Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/50062ef3-0042-3386-82f3-ea5e020b877c.roa
File:                     50062ef3-0042-3386-82f3-ea5e020b877c.roa (raw, json)
Hash identifier:          ugIzFJk6GpsZnJQijMVHkWxM4KBYNjsTPo18ihbJJ+s=
Subject key identifier:   4D:3A:3B:DD:A5:CD:00:E0:28:61:40:A2:3D:F0:19:2B:E5:39:54:3C
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F4328584B16A1673EC88AEE3653268E10
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/50062ef3-0042-3386-82f3-ea5e020b877c.roa
Signing time:             Fri 05 Sep 2025 01:00:33 +0000
ROA not before:           Fri 05 Sep 2025 01:00:33 +0000
ROA not after:            Thu 04 Dec 2025 02:00:33 +0000
asID:                     81
IP address blocks:        152.27.12.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 10 Sep 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:16:a1:67:3e:c8:8a:ee:36:53:26:8e:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: Sep  5 01:00:33 2025 GMT
            Not After : Dec  4 02:00:33 2025 GMT
        Subject: CN=cbda05fd-7292-4129-a6f8-5c9d2d6012f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:09:09:d6:5e:a6:1d:1e:ef:9b:45:c9:f0:00:
                    f6:9c:77:0d:63:4f:6f:ba:78:da:dd:b8:98:48:4c:
                    33:08:cf:82:07:e9:68:e2:81:8e:31:05:b2:19:90:
                    14:69:90:e5:c2:53:22:ea:a7:19:ee:e5:6c:a1:aa:
                    b9:4c:15:6d:a0:7d:98:2e:5f:51:2f:8a:50:20:cb:
                    bf:3d:7c:4e:e9:70:1a:a8:f6:5f:f7:bc:ba:f2:53:
                    8c:ce:38:50:30:94:7e:4b:c2:a6:fd:7e:bd:94:04:
                    85:b4:b8:13:8c:06:1a:01:38:8a:2d:e9:d0:b5:85:
                    83:86:20:db:43:5e:e3:bc:27:8f:3a:06:e2:9f:60:
                    a4:60:51:df:42:55:b4:23:a7:e6:80:30:e8:71:0b:
                    9a:7e:fc:ad:93:d1:fd:ef:a0:d8:fa:c1:37:33:92:
                    db:b2:b5:15:aa:9b:fb:62:30:25:37:fa:a7:5e:1d:
                    00:c7:98:6a:6a:9e:a9:b5:b4:17:56:11:25:36:0f:
                    f3:c1:d8:a5:63:b4:78:cb:48:c2:05:ff:65:b1:65:
                    24:d7:32:1c:e4:b7:18:78:cd:08:be:78:b4:69:f3:
                    ef:17:a8:55:be:79:df:0f:16:51:85:5e:71:97:b6:
                    9d:ed:86:2a:2d:1c:43:13:70:c0:3d:aa:42:f4:aa:
                    1a:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:3A:3B:DD:A5:CD:00:E0:28:61:40:A2:3D:F0:19:2B:E5:39:54:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/50062ef3-0042-3386-82f3-ea5e020b877c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.27.12.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:87:f1:b5:9c:2d:d3:96:b9:33:2d:66:ac:3b:b1:a4:36:33:
         57:b8:c1:41:2a:cd:f6:63:49:70:fe:30:90:cc:60:19:9d:02:
         f7:56:1c:0a:c8:3f:87:d9:49:b0:5a:7c:9f:22:c3:4e:fc:63:
         7c:65:77:b9:ae:77:0e:69:ed:6d:32:38:d8:1b:e4:99:ab:56:
         54:70:6d:a2:78:68:31:82:a8:7c:17:8a:49:f4:91:d5:9a:94:
         7a:d7:16:f3:c4:d2:1d:9f:a5:3a:be:a2:14:5c:55:91:83:e4:
         86:30:40:72:46:97:b7:25:9f:fc:86:f5:61:6c:18:9b:a6:42:
         65:9c:0b:aa:cc:e1:99:02:e2:71:c1:80:46:8c:fd:ca:c6:ff:
         07:2f:39:af:47:d3:3a:40:46:6e:e0:92:0f:67:53:d4:be:33:
         f6:a4:c4:72:ca:f5:77:e8:cf:82:d5:18:55:d7:93:8d:bf:0b:
         b9:e3:13:12:69:8a:e7:33:b3:2b:3e:aa:d9:37:c1:61:e2:c0:
         84:92:7f:a4:43:75:f1:97:64:6c:cd:85:91:23:64:8c:e0:bc:
         95:c6:c4:5c:d2:8c:23:d7:9f:0f:21:4e:54:88:6c:14:43:b5:
         f3:2d:ca:35:a8:f5:8d:c9:d6:46:0d:61:9d:99:3b:2a:e1:7a:
         41:ff:f8:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 08:02:19 2025 by rpki-client