Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/0e9902d3-6aff-3b07-b42c-a182fb647ea1.roa
File:                     0e9902d3-6aff-3b07-b42c-a182fb647ea1.roa (raw, json)
Hash identifier:          p/mCOb7nVaDNppDTvtRz0HVo8hJ00BqfwpoYr3e+yWQ=
Subject key identifier:   08:0A:10:B7:72:B4:E5:3B:46:95:15:9F:CE:05:33:C8:95:00:A4:BA
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F43285849419E7E4F91234C90BA8CA340
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/0e9902d3-6aff-3b07-b42c-a182fb647ea1.roa
Signing time:             Fri 21 Mar 2025 01:00:39 +0000
ROA not before:           Fri 21 Mar 2025 01:00:39 +0000
ROA not after:            Thu 19 Jun 2025 01:00:39 +0000
asID:                     81
IP address blocks:        152.45.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:41:9e:7e:4f:91:23:4c:90:ba:8c:a3:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: Mar 21 01:00:39 2025 GMT
            Not After : Jun 19 01:00:39 2025 GMT
        Subject: CN=eee9fdae-771f-48d6-ae51-51b819d516df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:09:f9:35:67:fc:5b:71:62:16:be:c9:72:a6:
                    dd:87:01:a4:40:4b:22:0e:fd:38:34:b8:a9:5e:7b:
                    05:a4:ac:76:f6:67:15:77:ac:e9:a5:07:9c:fb:9d:
                    80:66:45:f5:a0:c4:6f:a3:e8:74:aa:fc:cf:b1:3e:
                    53:ff:74:c6:c3:b9:47:66:36:8c:2a:0e:0f:16:18:
                    a3:72:1f:7d:7c:7c:1d:37:a4:ac:27:23:4c:89:72:
                    c0:a8:b9:ee:d3:7c:5a:30:ee:5a:8c:bd:0c:61:e4:
                    e5:0e:ac:77:c6:b8:17:bd:f6:49:58:5f:49:8a:b4:
                    35:29:f1:26:cd:1d:7b:88:ae:45:98:60:60:74:8d:
                    b7:20:9a:f3:68:d3:0b:1d:d6:b5:71:40:3a:7d:1b:
                    c3:b8:32:fd:ae:bf:b6:c3:0a:99:91:e8:d5:28:5c:
                    d5:16:e9:b2:cb:ba:d9:ca:94:e1:1c:49:59:89:e9:
                    8d:b5:0f:54:39:cb:b4:5e:b9:f5:65:49:96:8f:ba:
                    1e:31:46:ab:17:8b:26:e7:b7:cb:5b:4c:be:33:09:
                    3e:77:61:f2:08:f7:01:05:71:f6:bb:70:4d:92:2b:
                    c2:e7:86:59:09:ee:42:06:84:f2:8a:bc:40:fd:b3:
                    8f:74:31:36:3c:37:38:5a:d9:11:60:a4:b1:94:82:
                    dc:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:0A:10:B7:72:B4:E5:3B:46:95:15:9F:CE:05:33:C8:95:00:A4:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/0e9902d3-6aff-3b07-b42c-a182fb647ea1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.45.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:e0:6f:36:d2:95:9e:34:6c:3a:3f:59:1b:ab:a6:40:37:cb:
         8a:e9:77:7a:5c:5e:3d:c8:ab:f5:35:b9:fd:d7:c7:e1:0d:de:
         4d:7e:49:e3:96:0f:af:65:aa:39:7f:62:58:49:7f:8e:b9:90:
         db:1a:3c:fa:71:09:76:c3:9e:7b:e6:ca:7f:07:ff:dd:54:23:
         df:a7:52:6a:2c:8c:c0:27:77:ec:dd:fa:e9:ae:f2:ca:81:78:
         89:e8:c3:90:8a:f1:64:32:a2:3e:98:54:76:ff:af:37:92:7c:
         10:35:c7:ce:09:e7:da:31:62:a4:b5:cc:a9:b4:3e:ce:fc:7c:
         ad:ff:a5:a6:74:c0:fc:fa:fe:f1:7c:24:1c:82:a5:4a:cb:ad:
         7f:04:78:36:bc:ca:65:41:30:d7:37:40:26:ea:97:87:d6:8c:
         35:35:69:cd:5a:bd:f5:e9:ba:eb:4c:58:3d:1f:b5:40:a6:d9:
         4f:92:10:7d:d5:3c:b5:b6:6a:71:10:de:c3:ef:54:29:77:73:
         11:d3:19:70:82:1b:9c:6c:6f:93:97:1e:5a:fa:5c:41:c7:7b:
         48:06:43:d2:08:f2:49:4a:45:d7:0c:e6:f6:e0:cd:9a:ad:ea:
         2a:fc:a2:44:78:69:07:5a:dc:fb:86:98:85:15:47:2d:52:bc:
         e8:83:10:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:38:40 2025 by rpki-client