:87:93:bf:29:9e:26:9c:00:a9:c7:54:d3:9d:
         82:39:54:a6:f8:0a:7c:d5:b4:61:11:e5:45:9d:01:7c:80:89:
         7c:bc:ae:fb:ce:cc:a7:3b:51:33:17:b1:b6:d6:df:16:6c:e9:
         55:8f:ec:94:33:55:b7:53:9c:e0:9f:3e:98:68:17:d3:8c:ec:
         7a:df:b0:a1:b7:15:67:40:22:7e:64:02:bc:02:8e:df:0f:06:
         6c:e8:71:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 22:31:36 2025 by rpki-client