Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/46123714-766f-3a1e-8b28-20b4cb959fa8.roa
File:                     46123714-766f-3a1e-8b28-20b4cb959fa8.roa (raw, json)
Hash identifier:          ZU4EflOc7dzNBMI8CQxOT0gRtd38oSFyg3KHbzovFos=
Subject key identifier:   5F:F8:1E:D8:6C:21:BB:63:69:66:AD:4E:70:04:78:89:A5:47:C0:07
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F4328584B16A16AFC2B3A2C70126F8180
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/46123714-766f-3a1e-8b28-20b4cb959fa8.roa
Signing time:             Fri 05 Sep 2025 01:00:33 +0000
ROA not before:           Fri 05 Sep 2025 01:00:33 +0000
ROA not after:            Thu 04 Dec 2025 02:00:33 +0000
asID:                     81
IP address blocks:        152.46.47.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 10 Sep 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:16:a1:6a:fc:2b:3a:2c:70:12:6f:81:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: Sep  5 01:00:33 2025 GMT
            Not After : Dec  4 02:00:33 2025 GMT
        Subject: CN=bdcae3bb-5b8f-434f-9e4d-8be114bdd98a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:44:99:ed:0d:08:32:08:a5:88:6d:bb:57:6e:
                    94:b2:f3:9a:a7:14:a2:48:39:48:a4:32:21:c3:87:
                    50:2e:c1:12:43:b0:09:53:63:dd:fd:9b:cc:9c:f5:
                    d0:cc:f6:a0:5f:d1:d4:48:f6:73:94:24:87:f4:61:
                    d5:fa:40:6e:72:fd:26:7c:c2:7a:94:b8:a1:57:1b:
                    5f:2a:9a:ed:df:86:2a:01:b7:44:ea:a5:43:22:2f:
                    09:29:4c:46:e8:e3:1a:8a:50:1f:c6:7b:1b:a5:b2:
                    a2:fd:d7:b6:eb:7b:52:96:ab:2f:2b:b2:80:7d:36:
                    51:15:ce:27:77:58:3c:1b:68:a9:44:81:fd:21:77:
                    83:44:39:ce:d6:bd:3d:cf:6e:2e:f8:37:71:d0:15:
                    90:b6:ba:6e:2f:30:00:7e:38:9e:7d:80:e8:fe:36:
                    3d:90:6c:65:fc:73:f5:f6:3f:fa:ec:ee:68:37:20:
                    9b:5d:4e:a2:33:b6:91:be:3a:34:3d:a5:b4:c1:63:
                    82:aa:ba:45:0f:58:3d:7a:f1:a8:4b:02:3e:9e:8d:
                    7e:57:6f:79:dd:2d:e3:fb:b0:45:80:be:4d:e8:fe:
                    88:3a:34:4d:1f:66:ad:d7:16:35:bc:12:98:b6:73:
                    23:12:06:bd:06:49:2d:a5:0b:23:88:c3:a7:8a:47:
                    b8:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:F8:1E:D8:6C:21:BB:63:69:66:AD:4E:70:04:78:89:A5:47:C0:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/46123714-766f-3a1e-8b28-20b4cb959fa8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.46.47.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:b6:0e:f0:67:50:97:a9:ff:ac:23:b8:26:f3:23:31:ab:2c:
         c5:ed:a1:b4:b7:fa:9e:6c:2a:99:fc:69:56:04:f7:ad:fc:a3:
         61:89:36:e6:a2:89:4b:e0:74:c7:8d:98:7b:36:c5:6f:54:c7:
         69:35:cc:68:64:78:96:60:50:23:c6:46:51:c2:6d:22:da:fe:
         c5:e9:c0:bf:28:cc:0b:e0:e0:ea:94:34:00:ad:31:2a:44:bb:
         56:5b:9c:f6:0d:bc:e7:4a:ee:90:3e:2f:60:3c:04:41:9a:aa:
         67:e5:15:27:fa:25:35:3a:07:78:c6:06:e9:94:aa:b0:85:da:
         71:97:74:34:72:89:1b:00:f0:f3:fe:09:54:05:fb:7d:2b:36:
         10:8f:30:bf:43:fc:bd:9f:7b:73:ab:d4:dd:6b:18:f8:81:4e:
         0e:66:16:5a:cf:ad:2e:f7:e7:23:26:63:24:71:eb:df:5a:cb:
         e3:07:ae:2e:8f:a1:17:33:15:70:f1:f6:31:7e:15:64:e8:5c:
         67:ee:ef:df:c2:c0:8f:04:f4:18:95:46:a3:49:3f:76:1a:52:
         55:51:d9:e0:d1:4a:a8:71:01:d4:b0:47:10:43:01:bb:b6:55:
         c8:c0:a6:b4:e7:7b:26:a4:0f:39:d2:bd:95:fe:00:20:fa:12:
         4d:b4:a2:3b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsWoWr8KzoscBJvgYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh
YTZhMB4XDTI1MDkwNTAxMDAzM1oXDTI1MTIwNDAyMDAzM1owLzEtMCsGA1UEAxMk
YmRjYWUzYmItNWI4Zi00MzRmLTllNGQtOGJlMTE0YmRkOThhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl0SZ7Q0IMgiliG27V26UsvOapxSiSDlIpDIh
w4dQLsESQ7AJU2Pd/ZvMnPXQzPagX9HUSPZzlCSH9GHV+kBucv0mfMJ6lLihVxtf
Kprt34YqAbdE6qVDIi8JKUxG6OMailAfxnsbpbKi/de263tSlqsvK7KAfTZRFc4n
d1g8G2ipRIH9IXeDRDnO1r09z24u+Ddx0BWQtrpuLzAAfjiefYDo/jY9kGxl/HP1
9j/67O5oNyCbXU6iM7aRvjo0PaW0wWOCqrpFD1g9evGoSwI+no1+V2953S3j+7BF
gL5N6P6IOjRNH2at1xY1vBKYtnMjEga9BkktpQsjiMOnike4gQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFF/4HthsIbtjaWatTnAEeImlR8AHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy
YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvNDYxMjM3MTQtNzY2Zi0z
YTFlLThiMjgtMjBiNGNiOTU5ZmE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj
OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz
YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi
OWY5M2FhNmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmC4vMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAA62DvBnUJep/6wjuCbzIzGrLMXtobS3+p5sKpn8aVYE9638o2GJNuai
iUvgdMeNmHs2xW9Ux2k1zGhkeJZgUCPGRlHCbSLa/sXpwL8ozAvg4OqUNACtMSpE
u1ZbnPYNvOdK7pA+L2A8BEGaqmflFSf6JTU6B3jGBumUqrCF2nGXdDRyiRsA8PP+
CVQF+30rNhCPML9D/L2fe3Or1N1rGPiBTg5mFlrPrS735yMmYyRx699ay+MHri6P
oRczFXDx9jF+FWToXGfu79/CwI8E9BiVRqNJP3YaUlVR2eDRSqhxAdSwRxBDAbu2
VcjAprTneyakDznSvZX+ACD6Ek20ojs=
-----END CERTIFICATE-----
Generated at Tue Sep 9 08:09:12 2025 by rpki-client