Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/041045c7-0875-3fcc-b384-0a307e2e4851.roa
File:                     041045c7-0875-3fcc-b384-0a307e2e4851.roa (raw, json)
Hash identifier:          VLZVAsN1w64zoUnN4L8X5oG0hkaGJ0j9i6pYdN7Mv4Y=
Subject key identifier:   6C:A7:91:34:6F:CF:55:05:78:6A:1C:29:05:1D:6E:99:99:7A:0F:74
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F4328584A0727D01B2C04C04495D4B480
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/041045c7-0875-3fcc-b384-0a307e2e4851.roa
Signing time:             Fri 30 May 2025 19:11:38 +0000
ROA not before:           Fri 30 May 2025 19:11:38 +0000
ROA not after:            Thu 28 Aug 2025 19:11:38 +0000
asID:                     81
IP address blocks:        152.26.211.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 08 Jun 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:07:27:d0:1b:2c:04:c0:44:95:d4:b4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: May 30 19:11:38 2025 GMT
            Not After : Aug 28 19:11:38 2025 GMT
        Subject: CN=f640163f-c57c-43a8-abce-4edae027ae10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:4e:ea:f2:d1:1a:ae:6d:96:79:cb:1b:d8:3d:
                    2c:e8:44:a1:49:fa:2f:00:bf:f0:01:a7:6e:be:ef:
                    ca:7e:57:06:65:aa:28:ef:00:0d:f8:7c:95:aa:88:
                    74:fc:cd:2f:91:1e:d4:2b:db:27:a4:d8:e8:ab:45:
                    ab:5e:4a:10:b8:10:08:cf:1e:65:95:5b:cc:1f:86:
                    6d:57:6e:17:eb:9a:da:da:27:e8:8f:c6:a9:0b:1c:
                    af:52:c4:4e:e2:ca:f2:08:cb:e2:97:c6:1a:1c:8e:
                    6d:d9:01:cd:85:05:5f:71:23:d8:e3:cd:e7:81:e1:
                    c3:81:e3:c3:d2:67:98:d3:d8:e7:f2:38:cb:7c:28:
                    b0:3b:14:79:99:e9:2e:26:13:df:4a:8d:e2:70:fa:
                    9e:3c:39:6e:f6:25:40:58:eb:39:73:85:ee:9d:9e:
                    2b:c7:8f:b7:5a:da:af:70:c9:0d:d6:a6:73:3f:8b:
                    b9:2a:91:76:5c:a7:03:0f:b3:07:04:b4:65:83:b8:
                    6c:d6:14:73:9e:78:d0:4a:9f:23:e7:a0:48:2c:01:
                    65:f2:62:ea:e0:d5:00:cb:23:18:3d:f6:f2:d3:57:
                    3a:81:1a:40:cf:95:f1:01:30:c6:2e:b1:89:ae:be:
                    0e:a4:f6:83:0a:ec:94:eb:ae:b8:d5:c6:4d:d0:a0:
                    be:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:A7:91:34:6F:CF:55:05:78:6A:1C:29:05:1D:6E:99:99:7A:0F:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/041045c7-0875-3fcc-b384-0a307e2e4851.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.26.211.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:fc:45:17:e6:73:8d:ea:29:fa:8a:fe:fb:3c:35:91:ac:6b:
         f7:ac:0e:05:c2:e9:63:27:01:52:1d:0d:5c:f2:e2:2d:bc:85:
         79:9f:8f:e3:5c:87:e8:83:66:ad:b0:57:2e:89:f3:68:85:ab:
         81:20:e8:a5:f3:2e:ad:62:d1:dc:f5:61:c5:35:97:67:34:ed:
         b7:5b:b0:df:c4:d5:09:46:2a:8a:c7:1c:f8:5b:7b:e9:b5:39:
         95:67:6d:df:67:20:71:e6:be:69:6c:c6:19:81:5e:f9:06:f6:
         68:57:9f:6a:f6:b6:b0:6f:40:d5:08:1e:3e:92:22:66:fe:37:
         4d:60:27:c9:19:b3:69:74:47:01:fa:f9:9a:b3:27:e3:5f:f5:
         7a:65:b9:09:f4:2c:db:9d:52:bb:7b:a7:50:77:7b:97:42:77:
         ff:d4:b8:38:4e:8d:a3:7b:e2:13:06:77:31:e3:6d:e6:c6:1d:
         48:2e:01:51:19:3f:6b:e7:bc:a3:74:99:9a:24:2f:d6:34:36:
         84:f5:d5:13:a1:f0:ef:53:ee:49:be:9c:44:b1:7a:12:0d:ce:
         e2:4c:ad:ab:18:1e:c0:8d:2a:a4:e5:ea:af:28:85:1b:8e:54:
         15:35:86:bb:95:86:38:26:8f:79:b0:71:9f:b4:60:b1:d9:9d:
         0b:41:3d:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 17:30:11 2025 by rpki-client