Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/20cec321-dd47-3a51-865c-f55951574558.roa
File:                     20cec321-dd47-3a51-865c-f55951574558.roa (raw, json)
Hash identifier:          Z5nrjRvvSGgVw3ZHL1rvJuyo5n/SYlW/+vSqz3qzUsE=
Subject key identifier:   BE:66:2F:07:D7:0E:BE:6D:28:C2:D3:89:B8:25:A4:1F:F9:44:C8:53
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F4328584A0727D5481230228B7BF7C5E0
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/20cec321-dd47-3a51-865c-f55951574558.roa
Signing time:             Fri 30 May 2025 19:11:41 +0000
ROA not before:           Fri 30 May 2025 19:11:41 +0000
ROA not after:            Thu 28 Aug 2025 19:11:41 +0000
asID:                     81
IP address blocks:        152.46.6.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 08 Jun 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:07:27:d5:48:12:30:22:8b:7b:f7:c5:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: May 30 19:11:41 2025 GMT
            Not After : Aug 28 19:11:41 2025 GMT
        Subject: CN=0d3d63b5-6388-431c-9278-25d6801e2608
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:59:65:f9:2f:ef:2a:56:ad:a6:68:41:72:35:
                    66:8b:34:65:1e:e8:32:f1:66:c5:90:88:cf:30:4b:
                    b9:d2:1f:c6:a2:ff:a1:21:8b:29:52:e0:96:f1:e8:
                    a8:f9:d0:96:79:1c:87:5d:1d:e8:2b:d3:8b:30:89:
                    52:41:78:6f:15:b4:e3:0a:78:53:81:8f:43:67:3b:
                    d8:9b:93:7c:db:27:6e:a7:68:08:2d:81:82:b9:8f:
                    f1:6b:28:d5:52:c6:8c:94:d5:9e:ac:74:f1:3b:35:
                    7d:1e:63:21:e6:21:c5:b4:01:5c:51:36:08:9b:99:
                    e1:d6:03:48:c9:f6:db:5e:a7:5f:61:10:7e:34:d0:
                    74:a9:4c:b2:52:23:fa:2f:99:1e:2e:29:27:ea:be:
                    e6:9e:e8:c3:21:5e:6e:63:98:d3:8c:c9:47:50:59:
                    ce:26:ba:23:5b:6b:34:68:d5:d5:11:77:77:f3:22:
                    5d:19:9a:ee:c7:98:91:bb:cb:03:6a:d9:f4:50:3e:
                    73:dd:b6:fb:ae:52:3a:79:b5:3f:ba:7a:ef:77:83:
                    0f:10:4f:16:e9:ea:f9:cb:fa:b6:1f:f8:7c:33:f6:
                    69:d2:a3:3b:2e:d4:a6:35:bd:c4:a4:07:e7:47:d3:
                    b8:1e:55:47:f0:aa:12:6c:45:84:2b:37:ef:45:81:
                    89:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:66:2F:07:D7:0E:BE:6D:28:C2:D3:89:B8:25:A4:1F:F9:44:C8:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/20cec321-dd47-3a51-865c-f55951574558.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.46.6.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:d9:9f:c6:88:6a:13:af:63:97:00:a8:14:2e:dc:0f:e3:d9:
         e5:bd:b7:fc:bd:87:47:aa:dc:d7:8a:bb:1c:22:52:15:c3:0d:
         b0:1e:e3:ce:fa:0f:86:11:2d:e6:dc:0b:38:12:26:35:c9:61:
         b0:cc:ac:88:de:46:79:df:ae:44:67:8a:ef:9e:6c:a7:75:28:
         9f:b4:7a:81:87:06:51:6e:8d:ee:9c:a4:32:50:04:cc:5d:33:
         94:6e:1f:54:5d:0e:ed:a5:81:13:61:33:ef:29:a8:d2:b3:62:
         0e:12:60:ac:39:e4:95:c8:33:44:06:d1:5b:46:fb:a6:74:9b:
         2a:03:de:64:0c:05:de:c6:7b:3f:28:32:51:c6:ef:6f:fb:fc:
         3c:fe:f4:30:e5:ed:78:18:43:32:83:db:ef:40:bc:de:f1:da:
         a3:6b:26:c1:87:15:82:a5:05:9b:93:71:47:d2:43:87:7a:17:
         a2:85:ac:0f:4a:db:5b:01:ca:98:f3:ba:5b:3c:8c:49:87:5d:
         70:c8:60:c5:b0:7a:af:b6:c1:92:9d:30:e8:b0:f8:ec:31:20:
         90:82:71:76:f3:23:dd:ec:e5:a4:81:90:50:60:43:69:5b:a5:
         78:8c:3a:b4:f0:a8:3e:54:aa:be:75:a8:03:bd:7e:d4:47:c8:
         44:07:c9:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 03:21:10 2025 by rpki-client