Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/05d04c40-ddf3-35d7-a8d7-5765cd1c588d.roa
File:                     05d04c40-ddf3-35d7-a8d7-5765cd1c588d.roa (raw, json)
Hash identifier:          ZOcf0K1ZDnXvvnynxmL4fkmqerJnbiiaJNLERbr2dFo=
Subject key identifier:   AB:5F:AE:1F:EA:20:AF:05:E8:C8:3F:F5:0E:73:AA:3E:B5:BA:55:B9
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F4328584B16A16A9E6265377097C15280
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/05d04c40-ddf3-35d7-a8d7-5765cd1c588d.roa
Signing time:             Fri 05 Sep 2025 01:00:33 +0000
ROA not before:           Fri 05 Sep 2025 01:00:33 +0000
ROA not after:            Thu 04 Dec 2025 02:00:33 +0000
asID:                     81
IP address blocks:        152.46.4.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 10 Sep 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:16:a1:6a:9e:62:65:37:70:97:c1:52:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: Sep  5 01:00:33 2025 GMT
            Not After : Dec  4 02:00:33 2025 GMT
        Subject: CN=9ab016a7-1044-47f4-bfe8-fb4750420665
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:57:f1:96:45:92:58:3a:89:f5:2b:3f:1e:15:
                    5f:3b:37:de:e1:45:85:3e:7c:ee:6e:e0:8b:d6:ae:
                    78:5e:d5:d1:15:1f:0f:b3:50:19:2f:f0:d1:57:93:
                    95:40:64:8d:1a:b3:3b:aa:dd:4b:76:60:6e:c0:17:
                    14:a7:b2:91:2a:43:c5:4f:9e:79:5f:e0:bd:95:06:
                    34:f0:70:06:cd:72:db:98:9f:91:71:d7:a7:b8:6d:
                    35:8d:df:cd:8e:27:db:a0:f7:87:df:27:45:e4:98:
                    36:6e:4f:75:7f:62:a1:40:69:ca:16:56:24:52:0e:
                    a1:c9:2c:7c:e3:4f:a3:51:fb:38:de:51:57:10:5b:
                    d5:0d:9a:bb:d0:6f:8b:dc:8e:82:97:79:59:65:ad:
                    62:ab:c3:89:14:5a:12:d8:f1:17:0b:1a:25:67:58:
                    23:62:46:d9:e3:73:00:c2:15:7c:20:2e:5f:c0:12:
                    e5:03:97:7d:86:70:2e:80:d4:9f:c6:74:2b:5e:aa:
                    0c:c3:15:64:d1:a6:5b:5e:71:6c:16:f5:c8:3f:87:
                    c2:94:be:e7:e1:43:e8:13:4c:61:fd:dc:b4:d6:e1:
                    dc:aa:56:d9:bc:e2:f3:e6:8b:d2:46:e4:9d:1e:0d:
                    40:14:da:25:44:43:87:01:69:cb:bf:1f:02:97:f3:
                    0a:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:5F:AE:1F:EA:20:AF:05:E8:C8:3F:F5:0E:73:AA:3E:B5:BA:55:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/05d04c40-ddf3-35d7-a8d7-5765cd1c588d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.46.4.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:f3:b0:3b:80:e6:a9:44:a6:48:2a:0c:f8:32:2b:01:5e:93:
         e2:8c:4c:a3:0b:ae:6b:8a:6b:a0:69:03:3a:f9:33:2d:4c:d8:
         8c:6e:90:f3:ec:c0:35:d3:cc:46:42:06:c3:87:99:3a:7e:69:
         40:3d:0f:ec:39:5a:78:20:8c:61:53:e9:bb:b8:92:c2:18:fd:
         c1:9d:7f:e6:c8:e2:ac:94:f1:06:b8:cd:90:ae:c3:be:b6:b9:
         5f:8a:c2:e8:66:51:f0:1c:5b:08:36:77:71:49:b2:a4:4c:dd:
         63:dd:38:d5:b3:67:74:9c:4f:5d:96:69:96:83:c8:9e:96:20:
         48:80:ee:71:7e:86:63:10:19:99:cf:fd:04:f1:11:0b:50:9b:
         03:6c:06:e6:99:56:f6:d4:31:36:3d:0c:d8:4f:0c:f3:76:d7:
         da:28:08:63:d8:d9:fe:7c:4c:82:7f:b4:e2:7f:89:63:8f:e0:
         e9:a3:12:02:73:22:6d:06:7a:bf:24:ae:0f:a1:ad:a4:12:14:
         9b:78:a4:aa:d3:3b:f1:c6:d6:22:18:b3:53:4d:5c:50:b7:32:
         b4:81:de:06:95:4b:1d:ba:72:02:b4:4d:d4:37:06:87:a4:86:
         f7:2e:ff:b3:91:bf:06:c4:e8:59:5d:b3:22:9a:c2:1a:fe:fa:
         63:7c:7a:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 08:05:56 2025 by rpki-client