Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436/a08bb5f5-0230-374a-a51a-b761cea58493.roa
File:                     a08bb5f5-0230-374a-a51a-b761cea58493.roa (raw, json)
Hash identifier:          pV2DYagDwXQJ9Yh5j/owG3GT1KzvxolRbTBX9fa1lS8=
Subject key identifier:   92:C4:53:33:82:45:4B:DC:3F:DA:AE:90:30:3D:38:78:61:A1:0F:65
Certificate issuer:       /CN=03b51393-7784-45a0-9621-168719782436
Certificate serial:       010D0C9F43285849A2C4A4448ACD0A7A69FED200
Authority key identifier: EC:99:4B:99:9B:94:26:05:74:C3:31:52:EC:B9:D2:FA:8E:3F:05:22
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436/a08bb5f5-0230-374a-a51a-b761cea58493.roa
Signing time:             Thu 24 Apr 2025 20:10:59 +0000
ROA not before:           Thu 24 Apr 2025 20:10:59 +0000
ROA not after:            Wed 23 Jul 2025 20:10:59 +0000
asID:                     10384
IP address blocks:        152.87.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436/03b51393-7784-45a0-9621-168719782436.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436/03b51393-7784-45a0-9621-168719782436.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 05 May 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a2:c4:a4:44:8a:cd:0a:7a:69:fe:d2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03b51393-7784-45a0-9621-168719782436
        Validity
            Not Before: Apr 24 20:10:59 2025 GMT
            Not After : Jul 23 20:10:59 2025 GMT
        Subject: CN=bfb58592-e5c8-4970-bd56-d9ea3c9a1a67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:d4:06:51:15:6d:82:4e:e3:51:6e:9f:ac:ce:
                    25:11:43:b9:d3:b8:a6:a0:44:ba:c5:cc:ff:6e:c6:
                    29:5e:c4:d6:52:e0:4e:d7:d8:f2:e3:d6:40:b8:a9:
                    9c:b0:fe:63:72:66:f5:61:68:23:d0:48:17:d0:18:
                    b4:7a:27:14:db:34:c7:b0:2b:e6:d0:99:4d:b9:03:
                    a9:34:e3:4e:8f:e7:e1:90:3f:b5:18:da:0e:a3:a8:
                    58:05:47:d8:37:f6:fa:d8:25:44:cf:96:87:cb:1c:
                    4e:71:16:96:c4:20:ff:09:05:18:35:b4:61:5c:e0:
                    d9:e5:3a:ca:be:15:14:9e:c4:a9:09:ab:02:b1:57:
                    9a:46:47:4a:ac:a4:5f:a5:ca:52:ce:72:9b:13:be:
                    e1:f1:16:68:f5:9c:17:01:14:8c:fb:99:59:63:b9:
                    d1:91:ae:b5:f6:8f:17:40:f6:80:18:8c:e3:91:7e:
                    65:98:c9:7c:19:d7:20:46:42:b8:69:6e:a3:6d:f3:
                    12:e8:2d:07:4a:d9:27:b4:ab:b5:73:23:ad:1a:82:
                    51:3f:35:8a:c1:a5:8c:32:e9:2b:32:04:e0:b3:e8:
                    11:90:da:68:0d:46:f6:86:d5:3f:74:1e:65:0b:6b:
                    8e:0d:f3:ee:3c:ac:72:22:e2:09:04:a3:86:66:b4:
                    fd:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:C4:53:33:82:45:4B:DC:3F:DA:AE:90:30:3D:38:78:61:A1:0F:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436/a08bb5f5-0230-374a-a51a-b761cea58493.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436/03b51393-7784-45a0-9621-168719782436.crl

            X509v3 Authority Key Identifier:
                keyid:EC:99:4B:99:9B:94:26:05:74:C3:31:52:EC:B9:D2:FA:8E:3F:05:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.87.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:e2:a6:b7:4c:ee:ed:03:1d:75:62:01:7f:1b:39:d5:e6:35:
         86:e2:8d:43:e0:4f:de:51:e4:77:75:9d:c7:27:c5:b5:c8:35:
         b7:e1:7d:7e:86:7a:31:6f:87:88:c8:fe:2c:70:fc:75:62:e6:
         8f:5c:68:56:d8:13:1b:88:3e:71:83:b7:c4:dd:59:b8:04:61:
         1a:38:eb:7c:73:fe:3f:34:c2:2f:9d:d5:2b:d4:68:24:47:b4:
         2c:b0:67:45:b2:87:5b:92:d4:a2:22:4b:a5:31:4a:bb:64:a3:
         0e:90:45:04:c7:b2:da:58:8e:a6:d9:f7:6e:2f:70:c7:cf:8d:
         7e:fe:a2:03:3c:6a:ca:f4:38:06:c6:af:53:15:60:eb:f0:84:
         4e:0e:09:b8:1a:92:c9:47:8e:60:da:f5:b3:46:f2:d1:15:01:
         74:4b:1f:1a:3b:2d:00:88:e4:ec:f4:a7:cc:73:db:c6:80:83:
         c7:5e:eb:4c:5a:7a:5e:86:1e:e5:df:6e:ba:6e:7c:37:85:83:
         2e:17:6d:39:2a:4b:03:af:f1:c0:93:7d:9e:df:8a:f7:0f:7f:
         60:21:6e:2b:12:93:36:c4:9e:11:ed:09:fc:a9:4a:e6:1d:41:
         ac:52:de:73:a8:e5:1e:59:39:8c:5d:ae:4b:06:86:e1:bb:cb:
         d8:f0:1a:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 00:58:49 2025 by rpki-client