Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f173365a-9ec7-3180-8c04-2720896fe0ec.roa
File:                     f173365a-9ec7-3180-8c04-2720896fe0ec.roa (raw, json)
Hash identifier:          0Oe2JIJ5sg9M8DdNRRmF3sThh15jny6u+0tr2vfHebM=
Subject key identifier:   33:07:B0:AC:28:5F:12:46:68:A7:F9:15:BC:31:B4:83:51:97:48:ED
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F4328584A363FF8EE4C6E00860BC62100
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f173365a-9ec7-3180-8c04-2720896fe0ec.roa
Signing time:             Mon 16 Jun 2025 16:03:19 +0000
ROA not before:           Mon 16 Jun 2025 16:03:19 +0000
ROA not after:            Sun 14 Sep 2025 16:03:19 +0000
asID:                     81
IP address blocks:        152.22.48.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Jun 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:36:3f:f8:ee:4c:6e:00:86:0b:c6:21:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: Jun 16 16:03:19 2025 GMT
            Not After : Sep 14 16:03:19 2025 GMT
        Subject: CN=d9a5393c-88cf-4562-a27d-6cd1d8bbcf17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:da:02:f5:af:9a:4f:01:48:3f:94:8a:ce:44:
                    1b:88:32:d7:f5:34:f6:16:52:c2:ce:10:d7:ff:18:
                    58:37:d7:db:ed:4d:63:39:6c:2b:e3:2a:35:05:48:
                    fa:5b:57:d3:6b:93:8a:91:51:ef:ea:31:42:0a:ce:
                    d0:8f:aa:d8:d2:58:04:a3:b0:6e:e2:d5:f8:cb:37:
                    a6:c9:84:36:60:a3:ae:36:3f:36:22:62:e6:0d:dd:
                    d4:c8:e3:cd:2d:e2:29:a9:bb:0d:02:31:df:17:a8:
                    1a:24:51:3e:86:88:1a:ad:e2:bf:3a:bf:9c:d0:f0:
                    a8:fb:69:05:cf:f9:95:f4:93:d7:17:5b:8f:02:bb:
                    0b:d5:95:d9:fd:22:9a:b4:d7:32:1d:30:0d:d1:70:
                    ca:47:64:2e:ee:cb:27:3d:cd:af:14:15:5a:c9:63:
                    cc:de:31:62:a7:30:29:e3:f1:b1:e7:08:ad:48:bb:
                    82:20:1f:95:d0:9a:b7:1c:ff:e1:f6:06:a7:7c:d0:
                    ee:6b:f4:9c:92:fb:43:36:eb:5d:d1:c2:ae:64:fc:
                    b6:a9:69:e0:29:da:8e:81:ce:84:74:c9:7a:20:1b:
                    bf:99:8f:1b:42:43:99:24:ae:63:7f:62:2a:cd:c6:
                    fd:3d:e6:47:05:06:6b:c5:cd:9a:b5:e8:5d:59:37:
                    44:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:07:B0:AC:28:5F:12:46:68:A7:F9:15:BC:31:B4:83:51:97:48:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f173365a-9ec7-3180-8c04-2720896fe0ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.22.48.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:51:ff:6e:5a:06:f3:45:5a:38:ab:44:37:a2:33:e3:40:7b:
         40:9e:eb:62:15:df:1d:a9:4f:cc:0f:72:9d:85:78:d0:07:5b:
         0d:ac:97:a3:b7:ad:b3:52:3c:2f:6f:a3:c8:6d:6d:20:0c:9f:
         38:fd:62:61:ab:8e:4b:7a:0a:ec:eb:8f:6f:4b:98:f7:38:9d:
         98:d1:79:ba:be:ad:c7:56:ac:d1:d4:af:a5:4e:22:96:8a:83:
         9c:be:57:43:9b:93:05:a0:b9:81:e8:c7:73:59:3e:d6:db:1a:
         fb:03:c9:b0:c7:2a:98:01:2a:fc:8a:75:ef:c7:db:c4:7a:e0:
         18:c3:76:11:2a:22:54:22:ba:bf:48:27:25:16:b0:2d:6a:bd:
         0f:c6:76:1a:30:14:13:c7:2c:a5:71:21:ba:5f:a4:68:ae:3a:
         89:3a:f6:ec:10:c1:6c:d2:98:71:d1:8a:02:9c:3b:d2:3f:80:
         3d:ac:83:e7:86:b0:6e:19:58:31:10:ee:b4:66:18:ae:7c:29:
         55:44:d0:4e:2d:0a:2c:7a:39:21:6d:86:96:ae:f1:69:08:55:
         1a:96:0d:cf:8d:7b:98:db:e7:a1:0a:e7:e6:ac:5c:45:90:8f:
         2c:1a:45:35:be:61:8c:6a:b6:ee:f3:4c:7c:a9:2b:e3:2f:62:
         04:35:ba:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 09:55:41 2025 by rpki-client