Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/50e7d031-9f2f-3f86-aa78-352d3194804c.roa
File:                     50e7d031-9f2f-3f86-aa78-352d3194804c.roa (raw, json)
Hash identifier:          S19ZkSong1GtX3p+Wavt2uOJjs4VoIAfer1sFRnXOD8=
Subject key identifier:   F7:2E:D1:02:F8:68:38:1D:02:DE:04:C9:6E:D9:DB:4D:63:EE:BC:93
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F4328584A0727D2E8F24359FB9D5CC500
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/50e7d031-9f2f-3f86-aa78-352d3194804c.roa
Signing time:             Fri 30 May 2025 19:11:40 +0000
ROA not before:           Fri 30 May 2025 19:11:40 +0000
ROA not after:            Thu 28 Aug 2025 19:11:40 +0000
asID:                     81
IP address blocks:        152.46.12.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:07:27:d2:e8:f2:43:59:fb:9d:5c:c5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: May 30 19:11:40 2025 GMT
            Not After : Aug 28 19:11:40 2025 GMT
        Subject: CN=fe829dbb-8fef-46e2-bdae-ecd2370f377a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:5e:55:80:3e:b2:43:d0:aa:89:ff:d5:0f:7b:
                    df:9b:69:72:34:7f:f8:3f:4c:12:ee:0f:eb:1c:6c:
                    be:da:a8:1b:a9:74:16:59:be:8e:d7:5c:62:99:2a:
                    08:32:fa:e2:81:83:e9:f5:89:34:9c:84:89:a2:5e:
                    6c:58:49:51:6a:c4:ee:7c:6e:13:bf:7a:6e:41:46:
                    48:49:ff:8e:56:60:7a:cb:c7:6f:bd:db:04:45:af:
                    92:6a:98:0c:9c:19:bf:0b:56:cb:58:be:b1:b4:25:
                    72:6a:4b:3f:67:07:9f:13:f9:0a:72:47:99:af:25:
                    a0:c3:f5:21:e6:1b:bc:22:73:bc:73:c3:24:b1:d0:
                    ad:e8:b0:f3:f9:88:39:8e:f0:19:43:1e:f0:65:d2:
                    99:db:94:40:22:de:4e:d1:58:d2:85:cc:08:67:d7:
                    37:ba:d9:8c:e2:ec:b5:bd:38:f3:0d:00:97:f6:6e:
                    b1:3a:ab:1e:85:7e:1f:3f:20:53:87:57:fe:65:2e:
                    5e:46:36:64:3d:1f:4b:f6:97:7b:87:39:80:b0:3a:
                    4a:ee:f7:df:40:01:c0:d0:25:82:53:fc:f0:4c:71:
                    05:28:db:8f:25:f5:92:1c:a7:b9:4a:35:d7:90:91:
                    37:c4:f0:32:db:41:ef:3c:a5:37:fd:ba:13:41:28:
                    63:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:2E:D1:02:F8:68:38:1D:02:DE:04:C9:6E:D9:DB:4D:63:EE:BC:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/50e7d031-9f2f-3f86-aa78-352d3194804c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.46.12.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:6b:9c:94:20:67:70:12:0e:27:2b:ec:8c:b4:64:a0:37:6d:
         db:ce:66:07:c6:d6:cc:bf:8a:c5:dc:51:b7:36:bf:f4:38:f7:
         b1:1d:0c:b8:23:68:95:d6:b3:bc:ab:d6:b6:b8:a2:26:1d:db:
         b7:24:98:93:76:00:e6:18:31:5f:89:ec:1e:22:dc:c3:1a:27:
         59:d3:b3:ac:c6:4f:b1:21:44:00:08:70:ba:f2:cf:38:0c:d8:
         91:4b:be:c4:78:e9:09:e9:1d:2e:38:ad:e2:83:3c:55:85:45:
         77:2d:46:79:82:84:3e:fc:dd:f0:09:29:c6:40:84:7e:99:d0:
         a8:a9:f9:4d:b7:d3:fb:e2:d1:c8:bb:87:79:ac:34:40:23:bb:
         fa:15:3d:55:d7:8b:3c:6d:28:01:fd:36:d2:1d:a7:5f:cd:3a:
         1b:1f:21:b3:86:b4:5f:72:0c:cc:09:62:79:ab:1e:66:86:12:
         fe:01:c4:2f:9e:e3:d9:9e:8e:fc:18:10:65:ba:6b:22:9d:42:
         74:38:62:c2:a4:58:41:9c:0c:2e:83:db:fc:79:55:ca:06:fb:
         9d:6f:e0:02:e9:b3:17:f3:33:8d:86:f5:ec:51:3b:9d:10:6d:
         21:57:85:a9:a7:25:55:48:40:a1:a3:7c:90:0c:a7:eb:6a:d8:
         14:9c:fc:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:24:12 2025 by rpki-client