Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/89c9d43f-2741-37c9-aa5d-8bba133cb709.roa
File:                     89c9d43f-2741-37c9-aa5d-8bba133cb709.roa (raw, json)
Hash identifier:          u7RuWlmm1A2p5HOnp5pb5bLPn6FVbvPEezBAcuV6ghs=
Subject key identifier:   C3:4A:22:8E:51:8D:9E:28:83:92:06:9C:A7:D9:28:32:38:64:E3:EB
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F43285849419E84AF50CD14759B7DC800
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/89c9d43f-2741-37c9-aa5d-8bba133cb709.roa
Signing time:             Fri 21 Mar 2025 01:00:39 +0000
ROA not before:           Fri 21 Mar 2025 01:00:39 +0000
ROA not after:            Thu 19 Jun 2025 01:00:39 +0000
asID:                     81
IP address blocks:        152.45.2.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:41:9e:84:af:50:cd:14:75:9b:7d:c8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: Mar 21 01:00:39 2025 GMT
            Not After : Jun 19 01:00:39 2025 GMT
        Subject: CN=bded907c-5657-44d4-b7fb-b3707d781d66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:03:e1:f5:59:9f:2a:02:49:5e:9d:58:21:d8:
                    bc:a9:b7:80:1b:51:cb:e7:2a:38:95:df:ec:f1:4e:
                    2d:0a:d2:9a:57:d6:23:c6:15:ee:37:ea:13:96:94:
                    fd:0b:f0:99:58:13:22:9d:1b:e7:b0:60:1e:7b:6c:
                    10:94:48:89:e9:4c:c0:ac:53:01:79:ac:55:13:13:
                    4c:90:59:ad:e3:02:d9:77:09:61:72:95:18:29:a9:
                    bf:94:b5:0f:2e:23:e5:c5:37:92:ea:24:4c:b6:d9:
                    08:46:12:a4:ff:4f:36:85:77:2a:85:94:25:76:9f:
                    5c:39:29:8d:71:dc:9d:c4:07:a6:51:f2:f9:18:b6:
                    5f:d5:e7:4e:63:19:49:c7:b8:6f:e8:16:82:4e:40:
                    a0:f0:89:72:a1:54:82:b2:d2:6d:a9:e6:6a:26:8d:
                    63:91:a2:2f:a7:e0:c9:ae:e9:81:e5:dc:e8:31:7b:
                    dd:80:62:6d:bc:cc:b9:10:d4:65:27:e6:e9:9f:0b:
                    00:92:f4:7d:1c:87:53:26:06:a4:ef:ac:fd:b1:df:
                    20:1b:f9:98:c7:a9:72:49:fb:c5:c0:38:c2:68:8f:
                    6a:d2:a1:5b:70:68:c8:5c:05:fa:ad:fa:23:ea:c3:
                    a2:95:cd:c5:62:ca:f4:9f:66:25:05:3f:28:f7:e8:
                    cb:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:4A:22:8E:51:8D:9E:28:83:92:06:9C:A7:D9:28:32:38:64:E3:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/89c9d43f-2741-37c9-aa5d-8bba133cb709.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.45.2.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:ae:ad:4a:53:d9:29:41:2f:e3:a0:bb:f7:06:c5:c8:f0:32:
         d3:01:87:70:0c:94:98:83:fb:c9:f6:72:2c:ac:7f:d1:4d:af:
         17:f4:6a:c9:db:a1:e1:74:10:8e:83:71:05:c7:af:0f:9e:10:
         ef:91:d9:4c:99:a5:7b:be:a5:d5:35:7f:5a:4b:fb:0e:f6:68:
         54:40:1b:6d:73:33:57:b8:1d:9b:66:63:de:8f:6e:36:d9:65:
         6d:3d:c7:b6:e4:3d:4a:9a:c8:5f:58:17:04:92:a4:fd:81:7b:
         09:4e:ae:c0:ac:58:a0:ec:34:75:9f:6f:cb:aa:81:78:6c:ef:
         15:3c:53:00:00:3e:17:13:09:16:9e:b1:82:53:b0:09:1c:85:
         ff:08:0b:e4:a3:07:6a:aa:87:19:2d:30:64:98:47:c2:61:a9:
         dd:b9:fd:91:56:03:e4:5c:c9:27:65:57:29:d4:61:8b:e1:6d:
         7d:69:14:35:45:e8:22:0a:4e:11:c5:ed:39:c2:ea:56:13:ba:
         3c:9a:1c:da:24:cb:5e:6a:1e:9c:42:fd:74:50:f7:ab:34:4e:
         ef:48:80:3a:84:60:d9:9a:8a:c4:2d:17:3e:ba:db:43:60:ef:
         06:4a:6b:7f:e3:3c:2e:42:c0:41:05:e5:ef:0b:cd:dc:e9:a4:
         cb:7c:d3:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:10:42 2025 by rpki-client