Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/46733762-5d5b-3520-bb45-fd60df6a7850.roa
File:                     46733762-5d5b-3520-bb45-fd60df6a7850.roa (raw, json)
Hash identifier:          Kh84eaE/WJqseeN9d0GvVZAaRcXkoNyr/6LZnPnYh2I=
Subject key identifier:   01:7C:0F:BC:11:C2:60:C1:D0:52:84:1A:8B:35:13:83:B3:D3:60:43
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F4328584A0727CB988B2D8B5E46C80180
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/46733762-5d5b-3520-bb45-fd60df6a7850.roa
Signing time:             Fri 30 May 2025 19:11:36 +0000
ROA not before:           Fri 30 May 2025 19:11:36 +0000
ROA not after:            Thu 28 Aug 2025 19:11:36 +0000
asID:                     81
IP address blocks:        152.16.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:07:27:cb:98:8b:2d:8b:5e:46:c8:01:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: May 30 19:11:36 2025 GMT
            Not After : Aug 28 19:11:36 2025 GMT
        Subject: CN=89d4672b-0e4b-408c-b0cc-ee279be90508
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:c1:9a:de:7f:33:4b:99:35:1d:d9:f0:f4:2e:
                    52:e8:b8:90:7a:95:cf:c3:30:89:0d:33:e7:8e:24:
                    2c:75:62:1b:04:26:7e:12:d5:c7:79:85:09:6a:a8:
                    a5:46:a6:8f:89:fa:89:4b:15:f5:2d:98:cc:65:c2:
                    9e:4a:f5:07:ed:c0:da:8f:23:39:39:04:ec:f5:54:
                    80:69:1a:c4:b1:8d:c8:d1:04:da:8c:02:11:fc:b1:
                    ef:10:3a:fb:8d:43:07:24:45:04:73:29:1e:35:33:
                    d2:0b:bc:a2:ce:e1:f2:48:61:f7:03:93:34:f1:04:
                    cf:bf:ff:62:ac:5f:6b:43:ec:4c:05:b5:7f:18:f9:
                    c3:6c:91:a7:2e:64:2f:5d:35:ed:05:35:aa:77:6c:
                    55:64:86:1b:81:35:35:88:7f:64:65:c8:59:b6:a5:
                    17:18:f4:c7:5c:69:06:28:4e:d7:53:73:cf:26:85:
                    4e:88:7b:79:08:c1:08:8f:e6:f8:82:07:5c:f5:6f:
                    6d:a7:16:8c:68:1e:83:b5:a9:21:1d:79:0e:6d:31:
                    a6:6c:5c:3a:d7:04:4f:78:f5:16:66:4f:ef:11:74:
                    4e:89:c5:c1:67:27:d4:fd:1c:c9:27:91:21:07:85:
                    5b:cf:5f:c2:f7:3e:16:80:ab:f1:27:48:73:75:4b:
                    32:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:7C:0F:BC:11:C2:60:C1:D0:52:84:1A:8B:35:13:83:B3:D3:60:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/46733762-5d5b-3520-bb45-fd60df6a7850.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.16.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:79:18:ea:d1:d5:aa:e7:b9:3a:d6:56:de:12:2a:8e:2a:ed:
         6c:dc:e1:14:61:8c:09:e3:0e:de:6b:70:49:5e:b7:f6:98:f9:
         c7:9f:8c:7a:ce:cc:bc:bc:2c:ad:98:83:4d:61:fd:36:17:61:
         82:30:0f:90:b8:21:ba:6f:de:cf:b4:f3:d0:63:a8:2c:d4:e2:
         1a:21:28:77:76:9d:b1:3f:3d:68:13:2b:cb:a4:b1:7f:4c:4a:
         cf:e7:66:91:c5:24:ea:fc:ee:ef:71:cb:60:64:ec:23:87:25:
         9f:13:ce:06:5c:1b:bb:7d:b2:e7:a7:08:02:66:28:8c:18:e2:
         ab:8b:58:bb:25:a6:33:66:41:f7:ca:8e:48:42:d5:0f:89:35:
         52:f9:c3:9b:61:f2:9f:cb:f8:1a:04:1d:de:16:b3:29:e2:53:
         ca:2f:e3:27:1c:df:09:98:68:7e:8b:c1:36:13:02:67:f0:0b:
         ba:db:3f:55:4a:c3:26:59:1f:4a:c6:f9:7b:c7:4b:f4:a5:4c:
         aa:39:88:58:a6:c7:9c:65:ef:a4:f3:4d:55:1c:f8:c7:05:05:
         40:29:c8:ed:2d:99:fa:33:cc:81:45:bd:f7:87:dd:e1:4c:da:
         f2:b9:ee:2d:64:b0:b7:fe:0c:f4:3a:2e:47:6e:c3:42:f1:1e:
         64:61:50:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 19:52:50 2025 by rpki-client