Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/a35aa661-010d-3614-a951-168cf54fb389.roa
File:                     a35aa661-010d-3614-a951-168cf54fb389.roa (raw, json)
Hash identifier:          lyrxEZsrMU5guFR/Da1tDn8pNAZo5VVqDdsfF/+ZWY4=
Subject key identifier:   92:38:F0:88:EF:A9:68:74:33:59:EB:8A:B6:F9:55:96:76:63:93:A1
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F4328584B16A1609E958125C414F8F100
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/a35aa661-010d-3614-a951-168cf54fb389.roa
Signing time:             Fri 05 Sep 2025 01:00:33 +0000
ROA not before:           Fri 05 Sep 2025 01:00:33 +0000
ROA not after:            Thu 04 Dec 2025 02:00:33 +0000
asID:                     81
IP address blocks:        152.40.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 10 Sep 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:16:a1:60:9e:95:81:25:c4:14:f8:f1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: Sep  5 01:00:33 2025 GMT
            Not After : Dec  4 02:00:33 2025 GMT
        Subject: CN=f9499535-b123-43e4-9fcf-e4181a398a92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:a1:58:5e:29:d0:c2:ed:b1:c5:51:29:e2:85:
                    11:ea:5c:d3:04:ee:73:89:75:97:a6:e0:dc:76:b4:
                    e0:82:a7:4b:cd:84:f1:6a:e2:1c:50:c0:8e:64:ff:
                    66:3a:38:00:28:cd:fe:0f:6d:a3:eb:7d:2e:28:21:
                    fb:90:16:b6:56:6e:b0:0d:13:ad:ab:57:be:50:6d:
                    a1:31:0e:18:03:b3:7a:f3:3b:cd:e2:79:7c:f1:dd:
                    1d:9f:b8:d3:a8:0e:2b:6c:45:84:3c:42:12:4a:cb:
                    5c:74:a7:1c:b0:1a:11:72:fe:5c:b2:9d:3f:38:7b:
                    a3:d1:8e:bf:dc:4f:d5:59:c3:2e:5d:e9:2c:66:ca:
                    5d:d3:32:7d:e9:4f:53:70:f3:03:f6:58:cb:c6:4f:
                    21:f7:1c:46:8b:b5:a9:30:d8:cb:26:6a:73:79:9d:
                    fd:f3:eb:bd:39:8a:bf:2f:2d:9c:2d:42:5d:1b:c3:
                    39:fd:1f:71:d1:96:b7:8d:f9:7c:7b:69:75:89:84:
                    b3:2a:fe:a8:3d:5b:38:7f:43:34:c2:e4:00:30:b0:
                    ce:30:0d:f1:42:00:7c:a5:f0:19:d5:ed:4b:d2:24:
                    8c:eb:ef:34:12:f3:b9:fb:b6:c6:e7:f8:59:6d:a0:
                    6f:1b:ad:11:b1:95:6f:a0:b1:fe:e3:d6:51:ab:fa:
                    eb:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:38:F0:88:EF:A9:68:74:33:59:EB:8A:B6:F9:55:96:76:63:93:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/a35aa661-010d-3614-a951-168cf54fb389.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.40.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:bd:8c:3c:d9:80:61:1a:40:8a:e2:47:88:a7:c2:ef:22:43:
         48:ec:a3:65:f4:fd:95:f0:84:6a:a7:88:17:f1:cd:94:75:a3:
         5f:1d:7d:eb:b2:24:36:0d:23:6b:c8:25:69:ee:06:fa:73:cd:
         df:96:09:b5:98:34:01:8d:8b:80:b3:9a:54:24:8a:e1:a5:ec:
         57:a9:8d:3b:01:ca:6f:45:25:26:44:05:e6:6c:34:f0:db:db:
         4d:a3:f0:f7:10:ea:17:bf:ac:7b:a9:56:3b:ba:00:7e:bd:f0:
         c7:e3:e9:e2:a1:c2:ff:01:f6:cc:f5:10:22:08:9f:ae:00:eb:
         6f:0a:cb:ee:da:43:78:09:53:01:e3:ce:bf:8b:ca:eb:1e:2b:
         8d:f6:1b:9a:89:91:e8:17:2a:9f:ef:b3:64:47:96:02:01:6e:
         8b:85:81:ad:43:c7:07:aa:25:82:c7:5f:8c:32:88:33:c8:a3:
         82:79:2b:7a:5a:48:f8:57:01:ce:df:bc:3d:bf:55:41:bb:c7:
         5d:dc:bf:47:d4:5b:97:0d:1c:18:96:f0:d4:e2:ae:5c:5e:d1:
         12:de:46:60:28:5c:9e:85:52:04:3d:06:b0:a1:3a:14:c0:91:
         39:ce:d5:83:e7:05:d5:b4:07:a4:95:78:8f:1d:d5:31:d6:e2:
         26:ce:ed:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 08:09:03 2025 by rpki-client