Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/5799f98f-f08b-31c6-9714-3b0ac60773c5.roa
File:                     5799f98f-f08b-31c6-9714-3b0ac60773c5.roa (raw, json)
Hash identifier:          PA0Y5ISjKPysWZ0eOGmQdwW+EVtAgzOBNys5YHLIBV0=
Subject key identifier:   5A:06:72:B2:BA:E8:E0:AB:0D:36:2F:03:B4:B0:0D:07:5E:0B:77:EF
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F4328584A363FFA45F9B7370B24254FC0
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/5799f98f-f08b-31c6-9714-3b0ac60773c5.roa
Signing time:             Mon 16 Jun 2025 16:03:19 +0000
ROA not before:           Mon 16 Jun 2025 16:03:19 +0000
ROA not after:            Sun 14 Sep 2025 16:03:19 +0000
asID:                     81
IP address blocks:        152.26.230.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:36:3f:fa:45:f9:b7:37:0b:24:25:4f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: Jun 16 16:03:19 2025 GMT
            Not After : Sep 14 16:03:19 2025 GMT
        Subject: CN=208bb892-bb17-44e3-9f85-83e7cc1c1093
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:14:95:22:d2:01:74:1d:9a:a8:47:6a:6b:f0:
                    cb:88:f7:7f:be:2e:bd:87:8c:b8:fa:17:51:54:6d:
                    9d:30:e2:f0:aa:0a:5d:db:b6:16:8d:d5:5b:93:8e:
                    06:f6:e7:f7:06:aa:26:43:da:73:03:d0:14:aa:37:
                    d9:b1:c7:de:3d:6f:18:d2:0b:a4:de:d7:61:e8:2e:
                    88:11:15:03:59:f4:39:7d:4a:c3:a4:17:97:97:fe:
                    97:ce:91:24:fb:c8:ff:c3:47:31:67:79:8a:7a:ea:
                    18:54:fd:f4:12:69:26:28:13:86:65:61:73:66:28:
                    28:ac:d7:3d:4b:56:6c:0a:48:8a:66:10:30:d2:9b:
                    13:67:e5:71:a8:f3:75:cc:6d:c1:b0:67:14:f7:92:
                    b5:7f:e2:b9:79:9e:06:a0:ea:65:d4:ba:eb:86:fb:
                    9e:29:a5:3b:08:4f:0e:6c:43:e1:d2:0d:f6:f4:c0:
                    a7:0d:5e:ca:ac:ee:2f:b6:a6:2d:9d:3c:78:b4:79:
                    04:0a:3b:7f:bd:7a:33:02:72:fb:3b:2f:e1:f0:73:
                    31:5f:c4:4e:5a:13:a8:c8:db:3c:37:6d:5c:ea:6f:
                    62:ba:61:e5:d1:46:17:99:f8:25:e3:41:84:36:a8:
                    c8:82:b6:ef:77:36:1c:d9:60:b2:6d:3f:54:8c:b5:
                    9a:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:06:72:B2:BA:E8:E0:AB:0D:36:2F:03:B4:B0:0D:07:5E:0B:77:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/5799f98f-f08b-31c6-9714-3b0ac60773c5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.26.230.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:2d:2c:63:9a:4e:b0:6e:50:a1:c8:74:af:e0:1d:e7:80:c5:
         14:96:02:b2:a7:4e:ab:65:bb:52:a0:e4:27:79:7a:05:99:e6:
         c8:1e:f1:e9:0b:6e:64:2e:99:3d:62:15:a3:4d:32:0d:42:3c:
         f4:72:49:3f:d5:bb:06:01:1f:2f:b0:50:fb:5c:09:96:52:65:
         2f:3e:cc:a4:f0:7b:b8:c7:85:f9:09:9a:c9:53:95:3e:6f:b2:
         6a:17:d6:c7:5c:48:b7:f4:fc:1a:f3:4c:57:75:e4:a8:c0:7a:
         ee:1c:02:e6:df:a9:a2:b5:0e:26:f2:13:2e:de:b5:16:84:0e:
         38:f0:5a:fa:a9:8b:97:83:eb:0c:94:79:fb:ff:90:58:a3:f2:
         14:b2:5c:f2:fa:f3:fa:c7:37:46:fd:72:6e:a3:e6:3b:e8:cc:
         0e:84:49:61:c1:ac:05:24:ec:49:44:12:04:54:89:ba:a6:9f:
         30:9c:90:d6:eb:b7:56:6f:ec:cd:6b:64:c7:e8:64:9e:92:36:
         b8:95:1a:17:e0:df:88:14:f5:00:96:b2:cb:7f:7a:a2:12:d8:
         4e:d0:37:16:d3:d1:c6:ab:5e:11:46:05:bd:ea:39:a8:0e:cd:
         f6:a3:00:c5:dc:b2:00:ea:b5:fe:20:11:20:49:9a:10:67:62:
         0f:a9:94:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 14:30:21 2025 by rpki-client