Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/58402848-a6f2-3ccb-8685-cd982a1c5302.roa
File:                     58402848-a6f2-3ccb-8685-cd982a1c5302.roa (raw, json)
Hash identifier:          19Bh4w3Jb0gnEvgTV4egjQY4CgyFQrZ1FODSiVy42kg=
Subject key identifier:   72:7E:8A:74:94:14:6F:BD:37:3F:94:79:23:52:10:CD:AA:1A:E3:BC
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F4328584A0727D11DCA8269A30F82F580
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/58402848-a6f2-3ccb-8685-cd982a1c5302.roa
Signing time:             Fri 30 May 2025 19:11:39 +0000
ROA not before:           Fri 30 May 2025 19:11:39 +0000
ROA not after:            Thu 28 Aug 2025 19:11:39 +0000
asID:                     81
IP address blocks:        152.26.57.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 08 Jun 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:07:27:d1:1d:ca:82:69:a3:0f:82:f5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: May 30 19:11:39 2025 GMT
            Not After : Aug 28 19:11:39 2025 GMT
        Subject: CN=1c69eeb5-6e4f-4c08-93c1-b295fade6204
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:2c:b1:e7:8e:48:fd:ae:b0:ac:d0:bf:20:d2:
                    19:44:1c:fa:92:d6:85:b6:8f:01:ff:93:66:23:5e:
                    b5:99:7f:8d:f7:4b:a4:c1:44:44:44:c2:8e:ac:f7:
                    33:7e:28:32:96:d7:82:48:e7:b3:d9:b8:52:53:c7:
                    cd:6e:fa:3d:55:61:67:1f:04:1a:12:66:84:1c:e8:
                    2d:bc:96:ad:b0:4d:f1:6e:de:d9:31:a6:bd:5b:13:
                    bd:17:9c:1d:e4:d7:6f:3a:fa:b4:f9:c2:4b:f9:77:
                    c1:f8:85:00:24:42:ba:44:19:15:30:f6:cd:41:6c:
                    a2:fa:2c:5d:52:0b:a4:b8:1d:63:74:b8:2e:64:e5:
                    f5:9f:60:3a:07:d8:71:8f:ee:9a:59:00:25:0c:60:
                    c3:6d:68:3c:80:53:3e:a8:ed:7f:b4:8e:7e:89:12:
                    35:a4:4e:e0:00:4b:8e:a5:32:51:47:2b:d0:9c:97:
                    8c:c9:73:52:e7:d9:02:c0:0b:9d:41:a8:00:4c:2e:
                    55:e1:47:1f:1f:47:ae:e0:95:d8:d1:ff:f8:b8:3b:
                    10:d2:b4:a9:9c:ba:f5:0c:ad:ed:61:90:54:43:b0:
                    8a:cc:9e:b9:14:f8:85:6a:fb:0f:65:5a:c2:ae:dd:
                    6c:46:9d:39:b3:ba:21:40:71:c6:4d:92:e4:e2:12:
                    9e:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:7E:8A:74:94:14:6F:BD:37:3F:94:79:23:52:10:CD:AA:1A:E3:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/58402848-a6f2-3ccb-8685-cd982a1c5302.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.26.57.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:4b:ac:32:40:23:80:f9:c5:b4:e1:97:0d:8b:46:f9:a7:1e:
         b8:05:0f:9b:b2:cc:f2:80:18:b4:d5:35:7c:a1:c7:42:e7:91:
         81:de:5e:3b:4a:e9:02:66:a9:43:c5:c2:7e:c4:91:b4:a4:9a:
         fa:1e:f2:6c:32:cb:cf:87:f7:0c:06:f8:c9:1c:6e:36:89:75:
         b0:17:50:6d:1f:ca:ff:66:cf:0b:58:bc:35:d9:57:39:6b:f1:
         af:d5:ed:94:86:e1:9e:fc:5e:5c:41:ee:77:4f:cf:d9:1c:51:
         90:34:6e:04:ed:90:6f:f1:2c:0c:c8:f6:cf:ba:66:a4:1c:d5:
         2e:af:b7:27:09:c8:96:5d:7f:3a:49:4a:2c:e9:6b:fe:62:be:
         4b:ef:84:f0:cc:07:60:f3:8f:cd:b5:be:0b:35:3c:7a:b8:31:
         e8:b0:01:e1:e3:ff:e5:cd:b8:58:d5:27:ad:78:90:f7:a0:51:
         9a:3e:92:de:06:6b:4d:37:62:b9:66:01:c4:e0:fe:1d:9c:ae:
         f7:08:6e:55:80:83:cc:24:68:1c:45:4f:ab:2b:f5:90:f2:20:
         29:cc:b0:cf:92:9e:fc:40:dd:8f:c8:ef:42:90:0d:9f:eb:59:
         27:a0:01:75:b5:ec:17:11:cc:c8:62:65:d3:7d:6b:40:34:53:
         19:5d:3a:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 03:13:31 2025 by rpki-client