Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/b14d14c0-3b53-3aee-ba42-8948d06bdd8b.roa
File:                     b14d14c0-3b53-3aee-ba42-8948d06bdd8b.roa (raw, json)
Hash identifier:          v0irl5PJkARgY1k6bKtKGUySTLzZ1RK8HlNRifZTFns=
Subject key identifier:   55:C2:0B:9F:7E:E2:97:8F:9C:A1:FF:56:7F:6A:26:CE:A5:F6:84:6A
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F4328584A363FF64A48B913DA0959C1C0
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/b14d14c0-3b53-3aee-ba42-8948d06bdd8b.roa
Signing time:             Mon 16 Jun 2025 16:03:17 +0000
ROA not before:           Mon 16 Jun 2025 16:03:17 +0000
ROA not after:            Sun 14 Sep 2025 16:03:17 +0000
asID:                     81
IP address blocks:        152.31.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:36:3f:f6:4a:48:b9:13:da:09:59:c1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: Jun 16 16:03:17 2025 GMT
            Not After : Sep 14 16:03:17 2025 GMT
        Subject: CN=e71d5466-bd04-49e4-bd34-b2674ebd17f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:f7:af:68:d4:c2:35:0a:41:5c:88:a5:31:36:
                    31:a1:db:a3:9a:97:b7:3e:e9:2a:9e:76:b6:7e:84:
                    1a:6b:74:f5:36:fa:72:03:4c:d4:8b:09:f7:90:a1:
                    3d:4d:52:40:d0:95:d7:af:14:a1:64:7a:24:fb:27:
                    62:22:59:99:37:67:84:8a:44:13:0c:b6:34:40:37:
                    ed:68:f1:18:59:df:82:c5:8a:f6:21:34:86:de:1a:
                    6d:31:e4:54:3b:72:83:e9:6a:ff:2a:f0:6d:cb:c0:
                    7e:9d:9e:e3:56:11:66:35:6d:69:09:4e:e7:d9:6f:
                    00:97:40:ed:58:83:4f:35:fb:dc:0b:f5:fb:74:c7:
                    19:41:bd:ca:38:b8:c1:68:bf:eb:d3:d3:e0:49:dc:
                    f0:a1:c7:6f:ed:fb:b3:9c:89:eb:03:22:af:b8:39:
                    3c:11:b1:07:0e:e2:81:e3:fd:26:38:03:41:8e:4e:
                    ed:19:a4:48:cc:e4:61:d2:3e:53:51:6e:95:90:c2:
                    77:85:69:fc:d0:cf:d0:41:49:71:f3:9f:f0:b5:31:
                    15:b7:f7:ed:41:a0:cd:a4:1e:5d:2a:aa:b6:e9:0f:
                    41:63:3e:12:36:cf:85:f5:11:1a:6f:37:08:a4:00:
                    59:09:a5:77:21:a8:d3:93:6c:b5:8d:23:fd:21:64:
                    d4:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:C2:0B:9F:7E:E2:97:8F:9C:A1:FF:56:7F:6A:26:CE:A5:F6:84:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/b14d14c0-3b53-3aee-ba42-8948d06bdd8b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.31.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:e9:98:24:51:2a:e0:f9:6e:0d:1a:ef:e5:56:58:e2:36:ff:
         64:5c:e6:8c:e9:55:a0:99:be:4d:b0:08:ed:8c:53:04:ab:d4:
         4c:4b:4a:93:a4:8c:d7:ad:9c:33:23:96:a5:0c:8e:7e:c9:3c:
         1b:22:36:67:13:9a:2e:79:21:78:24:dc:5f:6e:c2:5e:d4:40:
         a1:7e:e6:f6:8b:ff:62:c1:ad:0a:77:2f:76:ba:1c:02:1b:fa:
         57:65:35:d8:f1:c6:e2:8c:9a:d0:11:91:f2:a5:1a:16:6d:15:
         1b:45:53:25:50:2d:72:30:a6:a1:50:a3:81:4a:6d:16:7c:51:
         9e:21:82:99:7c:0d:fe:ca:9b:35:b2:bc:2c:87:ae:3c:20:85:
         1b:a2:1f:29:08:8f:5e:07:eb:c2:b9:ea:2d:b8:4f:e0:57:fb:
         03:bc:bf:3f:ee:36:1e:d9:fb:27:fd:2c:c6:2e:a4:50:f2:3a:
         08:c6:16:8b:13:46:c6:17:39:3b:14:1d:ee:20:99:ae:27:35:
         0e:e3:ee:22:2e:e5:4c:19:c0:a0:23:3e:33:5c:f2:98:96:7e:
         9a:59:bd:5d:0c:0b:2d:6e:1f:67:20:eb:d2:96:1d:aa:0a:11:
         08:9f:74:bb:72:31:22:75:90:a2:8d:92:ad:c9:49:3b:5a:50:
         db:90:0b:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 10:54:06 2025 by rpki-client