Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f80aed97-a08b-38f7-a700-f6f86b4457df.roa
File:                     f80aed97-a08b-38f7-a700-f6f86b4457df.roa (raw, json)
Hash identifier:          BhBOdXGLbHyD9qYC7BBxEV+bZ+oMeCf1M7gXJDrv0Jg=
Subject key identifier:   C8:2B:2F:48:BF:DD:29:1F:AA:63:30:B1:8C:0B:88:69:56:62:28:DB
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F4328584B16A167890BC21CBCC865ED58
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f80aed97-a08b-38f7-a700-f6f86b4457df.roa
Signing time:             Fri 05 Sep 2025 01:00:33 +0000
ROA not before:           Fri 05 Sep 2025 01:00:33 +0000
ROA not after:            Thu 04 Dec 2025 02:00:33 +0000
asID:                     6559
IP address blocks:        152.34.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 11 Sep 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:16:a1:67:89:0b:c2:1c:bc:c8:65:ed:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: Sep  5 01:00:33 2025 GMT
            Not After : Dec  4 02:00:33 2025 GMT
        Subject: CN=8985f978-8632-46f5-8d58-81339425f123
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:8e:28:37:df:45:8a:fb:59:4e:6f:2b:bb:20:
                    56:14:4e:6f:65:7b:5a:69:03:90:8a:6b:ed:7b:c0:
                    ac:d3:95:9d:99:65:62:c2:bb:0a:8e:30:df:4e:f4:
                    e0:c4:df:90:c9:72:35:7d:35:cb:88:f0:f6:02:47:
                    17:92:18:3b:2a:34:f0:0f:c1:61:bf:18:fb:61:1d:
                    88:17:b5:01:5b:ee:6a:69:6f:34:9a:d8:00:e0:85:
                    fb:44:c8:34:55:9d:51:29:c1:be:cc:d4:07:7b:2e:
                    ed:87:0c:00:0c:35:56:78:b1:24:02:38:aa:eb:e2:
                    11:22:f5:ce:a9:b5:ae:9f:a5:89:44:54:f8:f4:78:
                    c8:90:68:05:1d:13:0a:74:2b:31:87:bc:7c:54:51:
                    04:46:97:63:83:99:1b:b9:ec:47:e3:89:a2:48:ce:
                    78:33:7e:07:7f:6b:e8:7f:c9:d6:ff:85:e2:45:4d:
                    3c:a5:07:73:4b:46:0a:ce:79:19:12:3e:10:3a:60:
                    fe:68:22:01:f6:19:c2:fd:fd:b7:ca:d8:19:a5:f3:
                    ea:50:a5:17:e4:31:a3:af:36:25:08:42:d6:4c:f8:
                    f1:0a:a1:cf:11:f2:3b:29:ea:35:8e:06:7b:88:43:
                    14:3e:6d:6d:06:0f:8a:fb:fd:ba:f0:d2:3c:3d:df:
                    bd:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:2B:2F:48:BF:DD:29:1F:AA:63:30:B1:8C:0B:88:69:56:62:28:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f80aed97-a08b-38f7-a700-f6f86b4457df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.34.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:77:8d:fc:b1:16:3d:80:46:00:82:e9:70:8b:8e:6f:51:bf:
         8f:c6:b3:38:89:44:24:68:68:be:2f:da:62:70:ca:bb:6f:84:
         fb:41:74:c1:40:7d:26:35:2d:23:12:31:14:d7:dc:ac:77:c4:
         89:33:17:d7:85:4b:ac:3c:dd:df:d6:ce:c6:1e:0a:ad:af:61:
         90:1e:43:11:52:f8:41:7b:12:89:d1:da:8d:63:4c:6f:5a:cc:
         a7:7a:58:25:25:14:67:22:7d:87:95:e0:fc:f8:1b:41:a1:55:
         e1:df:42:a2:cd:e0:fe:c9:70:02:05:96:61:48:78:05:f4:84:
         7c:1e:fa:b4:c1:ca:a4:23:6f:40:27:86:82:3a:a8:3e:30:7c:
         af:df:35:dd:c1:19:d6:3f:32:55:12:a1:5a:0d:7a:24:ec:08:
         c9:34:51:35:b8:2f:3f:fe:a7:2d:10:ce:0f:d0:b9:fd:fa:33:
         44:3c:dd:96:1d:1a:4f:cc:b9:68:76:b8:39:2b:a1:8d:8d:2c:
         14:df:fc:1b:7a:65:68:ad:46:24:30:26:03:8e:5e:93:35:a1:
         87:40:58:a1:56:cb:e3:c5:04:17:10:1b:ee:c4:1e:c3:75:90:
         62:29:89:fd:78:02:21:2b:78:14:40:b3:6d:21:88:ac:52:e6:
         e6:3a:e8:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 18:30:55 2025 by rpki-client