Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/ed71dd0f-14df-3e56-a189-7a16504c91c6.roa
File:                     ed71dd0f-14df-3e56-a189-7a16504c91c6.roa (raw, json)
Hash identifier:          q5YiyuenBHpqezNXdDQmlsd/9HvMNXjeX9ZgDBMg2s8=
Subject key identifier:   8B:0D:8E:52:C3:0B:D2:71:9E:FE:4E:9A:A2:02:85:CB:34:7F:02:B4
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F4328584972E2E8E2092AF3DF72D78D60
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/ed71dd0f-14df-3e56-a189-7a16504c91c6.roa
Signing time:             Mon 07 Apr 2025 16:33:10 +0000
ROA not before:           Mon 07 Apr 2025 16:33:10 +0000
ROA not after:            Sun 06 Jul 2025 16:33:10 +0000
asID:                     81
IP address blocks:        152.34.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:72:e2:e8:e2:09:2a:f3:df:72:d7:8d:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: Apr  7 16:33:10 2025 GMT
            Not After : Jul  6 16:33:10 2025 GMT
        Subject: CN=4d7c3777-6eae-48dd-abdb-a8ff55709bb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:5b:68:8a:c2:29:a9:ee:46:a6:5a:14:b4:0f:
                    d7:44:a7:1f:f2:a1:ff:9b:39:69:a9:b4:39:6f:ee:
                    b2:92:49:40:1b:52:03:e6:62:1d:80:ad:1f:98:82:
                    c2:e5:fe:a1:94:16:76:74:b7:91:87:38:e2:d7:d9:
                    b9:fe:30:27:11:30:8e:52:2e:33:06:ca:34:06:b0:
                    e1:26:a6:f5:4f:49:cc:86:32:0b:02:3f:d4:2b:95:
                    7e:7d:64:90:e6:b7:1b:f2:72:f7:38:70:88:a3:89:
                    9a:3c:a0:2d:d2:82:2e:6b:40:ba:7f:9b:31:ff:91:
                    6b:7f:ee:2b:8b:32:22:b9:8c:55:57:a5:d2:9e:b2:
                    72:e4:f6:03:39:72:11:ad:c5:5f:84:64:97:e4:d8:
                    6e:af:cb:d9:38:a3:36:31:d8:ba:52:d6:81:7b:03:
                    b3:95:ad:0f:bc:90:c0:6a:ce:ad:a4:28:86:7c:c9:
                    5d:8e:69:d7:6e:98:11:b0:62:e9:9c:be:24:97:6b:
                    d0:ce:fe:ce:d6:18:0d:ed:d4:6f:81:2d:b0:ce:00:
                    f5:48:3e:c1:57:12:06:d2:a3:d7:de:67:20:71:a4:
                    17:21:63:2f:9e:42:13:72:56:09:23:f2:44:43:f8:
                    ec:d9:ab:ad:34:ba:7d:93:04:cd:be:03:ff:c0:6c:
                    8a:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:0D:8E:52:C3:0B:D2:71:9E:FE:4E:9A:A2:02:85:CB:34:7F:02:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/ed71dd0f-14df-3e56-a189-7a16504c91c6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.34.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:b4:2b:f5:5b:49:41:bd:34:35:1d:65:7b:e4:e3:80:d5:6c:
         60:73:15:14:91:ef:a7:b6:74:dc:da:2d:4a:bc:79:94:5b:f3:
         83:31:a5:77:73:f4:f2:90:33:f4:5e:c3:43:94:cb:5f:f1:06:
         6f:c5:ca:0b:75:c3:ef:67:af:5f:b5:2c:9f:21:84:74:af:01:
         3d:9a:b7:75:21:cd:d9:0e:9e:21:46:12:0e:c7:16:21:58:90:
         38:0c:aa:c4:59:2e:3d:91:5e:5b:e3:21:0c:94:ed:8e:8e:5c:
         ff:7c:66:ed:cf:ef:34:5a:3d:8d:f9:49:99:ac:c1:06:71:4a:
         8e:75:79:fa:af:55:8b:10:48:0c:4e:f1:f9:47:18:27:d3:1d:
         82:5e:94:70:32:8f:14:41:89:76:86:6c:0c:31:27:17:3b:de:
         f9:59:a5:fb:27:b3:23:88:92:96:50:a9:3d:b0:47:56:2e:f0:
         d6:98:32:55:00:e0:9a:bb:73:bc:e1:89:29:a3:d0:79:09:c6:
         22:a3:5c:23:c9:5e:13:c3:a7:cb:9f:64:f1:3e:46:fe:e1:91:
         16:38:72:a7:c9:66:a0:37:9b:94:ba:98:62:d3:79:d0:ff:9c:
         7e:7d:79:d6:10:48:1a:5b:0f:7d:e5:b8:6c:72:b7:60:74:12:
         41:7a:9e:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 18:40:58 2025 by rpki-client