Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/c6ba4a92-75fb-37be-ae43-e986faa245cf.roa
File:                     c6ba4a92-75fb-37be-ae43-e986faa245cf.roa (raw, json)
Hash identifier:          0bWAEsZwxopUGPS9HT3ltGgPuFNOSJ3RCc+55/Vdmp4=
Subject key identifier:   00:BE:A0:E9:AA:9F:DD:8A:5D:8E:38:E1:B7:FF:C8:E9:34:4E:6B:85
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F4328584B16A1683829A240628C3A6DC0
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/c6ba4a92-75fb-37be-ae43-e986faa245cf.roa
Signing time:             Fri 05 Sep 2025 01:00:33 +0000
ROA not before:           Fri 05 Sep 2025 01:00:33 +0000
ROA not after:            Thu 04 Dec 2025 02:00:33 +0000
asID:                     81
IP address blocks:        152.45.4.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 10 Sep 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:16:a1:68:38:29:a2:40:62:8c:3a:6d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: Sep  5 01:00:33 2025 GMT
            Not After : Dec  4 02:00:33 2025 GMT
        Subject: CN=74575809-4d59-4d7f-9dbc-58ded0ce91ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:79:16:9c:5e:f1:0e:81:a4:7e:84:ed:d4:d5:
                    9d:d8:af:df:e6:9b:ef:00:db:a2:bd:8e:b3:24:57:
                    d3:b9:95:f3:3a:dc:f3:c2:bf:28:82:43:08:bd:e0:
                    94:99:46:66:21:d0:fa:2e:e8:74:d8:ec:e0:41:04:
                    47:c5:cd:43:71:99:aa:45:fe:e3:bc:5c:14:b7:1b:
                    b8:62:61:41:f0:81:12:44:94:89:78:46:07:a2:56:
                    1a:14:78:b4:64:ce:c6:aa:94:02:c9:f3:8a:b1:8c:
                    d1:24:9f:f9:c2:5e:b1:24:20:9e:18:8d:d8:66:65:
                    24:84:ae:80:de:bb:c6:85:34:fc:29:59:92:39:e0:
                    b1:2e:f9:5c:14:5e:02:d8:9a:a3:ae:4a:b4:d9:5d:
                    23:c8:ae:12:a0:ee:78:31:66:b7:45:93:68:28:6e:
                    62:14:3c:37:40:bf:01:5f:07:b4:79:59:7a:09:96:
                    5c:e7:70:c4:a3:23:29:4c:fb:58:b7:00:36:4a:af:
                    43:57:c6:d9:67:97:bb:6b:cc:93:2b:fb:b6:ae:88:
                    d9:ec:3e:0a:06:ee:e3:08:fd:03:0c:76:e3:7c:f5:
                    1c:83:7d:3b:de:6f:e9:44:a6:45:c1:93:53:9d:cb:
                    61:53:28:ee:bb:6c:a7:37:6e:9a:3b:d3:d0:7b:bf:
                    d3:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:BE:A0:E9:AA:9F:DD:8A:5D:8E:38:E1:B7:FF:C8:E9:34:4E:6B:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/c6ba4a92-75fb-37be-ae43-e986faa245cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.45.4.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:ca:57:e3:a3:9f:a0:8a:94:61:29:01:bd:88:f8:94:9e:04:
         73:e5:2f:ca:e9:f4:cc:eb:68:0a:61:01:66:49:95:e8:03:33:
         cf:6d:37:65:c1:1b:3c:c0:f2:a7:db:ca:63:eb:49:fb:1b:e0:
         93:b1:db:3b:eb:cf:08:58:b5:eb:6d:91:4a:94:04:ec:87:53:
         67:0e:a8:b0:6d:7c:1a:d3:97:71:96:ef:c8:94:ff:d8:c6:f3:
         5d:87:30:2b:20:e6:18:c8:cb:92:7f:c7:94:f1:74:f2:dc:77:
         a7:5d:47:8e:61:29:a9:3c:09:5e:4f:16:49:dc:69:21:77:e2:
         01:47:31:80:0e:65:3b:57:bb:e8:b4:1d:8e:04:fd:99:ad:e6:
         02:c7:8a:49:04:ed:4d:91:43:ae:3b:ba:3d:22:e5:f5:54:e8:
         68:14:c7:15:8c:4e:53:5a:a6:12:94:19:d7:56:a9:2c:c6:03:
         7c:8c:ef:ce:68:ed:6c:fd:4e:e8:93:a2:c1:49:99:4d:f8:e1:
         c5:11:da:46:6c:60:a7:d6:9e:19:c2:8b:0b:cc:72:d7:bd:d3:
         fd:3a:a1:88:2a:7e:0e:81:95:24:1b:09:a0:6c:f0:d0:2d:fd:
         19:2e:19:ac:d7:14:c9:29:9e:f9:c6:b2:75:12:7a:64:2b:30:
         4a:23:a3:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 08:00:12 2025 by rpki-client