Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/a046c3d4-e8c1-3ade-9056-6d173b20c8fe.roa
File:                     a046c3d4-e8c1-3ade-9056-6d173b20c8fe.roa (raw, json)
Hash identifier:          ULZ9Z/QcURyTtBmUCadXyo48k00HWFU8pAfzjbY9imc=
Subject key identifier:   1F:F7:0D:9C:5B:37:41:30:10:4F:D8:38:2B:6F:F5:AA:4D:67:B0:DA
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F4328584B16A163ACD2B1B6DB2E0FB5C0
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/a046c3d4-e8c1-3ade-9056-6d173b20c8fe.roa
Signing time:             Fri 05 Sep 2025 01:00:33 +0000
ROA not before:           Fri 05 Sep 2025 01:00:33 +0000
ROA not after:            Thu 04 Dec 2025 02:00:33 +0000
asID:                     81
IP address blocks:        152.22.104.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 10 Sep 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:16:a1:63:ac:d2:b1:b6:db:2e:0f:b5:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: Sep  5 01:00:33 2025 GMT
            Not After : Dec  4 02:00:33 2025 GMT
        Subject: CN=93608f7f-b730-44c3-96dd-48b966b1d860
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:34:cc:b9:68:a7:53:54:82:d6:c4:2a:c4:ff:
                    cf:38:45:4c:57:0e:f1:0f:f5:36:ab:8a:c7:f6:a5:
                    5f:6a:df:4f:bd:2a:49:90:84:a7:a8:1a:d9:65:03:
                    08:2d:bc:63:33:60:68:3c:34:9f:3e:d8:94:49:76:
                    2b:d1:07:29:4d:ee:3d:41:39:e4:10:1a:a3:d3:b4:
                    c9:e6:93:ea:93:97:27:0c:d7:9f:16:05:16:cc:98:
                    b3:7c:da:f3:19:ed:53:44:73:50:13:36:81:d4:6f:
                    6e:dc:7c:e4:30:42:6c:72:23:1b:d8:d9:d3:f8:44:
                    6e:ea:8b:65:76:04:a0:20:f8:9e:f5:d6:33:17:ef:
                    0a:da:d7:ab:53:e6:52:a2:ae:ba:b4:1e:e6:c5:c8:
                    5c:3a:f6:07:8c:37:3d:28:0f:8a:24:3a:2d:ee:56:
                    91:56:57:a5:f2:75:50:5e:ff:cc:8d:73:76:dc:a1:
                    34:25:3e:cf:95:fb:ae:af:07:91:3d:9c:db:b2:e0:
                    de:8e:4f:50:a4:00:3e:d5:a7:a3:48:53:ca:10:03:
                    74:0c:41:7d:67:b3:f2:f4:77:ee:19:46:7d:2c:20:
                    9e:2b:49:ab:c4:99:29:34:8c:a5:a3:40:56:df:32:
                    7d:a1:89:13:a1:a5:40:3a:f3:a2:a0:d2:39:1b:93:
                    ee:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:F7:0D:9C:5B:37:41:30:10:4F:D8:38:2B:6F:F5:AA:4D:67:B0:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/a046c3d4-e8c1-3ade-9056-6d173b20c8fe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.22.104.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:4d:34:17:b7:ea:75:d1:ce:6f:e5:c1:e9:54:02:84:cf:a6:
         f9:08:7f:a4:6e:28:aa:a0:4d:d8:82:c2:ab:28:d2:0b:cb:30:
         a1:30:74:e5:7e:bc:1c:de:a8:36:54:46:6f:bb:a8:a5:d6:0a:
         07:99:34:7f:d4:40:41:3d:9d:21:3d:74:2d:69:53:ca:15:94:
         12:f2:11:d0:b8:cd:4e:27:4e:a2:28:b2:b1:8c:0a:fd:30:64:
         90:97:4d:6d:25:a0:b0:cf:6f:43:c2:ac:d3:24:d6:8c:62:f2:
         1f:1e:f5:cb:cf:e5:8b:4f:e1:f4:93:2c:0a:85:5e:26:80:4c:
         94:ea:cd:a1:9c:4f:e0:fd:55:b5:8b:3b:4b:64:75:95:88:0f:
         7b:a0:1a:85:26:1a:b4:63:a3:d5:ce:06:9f:2f:6a:81:c3:c5:
         90:36:94:6d:2c:48:70:a0:b5:2d:17:25:3f:ca:30:b0:3d:71:
         68:e3:b5:75:38:e8:8c:02:4c:f6:9a:1f:57:19:e4:0c:3c:d1:
         69:33:8e:eb:75:17:d6:7e:38:8c:bc:ff:27:1a:58:01:57:af:
         d2:8a:cf:e9:c6:16:1a:de:8d:c8:97:56:5d:8c:02:88:e6:9b:
         1f:5d:65:96:1d:74:54:26:0e:bf:4d:85:0d:89:c1:41:27:94:
         ce:06:55:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 08:00:16 2025 by rpki-client