Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/756d075c-0adf-3426-bb7e-10f0b0d4ec80.roa
File:                     756d075c-0adf-3426-bb7e-10f0b0d4ec80.roa (raw, json)
Hash identifier:          kTN6Qzx43vYL7JFAO0K58cTzJxde3FZq1i6x/3/4NZM=
Subject key identifier:   52:A7:36:A5:42:2A:3A:9B:0A:B0:09:73:FF:EC:9F:C4:0C:D8:91:0E
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F4328584A0727D37446F348CFB27CC700
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/756d075c-0adf-3426-bb7e-10f0b0d4ec80.roa
Signing time:             Fri 30 May 2025 19:11:40 +0000
ROA not before:           Fri 30 May 2025 19:11:40 +0000
ROA not after:            Thu 28 Aug 2025 19:11:40 +0000
asID:                     81
IP address blocks:        152.46.25.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:07:27:d3:74:46:f3:48:cf:b2:7c:c7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: May 30 19:11:40 2025 GMT
            Not After : Aug 28 19:11:40 2025 GMT
        Subject: CN=5b3b347b-be04-444c-9bfc-392e7b5f4055
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:ef:ab:ac:0b:71:ec:a1:d7:76:e0:80:70:aa:
                    e1:0d:79:2a:85:07:b5:33:8f:0d:88:28:26:c2:a2:
                    12:eb:be:6f:cf:5f:f4:dc:cd:40:40:b3:96:aa:0d:
                    3b:a7:55:69:4a:04:7c:14:69:d4:54:a2:70:21:0d:
                    c3:9e:9e:97:28:8f:c9:4b:bf:d9:7b:48:4b:a3:46:
                    4a:25:c6:68:b9:a9:0f:69:49:12:87:00:27:a6:db:
                    e2:67:60:5a:7b:b7:4c:c1:fe:01:90:c4:5a:0d:e0:
                    89:a1:0e:1d:5d:a8:36:a9:89:70:72:c3:63:04:1b:
                    a3:20:44:fc:2f:1a:4f:6d:af:98:bf:32:96:58:c8:
                    b5:b4:6e:01:2e:46:cc:52:f0:3e:90:db:48:23:34:
                    a4:29:e5:77:99:35:ba:ff:36:69:cd:55:9c:d8:fc:
                    76:4d:cc:82:ed:cb:bc:1f:c3:08:18:b9:46:93:d2:
                    91:a2:7a:87:1f:93:c1:84:53:95:2c:ae:ea:5a:7a:
                    27:87:30:ef:74:64:60:df:98:8d:be:a2:43:2e:b2:
                    a0:22:dc:6c:37:a7:c6:2a:98:ce:c9:ec:78:b4:25:
                    71:8f:47:88:db:66:c1:8e:76:b8:ef:13:94:13:ce:
                    c9:8f:bf:b3:bd:c9:1a:14:de:40:d9:21:c9:56:0e:
                    b9:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:A7:36:A5:42:2A:3A:9B:0A:B0:09:73:FF:EC:9F:C4:0C:D8:91:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/756d075c-0adf-3426-bb7e-10f0b0d4ec80.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.46.25.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:ee:43:74:7d:24:f9:ed:8f:cd:20:de:3c:de:63:2e:51:f3:
         21:41:d3:5f:87:21:ad:0e:16:31:5f:68:97:e3:36:6d:85:1d:
         18:4a:8c:3e:3b:56:14:7d:72:13:33:42:fe:3b:b6:5a:7b:17:
         d2:2c:c1:01:1c:e3:a1:f8:e8:c2:b7:a4:3f:bc:1d:62:e2:97:
         e2:21:3f:ff:13:4a:76:fc:98:79:3b:cd:73:69:f3:d6:3d:2b:
         1f:30:72:87:d0:1a:b9:62:ee:fb:cd:fd:76:7d:d9:a0:42:98:
         b6:c6:f2:38:53:f8:dc:5b:22:02:b2:a4:31:32:a3:9f:20:e8:
         02:f0:e1:a9:a9:86:d5:7c:96:38:60:a5:c1:9e:a3:bc:85:96:
         44:5b:50:1e:e1:60:e6:b6:a7:88:74:5a:ea:d1:71:1a:d9:23:
         f0:b8:e8:27:18:f0:32:e2:7a:35:b0:2e:63:33:a4:cf:ed:96:
         ce:b6:c8:86:ab:63:2e:b6:1e:4c:84:42:a9:75:4b:80:6e:e6:
         27:f7:95:2d:07:aa:19:c1:44:61:8c:8d:bb:94:5e:1b:c4:17:
         96:8c:d6:9f:8a:8d:43:18:e5:81:a3:20:3e:14:e0:1a:9d:22:
         99:59:65:c1:e3:03:36:59:81:86:d9:98:0d:08:16:3a:9f:57:
         99:91:31:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 00:29:11 2025 by rpki-client