Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/a7883eee-5cd8-39c7-b26d-e9f4e122d09d.roa
File:                     a7883eee-5cd8-39c7-b26d-e9f4e122d09d.roa (raw, json)
Hash identifier:          3xZp7qfOqrqf1FvSizr3rfK80HdO00znxp1kuUZpklQ=
Subject key identifier:   20:65:4C:42:9F:4F:2C:9E:92:C1:32:60:19:04:E7:69:F0:89:24:5F
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F4328584A363FFB9A6B6DCC5E9773EB80
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/a7883eee-5cd8-39c7-b26d-e9f4e122d09d.roa
Signing time:             Mon 16 Jun 2025 16:03:20 +0000
ROA not before:           Mon 16 Jun 2025 16:03:20 +0000
ROA not after:            Sun 14 Sep 2025 16:03:20 +0000
asID:                     81
IP address blocks:        152.28.1.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:36:3f:fb:9a:6b:6d:cc:5e:97:73:eb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: Jun 16 16:03:20 2025 GMT
            Not After : Sep 14 16:03:20 2025 GMT
        Subject: CN=bffac593-344b-45db-a296-292635d1a6c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:0b:df:e8:5e:38:94:ab:09:eb:8f:15:87:72:
                    f8:d5:68:00:25:22:61:6e:d2:4e:f1:0b:7e:55:c3:
                    cc:20:13:bd:44:8b:47:f1:3d:cd:76:fc:9c:17:af:
                    76:8e:89:b1:b2:da:29:aa:7e:1d:f1:1b:65:08:12:
                    6e:e6:f4:c3:be:a2:3b:c7:dd:86:11:c8:93:f6:ac:
                    77:44:c2:d8:90:4b:99:21:4e:59:f7:bc:87:05:b6:
                    17:0d:4d:13:b7:36:29:9f:ef:78:e1:03:87:fc:da:
                    fe:89:2e:36:48:50:bd:5a:25:5d:53:7e:35:8b:ba:
                    79:05:85:df:d6:d2:4f:6d:97:e3:fb:6f:f7:f5:1e:
                    fd:4b:a0:25:aa:8e:14:fe:f0:8c:6e:7d:9c:6a:96:
                    6f:7f:e1:a7:26:80:41:8d:4f:25:d0:ff:0d:12:d9:
                    cf:45:16:4a:51:ae:93:32:bd:3f:39:0f:c5:4b:05:
                    a4:9c:e6:f0:e3:43:41:6c:e0:74:f5:d3:e3:d5:8e:
                    6c:40:e5:91:60:59:94:c5:c5:67:6e:80:8b:25:57:
                    62:0a:d1:b8:42:cb:c9:e7:5a:27:71:5f:a2:c5:65:
                    d2:19:e6:d9:49:6d:4d:5d:7f:fb:32:02:40:df:bf:
                    b7:99:4d:74:ac:ea:2e:ae:3d:17:ab:25:d5:9c:35:
                    f8:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:65:4C:42:9F:4F:2C:9E:92:C1:32:60:19:04:E7:69:F0:89:24:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/a7883eee-5cd8-39c7-b26d-e9f4e122d09d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.28.1.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:ff:7d:7e:07:3a:ae:8d:c5:12:a2:fb:d3:e6:d9:f7:bb:fe:
         42:68:74:10:ff:28:55:a3:19:ae:d3:97:e9:5c:43:7f:28:8c:
         68:44:b9:c6:d2:06:5a:77:53:c6:c2:69:60:3a:74:25:39:ec:
         fa:5b:08:35:f1:48:21:6c:ff:41:26:3a:b1:9c:23:96:ca:d9:
         94:d1:b4:be:4f:43:f7:de:34:80:2c:0c:fc:66:04:fc:c4:d5:
         7c:f8:01:9c:04:30:f8:da:eb:cd:e5:b4:32:ba:d8:fa:ed:70:
         fa:3a:66:b6:ff:e5:30:fe:cb:f8:2e:8f:4a:af:5e:5a:de:df:
         15:69:7e:86:6f:c3:cb:2e:09:fc:67:83:51:f2:40:2d:c2:c9:
         97:eb:2b:bd:ca:08:83:3c:e7:bc:54:e1:e1:97:4b:d0:0a:63:
         05:80:25:db:05:4e:ee:c2:6d:6d:60:51:d5:6a:43:7e:df:6e:
         fa:c8:cd:47:2b:66:7b:b5:c5:2e:9e:4e:bf:cc:bb:2c:83:af:
         6e:ff:d3:6e:6d:1b:f1:c1:3d:a2:2f:46:8b:cd:72:e1:cf:76:
         3c:d8:1a:d4:59:02:78:eb:05:fd:74:be:c1:f3:b7:76:41:e5:
         f6:ae:33:ed:06:04:32:70:9c:68:33:79:f5:84:ee:c9:42:2a:
         61:6f:e5:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 05:22:51 2025 by rpki-client