Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/eae29da5-5f71-394b-a831-167390f8d4ba.roa
File:                     eae29da5-5f71-394b-a831-167390f8d4ba.roa (raw, json)
Hash identifier:          V4ZJ/uHhJ4sZ9hVeUgVYWLq3W9Yaup495yUdqdRfxj4=
Subject key identifier:   11:1A:22:FD:35:2B:8D:BC:81:08:0C:2B:98:91:C8:0B:50:8F:A3:DC
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F4328584A363FFA268DFEA31693D95880
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/eae29da5-5f71-394b-a831-167390f8d4ba.roa
Signing time:             Mon 16 Jun 2025 16:03:19 +0000
ROA not before:           Mon 16 Jun 2025 16:03:19 +0000
ROA not after:            Sun 14 Sep 2025 16:03:19 +0000
asID:                     81
IP address blocks:        152.26.212.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Jun 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:36:3f:fa:26:8d:fe:a3:16:93:d9:58:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: Jun 16 16:03:19 2025 GMT
            Not After : Sep 14 16:03:19 2025 GMT
        Subject: CN=2ee81538-f6eb-4efc-9ced-d91ba9d3e76d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:8d:4d:e1:83:a3:46:e7:e4:4c:c6:87:de:8b:
                    12:69:b0:40:a3:f2:10:c0:86:91:44:67:65:8c:c1:
                    ba:8a:4d:51:6f:0f:fb:43:3a:26:34:03:f2:7b:ff:
                    74:43:e3:a4:81:06:89:54:37:ef:c2:10:8f:21:41:
                    fd:d3:ea:c8:24:f7:8f:48:18:cf:74:5f:d8:48:11:
                    0a:dc:91:ad:32:dd:bb:d9:ab:66:5b:e0:e9:f6:c8:
                    d5:34:18:02:a7:a4:b2:f7:fc:b6:0c:a5:3d:61:26:
                    bb:b7:16:b4:36:c5:c8:37:9f:0b:7c:d5:81:62:d4:
                    0a:29:e6:4d:26:97:3e:60:89:0a:1b:5a:39:c5:ff:
                    2b:4d:e5:47:82:4c:ea:39:34:f9:a6:95:1d:8e:6a:
                    a2:e0:e0:12:e8:cd:b9:fd:31:1e:0a:72:da:90:00:
                    53:71:25:a2:97:a8:8c:7e:82:d9:75:58:1d:61:d1:
                    12:21:b5:fd:c9:57:3f:24:0d:48:4a:05:da:fd:b6:
                    a6:46:31:47:56:33:5d:72:9d:ed:4f:69:13:41:b9:
                    6b:91:ef:a8:d0:a2:1c:5d:c9:a6:14:1b:1b:7a:0c:
                    bd:f9:8c:c0:28:d3:85:3f:6e:7f:61:b4:13:2e:07:
                    d2:5c:13:52:91:b0:e6:68:9e:51:8e:4f:c4:81:99:
                    11:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:1A:22:FD:35:2B:8D:BC:81:08:0C:2B:98:91:C8:0B:50:8F:A3:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/eae29da5-5f71-394b-a831-167390f8d4ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.26.212.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:ba:e7:ed:aa:47:f2:cd:6f:55:ec:27:17:9a:89:f2:40:5a:
         5c:4f:2e:96:e3:0d:b6:9d:89:68:a6:2c:e2:c8:5b:44:55:08:
         9f:ef:dc:29:a1:ff:8a:fe:d4:4c:f5:48:90:b7:15:d6:35:6f:
         db:57:05:0c:72:63:a5:73:af:c9:7d:df:71:1e:93:38:20:5f:
         03:2b:aa:70:a2:87:78:4a:b6:4e:fc:aa:3c:28:3a:70:63:04:
         25:5d:14:66:74:17:da:f3:4d:4f:15:60:48:0a:65:2d:65:4f:
         e1:2f:ec:42:a5:d3:df:48:36:ad:fa:f1:86:50:b2:cb:ec:ba:
         cd:7e:cf:75:e4:f0:42:14:0a:09:3f:b5:44:9f:09:36:26:21:
         38:dc:7b:d4:db:28:69:1f:f7:dd:d1:06:0a:de:a9:7d:b8:30:
         1c:4a:f1:1c:11:89:5c:b4:1b:e5:34:e0:ab:04:ac:20:46:b9:
         22:c9:65:e7:8e:fb:fc:43:be:5e:f2:24:bb:a7:46:b6:fe:83:
         15:3c:14:b3:11:e0:6d:ec:51:a1:15:1b:de:7f:a0:ed:2d:13:
         40:6e:a8:04:0d:b4:d9:a1:75:5d:23:70:98:57:7d:d9:fd:a2:
         37:31:58:ca:b3:2d:73:e0:99:ea:0e:73:8b:39:b4:27:64:67:
         ea:b5:59:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 18:03:58 2025 by rpki-client