Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/01bca6aa-20ec-32b6-a77f-5862a9131438.roa
File:                     01bca6aa-20ec-32b6-a77f-5862a9131438.roa (raw, json)
Hash identifier:          FnvWf2Xzwn0Uy9Zh+eOYWAHCyHttZA6yNnVzxU5BF8s=
Subject key identifier:   BD:E0:44:D5:CB:CA:AC:6C:CD:D7:BF:DD:71:34:34:E7:78:F7:23:55
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F4328584A0727D2146DD44C07948FACC0
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/01bca6aa-20ec-32b6-a77f-5862a9131438.roa
Signing time:             Fri 30 May 2025 19:11:39 +0000
ROA not before:           Fri 30 May 2025 19:11:39 +0000
ROA not after:            Thu 28 Aug 2025 19:11:39 +0000
asID:                     81
IP address blocks:        152.45.10.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 08 Jun 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:07:27:d2:14:6d:d4:4c:07:94:8f:ac:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: May 30 19:11:39 2025 GMT
            Not After : Aug 28 19:11:39 2025 GMT
        Subject: CN=b7bb7345-0905-4405-9b4d-64f92fa58143
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:7b:1a:62:d1:26:5f:34:0f:eb:6c:87:3d:ed:
                    90:5e:a7:7a:24:f2:d8:09:eb:21:c5:67:28:a4:45:
                    c1:5e:48:d1:d7:ad:3f:84:12:53:88:e9:62:89:2b:
                    e5:e0:a6:ed:8c:7c:a2:8b:1f:e5:42:96:34:ae:eb:
                    b1:e7:72:95:78:ee:c0:58:2e:b1:89:e8:76:f0:ce:
                    23:3e:2d:4c:cf:58:d7:c3:a2:fd:f7:98:c7:9d:6d:
                    d7:17:b0:98:20:a8:e9:55:12:7b:40:1f:b6:db:ed:
                    12:58:9e:ae:1d:bf:c5:af:94:97:e0:e0:6a:b5:c1:
                    3e:5e:4e:75:35:37:6e:b7:01:c8:6b:8f:2f:12:c7:
                    e8:81:2a:cc:a8:37:43:32:96:75:c0:e3:3b:6d:51:
                    76:e1:53:19:33:49:6b:2c:c0:60:a2:4d:dc:71:32:
                    aa:c1:87:ec:9d:20:74:80:55:70:4f:f8:be:0e:e0:
                    3f:96:8e:db:40:e2:80:02:e8:62:7f:b0:f6:3b:6f:
                    ce:8f:9c:84:96:99:b7:5c:56:bf:7d:e7:de:31:f2:
                    3c:b3:a6:e9:3c:10:6f:f3:fc:10:ba:97:e9:ba:e7:
                    6c:0c:71:e4:0a:db:40:e0:8a:10:23:b0:cb:5a:fc:
                    ff:81:95:29:90:f9:9f:38:8c:e1:2d:e8:41:f2:15:
                    5f:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:E0:44:D5:CB:CA:AC:6C:CD:D7:BF:DD:71:34:34:E7:78:F7:23:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/01bca6aa-20ec-32b6-a77f-5862a9131438.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.45.10.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:9b:29:c1:75:9c:99:7b:ea:c2:c7:98:de:e9:13:30:56:86:
         1d:13:86:5d:5f:cf:45:a8:2d:ca:71:50:54:fa:1e:d3:02:81:
         5e:35:2a:84:f6:c9:a6:40:21:7e:52:9f:6f:6a:de:f8:26:5d:
         fd:85:84:ab:02:e6:a9:b4:e7:8e:9c:2b:d8:5e:fe:69:4b:43:
         3f:a6:15:62:35:89:2d:da:11:0e:7a:24:65:6d:6a:29:c4:f1:
         9d:24:8d:78:3d:93:30:84:fe:4e:d8:e2:23:aa:bb:fa:7c:63:
         e0:f3:3d:6d:7a:da:8a:5d:a7:9f:ae:5e:c1:be:0f:1e:4c:b7:
         b8:4e:20:95:17:cb:3c:0e:da:46:4b:2e:2e:dd:80:91:2d:0e:
         ed:99:a0:aa:17:5e:d8:03:67:f7:81:31:06:9a:68:a4:0e:29:
         01:6c:0d:e3:22:36:86:8b:d7:a1:63:5e:0d:a2:27:7a:fe:5f:
         c5:4b:a8:1a:f0:9e:63:bd:33:89:f8:c4:21:67:bd:ac:1a:1f:
         05:d9:94:47:42:92:db:c2:23:43:98:b0:00:c8:91:fc:2c:09:
         06:01:da:02:27:ad:dd:96:91:5a:d3:f7:00:6e:6d:d3:8a:7d:
         58:dc:3f:6c:aa:53:4a:4e:4f:b8:37:f1:c6:fe:0d:7e:b8:ad:
         a2:0d:92:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 03:15:37 2025 by rpki-client