Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/7fed687a-fac7-3603-afc4-0468ce11fe40.roa
File:                     7fed687a-fac7-3603-afc4-0468ce11fe40.roa (raw, json)
Hash identifier:          BpLYcHUVb7e+APX7VyyB0/vh0ynfjLHtPoap1R4mSDg=
Subject key identifier:   78:93:9C:61:0E:FE:C2:DC:13:BC:06:8E:FE:63:77:15:07:EA:7B:B6
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F4328584A0727D224AB71BA89AC9ED410
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/7fed687a-fac7-3603-afc4-0468ce11fe40.roa
Signing time:             Fri 30 May 2025 19:11:39 +0000
ROA not before:           Fri 30 May 2025 19:11:39 +0000
ROA not after:            Thu 28 Aug 2025 19:11:39 +0000
asID:                     81
IP address blocks:        152.45.11.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 08 Jun 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:07:27:d2:24:ab:71:ba:89:ac:9e:d4:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: May 30 19:11:39 2025 GMT
            Not After : Aug 28 19:11:39 2025 GMT
        Subject: CN=312504e4-e318-416d-b3eb-b08fc08140cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:d7:93:c6:38:03:e2:05:82:00:6e:68:11:6f:
                    25:c8:5c:a2:a1:72:57:c7:9b:bf:5a:20:54:3f:1b:
                    c0:f2:99:a3:9d:c8:21:76:e6:3c:49:cc:16:a5:67:
                    49:e9:67:4c:13:9a:e8:eb:6f:b0:fb:60:ca:88:fc:
                    84:00:8f:5a:25:ee:00:fd:42:8a:7f:ed:84:cd:c4:
                    74:d5:a6:91:83:8b:a6:ca:77:61:c2:d9:bb:fe:bd:
                    b3:cb:30:e6:bb:ce:33:f9:8f:30:e9:9f:32:ff:fe:
                    29:25:33:7c:73:87:a3:06:90:69:a6:fe:12:78:be:
                    c7:08:40:bf:61:d1:f4:5b:67:70:73:f8:d5:78:af:
                    d4:ec:33:56:5c:a4:96:26:0c:da:7a:53:3b:79:29:
                    c0:de:90:0c:84:c3:30:d4:5f:98:46:5e:57:bb:d4:
                    05:81:2a:9b:7c:bd:e9:d4:29:2b:66:01:76:11:47:
                    d8:81:17:80:4c:f8:c2:84:c1:11:3f:34:7a:9a:5c:
                    87:85:68:56:ac:f7:16:cf:25:97:f5:3c:7d:44:05:
                    34:a9:56:41:47:9c:d9:25:59:35:e0:41:64:48:a6:
                    30:33:4c:29:31:60:c0:66:21:10:6e:8c:1a:cb:71:
                    c7:14:11:53:8e:14:76:79:dd:4e:f5:fb:d2:ed:be:
                    4a:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:93:9C:61:0E:FE:C2:DC:13:BC:06:8E:FE:63:77:15:07:EA:7B:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/7fed687a-fac7-3603-afc4-0468ce11fe40.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.45.11.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:2a:47:9f:d0:6c:3c:a5:a3:ae:9b:f7:a6:72:0e:f6:8e:8d:
         6d:29:57:0b:8c:2d:9f:9e:c3:3d:11:24:40:28:4d:6b:9e:17:
         bb:19:15:3c:c9:0b:59:57:35:a2:80:c7:ae:3c:2d:d1:8e:04:
         ac:f9:91:36:94:c5:ff:f3:52:d2:5a:6f:6d:27:dc:66:26:55:
         48:47:8e:c4:98:c7:fc:50:37:f6:cd:00:bc:be:29:e9:ad:fe:
         2e:09:a1:d0:ec:74:57:dd:2c:ab:33:7d:a7:07:66:3a:db:29:
         b8:07:13:07:5a:75:c5:13:24:ea:96:cb:a7:f1:79:b1:b2:70:
         74:52:c7:dc:8a:06:00:98:03:bc:49:b1:41:ec:e9:d6:6a:19:
         f2:29:f8:07:08:b7:68:58:96:fc:1f:78:4f:1c:20:05:99:5e:
         d0:73:21:05:38:4e:37:ac:93:cd:7b:c9:a5:d7:df:b8:d6:32:
         fd:63:96:c7:33:26:8f:55:55:5a:5d:e4:63:5f:ab:75:af:d2:
         bc:ff:46:59:25:21:f4:67:4b:b5:26:23:2a:71:2f:d6:41:df:
         d4:c6:28:c3:54:cd:ef:6f:a1:71:e6:0b:5a:ae:86:33:89:43:
         71:75:30:10:b1:22:31:78:d2:c2:b2:87:61:f6:63:be:83:8f:
         d1:f1:42:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 03:26:27 2025 by rpki-client