Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/b322f811-a93d-37a9-83be-95a8f4cf8043.roa
File:                     b322f811-a93d-37a9-83be-95a8f4cf8043.roa (raw, json)
Hash identifier:          l/ViwnG/9FnD0E1Favbk5F2gM6mCW8bEez63Mlo2OW8=
Subject key identifier:   8B:BE:06:6C:1F:C4:FA:36:93:CC:4B:46:23:D1:1C:BA:FC:7B:B5:76
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F4328584B16A167BD1D98A0258F578740
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/b322f811-a93d-37a9-83be-95a8f4cf8043.roa
Signing time:             Fri 05 Sep 2025 01:00:33 +0000
ROA not before:           Fri 05 Sep 2025 01:00:33 +0000
ROA not after:            Thu 04 Dec 2025 02:00:33 +0000
asID:                     81
IP address blocks:        152.45.10.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 10 Sep 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:16:a1:67:bd:1d:98:a0:25:8f:57:87:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: Sep  5 01:00:33 2025 GMT
            Not After : Dec  4 02:00:33 2025 GMT
        Subject: CN=61301426-cf2f-48db-9e41-27b4b0f8510e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:8f:e7:3c:50:20:cc:c8:5a:84:6f:ef:ea:d4:
                    40:bb:59:02:8f:34:fc:18:05:7f:72:96:fd:24:64:
                    05:a2:7f:62:f4:e4:ad:01:c6:66:9b:93:43:f7:ab:
                    42:df:43:47:33:85:60:9e:e2:9c:e1:42:8f:85:d6:
                    5e:1c:76:d2:2b:49:45:36:8f:09:02:1c:e5:82:c9:
                    36:0d:32:8d:13:f6:94:3d:f4:0b:e4:66:da:3f:78:
                    aa:f3:82:a0:3e:26:c8:fb:59:a7:07:76:ef:e1:c4:
                    f1:2d:3d:47:f3:5c:02:34:de:12:76:5d:7c:9f:e0:
                    ed:e4:6d:75:67:ef:fb:6c:e2:d4:2d:d4:71:06:d0:
                    cf:84:73:a7:52:4c:eb:49:6d:e5:4e:62:51:19:06:
                    8a:2b:b1:5b:49:fe:54:ef:58:52:62:32:92:41:0a:
                    e6:ad:60:1f:e3:db:17:ef:52:3f:86:d0:df:c0:16:
                    b5:5c:bd:a3:d1:a8:db:df:a6:50:01:d5:41:a0:4d:
                    54:84:fd:a7:b9:91:65:ca:3a:5c:67:a6:68:10:65:
                    61:57:0f:bc:a3:13:7d:f3:1a:f6:a1:35:1b:42:e2:
                    2c:87:a6:7f:6c:e7:13:d3:7f:bd:ea:2c:6d:a2:62:
                    c7:c0:51:da:5c:e0:9b:ea:44:9b:4d:95:0a:93:f7:
                    8d:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:BE:06:6C:1F:C4:FA:36:93:CC:4B:46:23:D1:1C:BA:FC:7B:B5:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/b322f811-a93d-37a9-83be-95a8f4cf8043.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.45.10.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:6e:f7:c8:9f:08:b1:ec:b1:04:ee:84:1d:86:3b:32:d5:b3:
         08:0a:94:ba:a6:c1:47:1b:45:fc:47:8c:cd:d8:3f:59:03:56:
         57:2e:39:33:bc:74:d6:e2:f2:97:b2:fd:78:17:3c:e2:b6:10:
         e6:5d:d3:2e:64:65:aa:de:4a:24:7c:31:1a:0b:09:90:9c:c7:
         0a:70:d0:a9:c9:f0:17:65:69:3c:36:40:85:3b:43:c9:62:a6:
         26:e6:2e:ff:f9:07:35:8f:d1:45:49:34:f9:e3:29:11:ff:62:
         7b:5a:e3:6f:87:8d:75:36:02:2d:30:4a:55:3b:7c:e5:0e:55:
         98:8c:86:43:38:29:3b:fe:a7:36:ee:1d:a0:59:c0:23:72:d5:
         23:73:16:7b:ea:51:19:66:cf:3e:2e:d5:1a:af:30:ba:14:fa:
         26:24:99:d3:51:48:f7:64:78:79:c5:ef:a5:eb:b9:3a:d7:7b:
         3a:a6:24:d0:d0:f1:f2:23:cb:36:ae:84:3d:5b:e9:88:62:f7:
         14:76:5b:81:5e:c5:d7:24:d7:d9:55:e9:f0:b3:16:45:e0:05:
         db:29:fc:6d:1a:54:f9:23:41:cc:48:67:46:92:b8:6f:c9:ca:
         6c:2d:ea:82:ef:37:a9:79:db:8f:3e:1b:d8:7c:14:c6:ed:26:
         a7:ef:a4:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 08:00:15 2025 by rpki-client