Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/4b9334e1-7b14-3a62-b895-6125477dfa7f.roa
File:                     4b9334e1-7b14-3a62-b895-6125477dfa7f.roa (raw, json)
Hash identifier:          p8tOpyYm0lh/e7udWt77OdDi3w/AzTmEUfToM6MqBVw=
Subject key identifier:   5C:C4:9D:96:27:D0:77:97:5E:13:BB:FC:3B:50:0D:1A:C5:06:35:A1
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F4328584B16A16A89C10F6BF2A778A4C0
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/4b9334e1-7b14-3a62-b895-6125477dfa7f.roa
Signing time:             Fri 05 Sep 2025 01:00:33 +0000
ROA not before:           Fri 05 Sep 2025 01:00:33 +0000
ROA not after:            Thu 04 Dec 2025 02:00:33 +0000
asID:                     81
IP address blocks:        152.46.39.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 10 Sep 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:16:a1:6a:89:c1:0f:6b:f2:a7:78:a4:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: Sep  5 01:00:33 2025 GMT
            Not After : Dec  4 02:00:33 2025 GMT
        Subject: CN=379f80e5-208c-4984-8803-f3618169282e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:f0:10:5c:bb:da:00:c5:3a:17:c6:ad:7e:3a:
                    c5:8e:b1:9c:21:4e:2a:c1:4c:bb:73:0c:1b:87:40:
                    71:9b:24:77:2a:22:a9:49:11:95:8a:6e:b7:9a:f6:
                    e2:31:1a:cd:7a:2e:73:de:67:c7:cf:61:d0:5d:56:
                    04:12:c0:ef:64:2f:54:95:34:59:b4:e9:4c:6b:ad:
                    66:a2:c2:90:29:03:a9:f7:1d:fc:f2:0e:a5:f8:9a:
                    5f:c0:c1:39:a6:39:67:42:5a:2b:89:3a:fc:c5:39:
                    23:c7:36:ae:3f:d0:2a:66:ad:6d:77:a3:a1:92:d2:
                    da:8a:25:c9:b3:5e:12:8b:96:25:62:be:f1:bb:8f:
                    4f:8a:11:8a:c9:0f:4d:bc:a6:dd:66:43:e7:e2:a8:
                    b0:ff:e9:67:94:e2:51:e0:17:a6:13:c5:a8:3f:b7:
                    26:a9:38:5b:fb:d8:9e:46:4c:34:de:c5:80:bd:03:
                    b0:d6:af:3b:71:07:ef:40:92:31:f0:d0:ad:4a:b4:
                    da:f6:c1:b4:76:3c:0c:21:20:90:57:63:f8:0c:cb:
                    39:34:f9:4f:6b:e2:a4:0d:cb:21:96:bf:96:ea:98:
                    e8:2a:97:98:94:6c:88:85:95:56:25:98:4d:23:80:
                    df:90:ab:4e:7b:a2:20:71:c6:97:bb:5f:67:f7:81:
                    7b:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:C4:9D:96:27:D0:77:97:5E:13:BB:FC:3B:50:0D:1A:C5:06:35:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/4b9334e1-7b14-3a62-b895-6125477dfa7f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.46.39.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:96:c1:0c:43:80:47:6c:90:cc:15:90:33:21:b5:a1:b0:7c:
         17:48:ea:31:a1:4c:1b:fc:34:e2:79:08:10:b8:e0:bb:d2:96:
         19:de:51:3a:71:ff:e0:0d:d9:14:69:f8:eb:19:7d:5b:65:43:
         e9:24:b9:66:a5:d2:4c:a3:48:8d:91:4d:1e:34:f8:b8:44:da:
         8b:bf:d0:73:1c:2c:bd:98:3f:b7:71:b1:f7:c0:9d:83:a6:14:
         ed:b7:bf:47:6a:0e:31:0f:90:0b:08:e9:ff:21:aa:fa:7e:0b:
         42:30:5b:6f:4f:1c:40:26:7a:8d:3f:d0:f6:4e:3d:0c:14:b3:
         88:4d:1b:05:2c:1a:63:b7:e3:5e:7d:f5:38:df:5b:be:87:35:
         a3:22:c7:ca:9e:11:09:a5:ef:4f:1d:e8:fd:f9:17:fc:d6:44:
         ca:f7:65:fb:86:80:1c:41:ad:c7:0a:b3:b2:90:e2:86:11:97:
         18:a8:c1:bf:9c:8d:f2:60:7b:3c:05:4a:bb:af:34:27:33:f6:
         71:65:a3:0f:ca:7c:af:c4:b7:d7:fd:30:4c:c2:25:12:ee:5c:
         b7:c1:a3:56:b3:5f:39:68:f3:02:9d:92:c4:a3:08:da:97:50:
         68:f8:eb:8e:10:64:68:c1:2f:d8:0e:ce:e2:85:0f:c2:07:b7:
         12:0f:81:7b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsWoWqJwQ9r8qd4pMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh
YTZhMB4XDTI1MDkwNTAxMDAzM1oXDTI1MTIwNDAyMDAzM1owLzEtMCsGA1UEAxMk
Mzc5ZjgwZTUtMjA4Yy00OTg0LTg4MDMtZjM2MTgxNjkyODJlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmfAQXLvaAMU6F8atfjrFjrGcIU4qwUy7cwwb
h0BxmyR3KiKpSRGVim63mvbiMRrNei5z3mfHz2HQXVYEEsDvZC9UlTRZtOlMa61m
osKQKQOp9x388g6l+JpfwME5pjlnQloriTr8xTkjxzauP9AqZq1td6OhktLaiiXJ
s14Si5YlYr7xu49PihGKyQ9NvKbdZkPn4qiw/+lnlOJR4BemE8WoP7cmqThb+9ie
Rkw03sWAvQOw1q87cQfvQJIx8NCtSrTa9sG0djwMISCQV2P4DMs5NPlPa+KkDcsh
lr+W6pjoKpeYlGyIhZVWJZhNI4DfkKtOe6IgccaXu19n94F7QQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFzEnZYn0HeXXhO7/DtQDRrFBjWhMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy
YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvNGI5MzM0ZTEtN2IxNC0z
YTYyLWI4OTUtNjEyNTQ3N2RmYTdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj
OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz
YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi
OWY5M2FhNmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmC4nMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABKWwQxDgEdskMwVkDMhtaGwfBdI6jGhTBv8NOJ5CBC44LvSlhneUTpx
/+AN2RRp+OsZfVtlQ+kkuWal0kyjSI2RTR40+LhE2ou/0HMcLL2YP7dxsffAnYOm
FO23v0dqDjEPkAsI6f8hqvp+C0IwW29PHEAmeo0/0PZOPQwUs4hNGwUsGmO34159
9TjfW76HNaMix8qeEQml708d6P35F/zWRMr3ZfuGgBxBrccKs7KQ4oYRlxiowb+c
jfJgezwFSruvNCcz9nFlow/KfK/Et9f9MEzCJRLuXLfBo1azXzlo8wKdksSjCNqX
UGj4644QZGjBL9gOzuKFD8IHtxIPgXs=
-----END CERTIFICATE-----
Generated at Tue Sep 9 08:02:18 2025 by rpki-client