Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/dc70a584-d5b0-37c3-bce5-a9ee1275f030.roa
File:                     dc70a584-d5b0-37c3-bce5-a9ee1275f030.roa (raw, json)
Hash identifier:          cPzr3WvdXukfgKNIxPRcNqNyfuqZZGswtSECH9jNvmI=
Subject key identifier:   0F:8A:02:47:7A:1D:3A:6E:7A:22:1C:24:8A:77:1D:7A:2C:0A:BD:3A
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F43285849419E872D524ADC8443CEC2A0
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/dc70a584-d5b0-37c3-bce5-a9ee1275f030.roa
Signing time:             Fri 21 Mar 2025 01:00:39 +0000
ROA not before:           Fri 21 Mar 2025 01:00:39 +0000
ROA not after:            Thu 19 Jun 2025 01:00:39 +0000
asID:                     81
IP address blocks:        152.46.44.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:41:9e:87:2d:52:4a:dc:84:43:ce:c2:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: Mar 21 01:00:39 2025 GMT
            Not After : Jun 19 01:00:39 2025 GMT
        Subject: CN=b7261f93-cf13-45d4-8fbe-5628ccb641c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:a1:d5:60:3c:dd:46:7e:db:cc:cf:dc:8e:1b:
                    38:fe:52:ff:08:3d:00:54:8b:97:72:4f:cd:6d:a2:
                    3c:e9:00:a5:26:bb:fd:60:ba:4d:9c:d6:94:00:93:
                    aa:d4:a7:8c:6f:1f:b2:db:4e:4e:30:5b:89:07:7b:
                    12:46:39:9a:94:c9:99:01:bb:50:4b:ca:86:4a:42:
                    0e:e1:65:bc:28:0a:fd:13:34:6d:32:15:ec:a5:3d:
                    5e:30:af:a2:7d:33:4e:20:e6:cb:68:4e:d5:2f:64:
                    49:40:49:cb:73:d6:e8:d9:08:05:b6:0d:9a:10:e0:
                    03:99:4b:3f:b9:35:33:ca:f1:2b:73:23:a0:01:ad:
                    dc:d0:83:c4:3f:15:27:c5:3b:83:a3:4a:c2:d8:ee:
                    5c:ac:56:11:d1:31:88:7e:be:0d:09:c0:d1:c7:32:
                    46:4c:5e:6a:4f:4a:7f:77:60:f9:3d:eb:29:76:34:
                    e8:b0:aa:65:55:51:59:af:45:46:b6:ee:60:53:fe:
                    fb:09:88:f6:f3:98:2e:60:da:bf:a3:e4:d1:7a:aa:
                    d6:38:73:d4:5c:c4:10:2b:62:53:8b:b0:74:c1:43:
                    da:42:cf:f5:56:83:a2:e3:c9:23:d6:45:5a:26:d3:
                    ac:d9:59:54:7d:21:3f:64:e1:4c:d8:ca:cb:6e:0e:
                    b5:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:8A:02:47:7A:1D:3A:6E:7A:22:1C:24:8A:77:1D:7A:2C:0A:BD:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/dc70a584-d5b0-37c3-bce5-a9ee1275f030.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.46.44.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:8c:0e:12:fe:31:2b:ae:c6:95:20:72:7d:54:eb:02:a8:f3:
         c0:9c:96:21:48:d5:89:1d:c2:2e:f7:12:09:af:b9:9b:72:db:
         3a:fb:bb:8b:3d:fb:50:e6:10:88:3e:52:ad:52:1c:bd:38:b0:
         b2:06:3b:7d:ad:c8:f0:07:58:2c:6e:05:0c:ab:5c:3d:0e:d6:
         45:6a:d2:84:92:4a:af:ae:c5:b8:15:3e:70:ed:4f:db:8a:c4:
         90:11:a5:68:24:56:63:3b:3f:c9:c6:db:92:70:5f:bc:ec:7f:
         05:aa:e9:49:e5:e3:a0:89:56:60:23:71:67:b8:d4:35:05:78:
         97:f5:1f:4d:43:eb:bf:76:f9:97:e1:a7:03:06:1a:bd:3b:af:
         3c:be:8d:f4:d9:14:36:b1:98:44:bb:bc:55:be:e1:d7:bc:dc:
         10:7a:02:56:af:01:f6:dd:cd:27:83:d6:dc:b6:73:1f:5c:f1:
         84:84:27:55:38:f2:9d:78:48:e1:8d:05:6b:85:83:cf:48:2e:
         9b:84:ef:f8:7d:60:11:7f:56:73:bb:93:8f:d2:5b:1d:7c:ca:
         f5:bc:39:3d:1c:71:68:0d:83:11:0c:03:b1:28:4c:1c:fd:ee:
         c0:c2:c7:52:df:ae:60:08:9e:44:1e:99:21:3e:e2:73:7b:1b:
         07:8b:94:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:49:40 2025 by rpki-client