Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/c36ad6f3-1ac2-3b86-8513-279c98f52ff5.roa
File:                     c36ad6f3-1ac2-3b86-8513-279c98f52ff5.roa (raw, json)
Hash identifier:          5xBdcOn5x1/jTfOm/CDo92ltBjMWdKZhed1NqArNntY=
Subject key identifier:   69:E4:2E:18:C1:1B:96:2D:83:26:89:4B:06:26:F5:5B:C8:6D:0D:AF
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F4328584A0727D1DEBF4F689A10F55680
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/c36ad6f3-1ac2-3b86-8513-279c98f52ff5.roa
Signing time:             Fri 30 May 2025 19:11:39 +0000
ROA not before:           Fri 30 May 2025 19:11:39 +0000
ROA not after:            Thu 28 Aug 2025 19:11:39 +0000
asID:                     6559
IP address blocks:        152.34.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:07:27:d1:de:bf:4f:68:9a:10:f5:56:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: May 30 19:11:39 2025 GMT
            Not After : Aug 28 19:11:39 2025 GMT
        Subject: CN=1ff0418b-7257-4099-b02c-45dc861c5335
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:a0:c5:70:68:2b:00:b9:4e:b6:04:59:08:12:
                    e3:e2:86:83:de:ca:59:a6:da:89:68:ae:3d:d6:9a:
                    a2:83:d9:78:43:34:d4:50:26:27:a6:8f:42:c6:ff:
                    f5:a5:25:ba:e8:ae:8f:69:4a:23:38:d5:08:91:ef:
                    80:71:90:ea:a7:f4:b2:cd:ef:1d:06:ae:82:fa:f3:
                    53:8d:52:ab:7f:34:cc:16:f6:56:63:b0:0d:c4:f7:
                    79:d2:3a:48:9f:a1:60:c8:2e:ee:77:82:66:f5:a5:
                    97:b1:22:16:8e:5a:b7:b9:5b:cb:31:68:66:5c:15:
                    ed:9f:50:32:3a:a0:26:f7:cc:26:3a:3b:0e:dd:b7:
                    d2:43:99:35:0c:61:71:12:1a:b6:42:eb:79:4d:af:
                    b9:5e:63:fc:e3:55:f3:eb:3a:b9:35:dc:eb:a9:0b:
                    ab:c8:13:f1:4a:33:65:ec:1e:7d:a5:9f:bf:59:6e:
                    3a:a9:9f:f7:c9:f4:4d:d0:14:2d:68:14:95:72:95:
                    66:60:02:b8:b8:ce:1e:8d:9c:e4:7c:45:2f:ad:e4:
                    93:21:b9:f2:0c:3e:0c:03:d1:bd:71:ac:2a:38:fa:
                    88:5f:d3:b0:c9:49:01:8d:99:b4:21:33:38:90:f1:
                    85:06:00:c8:bb:dd:d4:91:b5:e6:05:f0:4d:bb:50:
                    bd:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:E4:2E:18:C1:1B:96:2D:83:26:89:4B:06:26:F5:5B:C8:6D:0D:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/c36ad6f3-1ac2-3b86-8513-279c98f52ff5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.34.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:2b:0d:ba:e4:a3:8d:3e:bd:d5:65:f8:b0:6e:9a:e3:52:39:
         7c:ad:95:a0:97:3a:45:7f:b8:93:5b:57:2c:3f:34:4c:4b:de:
         38:8a:1a:25:e8:2a:ea:7a:6e:fc:24:36:11:9a:a5:5a:c1:49:
         d8:8a:fd:6e:3a:11:1c:89:da:9c:4b:fd:90:82:69:cd:d0:4b:
         2d:44:1e:2a:fe:79:74:a3:3e:aa:11:8f:60:36:3a:2f:ed:6b:
         b2:bf:9e:62:61:1c:1e:a8:4c:32:d7:61:b8:33:2b:52:6c:69:
         c6:bf:98:58:36:b2:1f:62:6b:0f:66:d4:43:4c:d9:03:a6:38:
         85:89:c6:c8:44:43:e2:7e:fd:af:cf:44:01:ad:d9:b3:76:d1:
         58:c7:5e:20:7a:0b:1d:2a:20:a5:48:e2:2f:27:9f:92:e7:01:
         9d:c9:24:1b:01:ff:78:23:b0:c9:40:a9:91:16:0c:fe:83:08:
         14:be:a9:fc:25:51:f2:bb:d8:1f:cf:59:39:67:93:cd:28:43:
         df:25:bd:9b:f5:77:f5:1f:9a:0b:75:e5:3f:65:d5:de:9b:59:
         89:6c:3b:78:51:f0:6b:e7:22:80:dc:e8:a7:42:50:a7:e9:7b:
         a2:3e:e1:c5:3a:a4:d2:47:00:31:a5:26:8c:0b:fd:d5:fa:37:
         89:04:47:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 13:17:16 2025 by rpki-client