Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/ab2fdc27-796f-31e2-bee8-1966c8d05149.roa
File:                     ab2fdc27-796f-31e2-bee8-1966c8d05149.roa (raw, json)
Hash identifier:          0eiiuTYh82BHvrOh5KTeaD712uv1mLdx8ZmqR0Kz/sE=
Subject key identifier:   E1:2A:DC:6E:42:47:EB:9A:83:C4:CE:7F:51:A6:51:D7:0C:B4:C3:60
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F4328584A363FFF1FEDB4901FEECD1E40
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/ab2fdc27-796f-31e2-bee8-1966c8d05149.roa
Signing time:             Mon 16 Jun 2025 16:03:21 +0000
ROA not before:           Mon 16 Jun 2025 16:03:21 +0000
ROA not after:            Sun 14 Sep 2025 16:03:21 +0000
asID:                     81
IP address blocks:        152.54.0.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:36:3f:ff:1f:ed:b4:90:1f:ee:cd:1e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: Jun 16 16:03:21 2025 GMT
            Not After : Sep 14 16:03:21 2025 GMT
        Subject: CN=03d95908-6fee-41cf-bfdb-5fa5e0215975
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:ea:08:ed:a6:3f:e5:68:5d:cf:e2:e6:13:74:
                    f7:f9:56:0b:40:bd:4a:6d:19:d1:33:ed:7e:0e:3b:
                    9d:a5:3d:97:ed:d3:02:7f:98:fd:61:e6:e6:7b:ae:
                    0b:c8:bc:6c:19:b8:1e:13:f3:d5:e5:89:c2:2c:f0:
                    bb:38:ec:6f:0e:8b:6d:e1:9e:6e:3c:5a:36:45:01:
                    15:d3:72:1f:22:ce:7c:8b:df:bd:32:7e:2e:c0:9f:
                    99:38:49:69:cf:d0:e3:6f:bf:ee:0b:29:66:f0:e3:
                    cf:9d:34:e7:c4:a4:5a:62:f4:a7:87:6d:9b:6b:11:
                    b4:fc:0e:23:23:2e:94:56:f0:7f:dc:1d:31:d6:3d:
                    83:11:cb:d2:f9:16:11:2c:5e:ed:6d:e0:a5:e0:4c:
                    e6:8c:24:ba:c9:22:31:38:54:92:61:39:a4:84:68:
                    7e:e8:0c:7e:44:a2:9f:10:66:64:d1:7e:ae:7e:1f:
                    7f:0f:0c:ef:d6:cf:ed:ca:c0:f4:38:05:8a:f3:be:
                    35:39:f6:23:77:78:35:89:20:38:bd:c8:4c:ed:26:
                    31:a4:b9:40:29:5c:19:4b:bd:be:56:6b:1b:19:49:
                    8b:af:d6:34:58:e3:5e:75:53:7f:5a:4b:aa:1e:ca:
                    72:8d:5e:13:21:31:d6:b8:fe:a0:39:e0:e8:b7:d7:
                    b6:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:2A:DC:6E:42:47:EB:9A:83:C4:CE:7F:51:A6:51:D7:0C:B4:C3:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/ab2fdc27-796f-31e2-bee8-1966c8d05149.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.54.0.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:b6:d8:1f:bc:65:45:9c:6e:3c:60:0a:5d:75:88:46:c0:1b:
         46:0a:8d:b7:3d:54:14:10:0e:fa:0c:2f:93:5e:51:35:63:dc:
         cf:22:63:6c:02:9b:c5:3d:3d:e5:74:f7:28:2c:9c:33:94:0f:
         1c:23:9c:0d:e8:e6:e3:5f:bf:e3:fc:aa:ca:49:82:90:5f:4f:
         e0:5d:36:7c:40:3e:be:7f:c2:45:11:4e:c5:5d:31:53:e4:3b:
         fc:d5:ed:c5:4e:ba:ac:58:90:62:8f:8f:82:33:69:c1:e5:d8:
         9f:3b:3e:f5:7a:44:fe:e0:66:4a:ad:09:f6:99:95:0b:39:dd:
         57:29:3f:2a:1f:39:08:8a:5f:7d:ac:72:a8:98:40:01:21:b6:
         59:97:72:90:c8:03:e4:37:31:63:3f:99:7f:99:a2:1e:4b:d1:
         3c:9b:14:51:7b:c0:00:e0:6f:d0:2e:c4:ee:d9:62:9f:2e:f9:
         c4:a1:cf:5d:51:53:ed:f4:00:57:ad:3b:20:0d:96:37:f0:2f:
         27:6c:b9:d3:1e:71:69:5a:08:ca:f9:a4:50:a7:2e:21:ab:18:
         5a:86:94:1d:10:ed:f9:da:a7:23:31:16:ad:94:26:dc:61:cc:
         4c:2b:6a:79:34:1b:0e:78:d6:76:a7:f6:85:a9:1c:92:01:23:
         e2:72:0f:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 12:46:46 2025 by rpki-client