Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/0ab5114e-31ff-398f-9f81-03923b89b2e3.roa
File:                     0ab5114e-31ff-398f-9f81-03923b89b2e3.roa (raw, json)
Hash identifier:          M8uQNp5ou6eM4AZAFljTg2wJIy/186EzKZm0ltY5l50=
Subject key identifier:   CB:AB:4C:DD:63:FB:D7:67:55:3F:70:0E:B3:32:4E:06:2E:A6:2B:0D
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F4328584A0727CBDF020A03D793E41C80
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/0ab5114e-31ff-398f-9f81-03923b89b2e3.roa
Signing time:             Fri 30 May 2025 19:11:36 +0000
ROA not before:           Fri 30 May 2025 19:11:36 +0000
ROA not after:            Thu 28 Aug 2025 19:11:36 +0000
asID:                     81
IP address blocks:        152.28.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 08 Jun 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:07:27:cb:df:02:0a:03:d7:93:e4:1c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: May 30 19:11:36 2025 GMT
            Not After : Aug 28 19:11:36 2025 GMT
        Subject: CN=56963c4d-e030-413d-911a-7dd406847cd6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:c1:5f:8e:b6:93:d1:ee:ce:ef:34:08:b6:69:
                    65:17:44:bd:69:ed:58:37:aa:05:37:df:8c:89:c5:
                    2b:85:a7:c8:fb:46:24:f4:df:73:c0:40:6d:fb:3c:
                    f7:b0:9d:b2:e0:84:a0:64:83:54:1c:b0:07:ff:2e:
                    bf:63:ff:bd:c1:d2:ce:06:fa:fe:93:0f:36:6f:57:
                    eb:76:65:09:98:60:b3:6e:ee:fd:ae:15:97:7b:65:
                    0f:20:ee:57:ee:15:4b:65:ca:7d:7c:10:98:33:ba:
                    81:d7:a7:9a:d3:50:21:f8:25:6a:5b:93:51:cd:bb:
                    23:0a:4e:37:e8:95:b6:00:ed:f9:5f:89:ed:e0:d4:
                    c2:40:6b:b0:c9:bc:b6:d1:5b:d4:c4:42:f5:b4:ea:
                    da:1b:fb:f8:a6:8d:dc:11:6f:3c:09:17:f1:71:13:
                    fb:7b:ef:fd:e1:ca:a5:05:ee:4f:dc:3e:50:54:76:
                    a6:06:fe:71:42:90:2f:5d:76:17:ae:01:94:ce:e9:
                    5f:e6:2a:3b:5f:bf:8b:e9:f6:e2:14:d7:c6:b4:88:
                    60:5d:c5:0a:8a:a3:63:a7:24:14:9c:19:92:da:38:
                    5f:fc:e8:d2:6d:58:4a:33:f7:e3:01:88:72:fd:1e:
                    bf:a0:8f:a7:14:14:4d:1c:90:d7:fe:98:da:72:60:
                    2d:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:AB:4C:DD:63:FB:D7:67:55:3F:70:0E:B3:32:4E:06:2E:A6:2B:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/0ab5114e-31ff-398f-9f81-03923b89b2e3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.28.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:98:6e:b5:4f:bd:c5:e6:47:f2:88:88:6f:29:eb:a6:1d:2f:
         76:17:5a:24:07:5a:a2:5e:34:5f:51:54:5f:6b:72:4f:67:60:
         2a:8c:4a:1f:ff:32:7f:4c:b8:bc:99:8e:43:c1:77:c9:db:75:
         d9:ff:1e:82:9c:28:03:82:65:79:49:91:2a:34:c8:a7:9b:43:
         e1:40:86:bf:cc:56:28:c2:cf:f4:e6:62:72:37:70:bc:69:a9:
         75:c5:af:b0:1f:48:7b:10:22:78:dc:98:d1:b8:07:0f:c7:c7:
         b0:b4:aa:0e:e0:98:8e:fa:0a:3d:4a:1b:ff:3b:ec:4e:67:1d:
         1a:84:86:a2:b1:3f:a1:e9:a7:13:8c:d2:04:95:35:3c:d1:98:
         87:5d:1b:f5:0f:6e:bc:35:a8:3e:d6:30:71:39:a5:7d:1a:4e:
         da:98:e5:ba:34:52:db:ee:14:ef:5d:aa:7c:3b:cd:82:78:6a:
         8c:23:b3:ec:3b:52:53:da:9f:ec:2e:9a:67:ce:c8:36:2e:83:
         0a:f4:eb:b0:67:99:01:ce:b7:54:5b:37:e0:dd:32:fb:c7:d5:
         50:94:f2:25:b0:40:f2:f9:11:35:31:ea:d3:18:1e:0f:ae:c3:
         0e:ba:ec:16:7e:98:7c:fb:ca:bc:7e:33:c2:8a:d1:a8:90:7d:
         1d:c2:d0:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 03:23:38 2025 by rpki-client