Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/d9254a86-b51c-32c0-a390-eb81b315ffc6.roa
File:                     d9254a86-b51c-32c0-a390-eb81b315ffc6.roa (raw, json)
Hash identifier:          2F6TK04YIZkwtUclOUFpcFKvSZUvsIjUJa8cQgincvM=
Subject key identifier:   6F:80:8D:89:0C:29:23:8C:3F:AF:A9:A2:8D:A4:AE:D4:6F:17:05:14
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F4328584A363FF6DCABE231358023F500
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/d9254a86-b51c-32c0-a390-eb81b315ffc6.roa
Signing time:             Mon 16 Jun 2025 16:03:18 +0000
ROA not before:           Mon 16 Jun 2025 16:03:18 +0000
ROA not after:            Sun 14 Sep 2025 16:03:18 +0000
asID:                     81
IP address blocks:        152.55.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:36:3f:f6:dc:ab:e2:31:35:80:23:f5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: Jun 16 16:03:18 2025 GMT
            Not After : Sep 14 16:03:18 2025 GMT
        Subject: CN=c9c435d8-a5c8-4d6e-9905-f32ebcbe21ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:5c:ba:ba:27:f6:40:cb:be:cc:0e:f1:3e:dc:
                    99:e7:42:c9:d3:41:dc:d0:f8:51:2b:8d:f0:27:3f:
                    75:3e:57:97:3e:7e:da:0c:40:58:f7:3e:fe:e5:c2:
                    d3:89:e2:24:ef:d2:cf:56:e7:82:2e:f2:51:24:b0:
                    e5:78:d1:9a:93:65:04:52:67:46:9a:ea:5f:14:d2:
                    4b:af:c8:25:13:8a:3c:a7:3f:4c:76:92:af:ab:23:
                    0b:bc:16:e6:8c:c1:50:b6:af:81:8e:01:33:17:81:
                    29:32:66:e3:7c:68:e8:87:41:03:ee:8e:7b:aa:df:
                    cf:87:60:d8:df:b7:41:8d:7d:49:65:86:70:0f:cb:
                    16:06:7e:43:cf:e7:ae:3c:7a:10:de:8f:27:d2:b6:
                    13:01:78:73:22:d5:2b:af:ce:8a:9b:67:e6:30:b6:
                    06:61:85:b0:68:be:7d:c9:ab:ea:4a:36:4e:0f:ae:
                    d9:88:db:67:33:31:96:80:72:03:89:f0:d1:51:4b:
                    be:ed:43:1f:ab:db:84:dd:da:31:c3:62:b9:e0:ff:
                    6c:0f:31:53:8c:af:f9:8d:51:db:71:fd:67:66:ae:
                    11:69:42:19:41:fc:f9:41:59:f8:c6:18:44:6d:cc:
                    b6:93:c8:a3:d7:4a:f3:da:38:13:90:85:d4:e9:76:
                    66:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:80:8D:89:0C:29:23:8C:3F:AF:A9:A2:8D:A4:AE:D4:6F:17:05:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/d9254a86-b51c-32c0-a390-eb81b315ffc6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.55.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:c4:71:4d:d7:bf:9b:30:1e:ae:2d:95:95:46:c6:f5:37:04:
         2e:1d:1b:4f:2b:f2:4a:50:87:2e:81:08:72:89:31:3b:87:76:
         fa:c5:cf:94:69:4b:26:39:22:f4:6a:c1:03:fc:9c:a0:b9:2f:
         b3:ed:6d:e7:57:a4:97:b4:a9:4a:ff:7f:cd:07:cf:c7:33:52:
         1b:86:e9:9c:ab:49:53:07:11:86:f9:5b:fe:06:a8:fa:7e:a6:
         11:13:d0:f3:01:d4:2d:89:53:28:9e:95:25:d7:da:89:51:db:
         80:e7:ce:e7:9e:c3:a7:19:2b:f7:2e:be:f3:67:aa:d3:36:5d:
         e5:cb:c0:c1:3a:2a:c1:fa:72:a4:d8:44:ed:9e:0d:87:55:cc:
         50:4d:3f:1a:23:a0:6d:5e:b9:24:57:99:f4:62:ce:5b:bc:1a:
         c6:e8:b3:c1:cc:1d:fa:e9:dc:5e:d5:0f:23:01:d1:33:fc:b0:
         1a:6f:61:7f:7e:9d:c6:f6:2a:16:24:84:b1:27:a6:54:7a:e4:
         e8:7d:97:2c:2e:35:3f:db:a4:48:cf:1f:b8:4e:d8:ad:41:df:
         81:b6:6f:d8:f1:fa:b0:bb:f2:2d:f4:70:6e:53:d9:2c:6b:d9:
         d6:ae:10:6c:07:06:06:d1:85:63:eb:ae:b3:cc:e3:73:df:ad:
         f2:92:78:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 01:52:09 2025 by rpki-client