Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/3b9a6f73-e7b2-347e-9120-aede8be67444.roa
File:                     3b9a6f73-e7b2-347e-9120-aede8be67444.roa (raw, json)
Hash identifier:          5cTJpgVbSJHSyMhPS0LQSaG/1guZ85K7G9IReAYBdJc=
Subject key identifier:   76:19:88:D6:AF:2D:6B:77:31:BC:B8:E3:B0:46:1B:7D:42:C9:82:1C
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F4328584A0727D41F9290DAC6B1F41100
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/3b9a6f73-e7b2-347e-9120-aede8be67444.roa
Signing time:             Fri 30 May 2025 19:11:40 +0000
ROA not before:           Fri 30 May 2025 19:11:40 +0000
ROA not after:            Thu 28 Aug 2025 19:11:40 +0000
asID:                     81
IP address blocks:        152.46.32.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 08 Jun 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:07:27:d4:1f:92:90:da:c6:b1:f4:11:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: May 30 19:11:40 2025 GMT
            Not After : Aug 28 19:11:40 2025 GMT
        Subject: CN=0c215a63-63b9-47d7-8133-833a0c0eab04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:af:2f:03:d0:32:f9:da:48:3f:3d:f4:91:9b:
                    52:2f:f3:d5:a6:2c:04:fa:92:c6:19:c2:4f:08:4f:
                    23:13:6e:d5:ab:84:24:e6:4c:07:44:8f:a5:42:2c:
                    78:67:cf:17:20:ed:fa:06:00:31:13:ce:e1:28:4c:
                    e8:a8:c1:3b:cf:e6:3f:44:c4:18:80:f2:45:54:f7:
                    3d:79:e3:99:56:28:69:ff:5e:b0:15:12:f4:89:eb:
                    6b:84:6d:df:71:86:ba:cb:db:41:87:5b:64:37:9b:
                    5b:f7:19:b0:14:f5:fe:0f:70:4b:43:9b:e8:ff:d2:
                    94:4e:bf:a4:ea:11:06:0f:c5:e3:1b:35:bc:fc:b0:
                    91:cf:8c:5c:90:6a:a2:7a:3a:7e:1e:b3:ff:f1:3a:
                    ee:6d:cc:58:f3:69:b9:42:72:d0:49:0e:91:c1:51:
                    49:d2:82:f2:7f:f7:42:c4:4f:1f:97:86:1f:88:f5:
                    32:80:37:59:b7:de:e4:4e:98:13:b4:96:15:7c:5d:
                    49:76:61:47:e7:27:d4:6a:4a:c3:f6:a9:a9:0a:de:
                    29:c5:90:5d:95:cd:d5:1d:1c:49:16:c2:14:95:43:
                    2f:59:af:c8:26:b5:83:6d:a7:be:98:9b:98:e9:f2:
                    9f:7a:0e:9b:d4:b4:29:39:ad:5a:fd:4c:30:ca:d5:
                    27:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:19:88:D6:AF:2D:6B:77:31:BC:B8:E3:B0:46:1B:7D:42:C9:82:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/3b9a6f73-e7b2-347e-9120-aede8be67444.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.46.32.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:ec:ab:ba:91:05:01:1d:3e:4a:d9:ea:61:5d:de:ee:bd:15:
         3f:d3:06:5c:55:0e:2b:84:ba:b7:76:68:8e:65:21:cf:8c:ea:
         67:43:ae:f3:54:00:c7:c9:f3:ab:f5:3c:fe:6e:84:95:0c:1d:
         83:59:1f:bb:13:d1:74:f1:1b:59:4d:4f:b4:14:8e:6d:18:09:
         2b:17:48:68:c0:17:8a:66:5f:c0:7f:60:f2:ce:01:74:25:53:
         18:04:47:6e:df:ba:d8:fd:9a:25:da:ec:d7:c9:7a:04:10:e9:
         a3:15:67:7a:da:04:eb:37:b3:40:12:ae:d3:92:6e:e4:1f:da:
         c1:19:41:37:66:7d:9a:30:9a:38:40:02:40:85:db:ac:09:c2:
         c2:7e:20:27:9d:9e:f7:b9:d0:e8:bf:09:63:82:b4:89:5b:5a:
         cb:cf:7f:73:26:1f:ad:c5:3b:ac:e2:a3:a6:36:89:d6:67:b2:
         ef:30:9b:86:bf:18:2e:ee:1e:f0:84:17:ae:a7:74:f2:c4:cc:
         12:14:73:af:bc:0d:16:13:6b:28:7b:0d:c6:fd:b4:1f:a1:b6:
         38:bd:60:60:80:5c:d0:00:66:4c:3f:28:57:ee:26:2d:b4:ec:
         74:7d:a0:38:5a:fe:c1:30:62:82:17:9d:32:f1:13:f1:e6:cc:
         1a:66:b2:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 17:23:29 2025 by rpki-client