Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/5c0de49b-bdbc-3f9b-9081-fb3581b3e8c2.roa
File:                     5c0de49b-bdbc-3f9b-9081-fb3581b3e8c2.roa (raw, json)
Hash identifier:          JKH19vOyFrqZ2Jt+XeA3ii/XAdy9gSJGDXCSs2RGEZU=
Subject key identifier:   53:48:35:DF:6C:32:1F:6B:EE:05:D1:38:3D:D2:D7:4F:5E:3A:6E:54
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F4328584B7A0C6E7719527E846B064D40
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/5c0de49b-bdbc-3f9b-9081-fb3581b3e8c2.roa
Signing time:             Fri 10 Oct 2025 15:41:22 +0000
ROA not before:           Fri 10 Oct 2025 15:41:22 +0000
ROA not after:            Thu 08 Jan 2026 16:41:22 +0000
asID:                     81
IP address blocks:        152.46.48.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7a:0c:6e:77:19:52:7e:84:6b:06:4d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: Oct 10 15:41:22 2025 GMT
            Not After : Jan  8 16:41:22 2026 GMT
        Subject: CN=d8a3f5d3-cdce-4c13-9744-fa6223ce2e7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:51:19:19:01:c0:7c:3b:ee:77:4b:56:02:4d:
                    0f:12:5a:7f:f7:5a:37:af:cd:44:7a:de:24:d8:1b:
                    47:dd:ae:02:fb:21:a3:f1:97:d6:95:29:45:aa:09:
                    58:70:46:11:56:71:fe:4b:62:ec:81:11:f4:29:a7:
                    8d:28:f0:cf:c7:b2:c0:6c:5a:ca:f7:a9:a9:f9:1d:
                    f2:92:9b:d8:af:cc:78:58:04:ae:17:d7:09:99:c2:
                    2f:5f:1e:d4:6f:eb:ab:ff:94:06:e4:c5:d5:97:c9:
                    57:a6:84:16:96:d7:be:b3:a1:e0:5b:50:a6:2e:21:
                    8d:bf:52:70:77:8b:15:cd:13:9e:9a:a5:af:35:96:
                    ef:0c:18:9f:fd:f4:0e:a8:f5:e2:87:8a:c9:ac:47:
                    c5:60:4a:55:af:20:52:e7:02:a8:e9:7d:94:d4:54:
                    fc:e2:32:8c:93:b1:0f:d8:7f:c8:fa:2a:4b:03:6f:
                    d4:fe:ce:f2:96:92:93:d6:55:fa:fd:7c:26:e2:77:
                    1d:bf:c2:3b:2f:1d:1f:5d:3b:7a:0c:85:d1:47:ee:
                    73:c8:14:22:a6:b3:26:5e:01:b6:3a:95:b6:05:4d:
                    ea:42:90:af:12:48:93:9f:6f:d4:a5:6f:16:b9:06:
                    1f:2f:c0:23:45:48:78:56:d0:16:c6:cb:b3:b8:52:
                    63:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:48:35:DF:6C:32:1F:6B:EE:05:D1:38:3D:D2:D7:4F:5E:3A:6E:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/5c0de49b-bdbc-3f9b-9081-fb3581b3e8c2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.46.48.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:f6:49:16:19:22:a2:4f:4b:37:e0:d8:27:50:d4:9b:b9:58:
         f3:83:54:2c:4c:53:80:e0:0e:1f:f4:19:ae:f8:28:a0:ad:6e:
         d3:0e:25:a2:6e:e9:e6:2a:94:d3:79:8c:c3:5d:0c:8b:37:eb:
         ef:43:bf:be:fe:2e:7b:ef:22:f0:75:5b:cd:54:fa:6d:bd:05:
         40:74:32:01:00:df:b4:7b:8d:eb:e0:6c:56:73:58:d8:f9:ec:
         d9:f2:da:ff:39:0b:f1:15:94:8e:95:61:ce:56:22:db:28:13:
         49:98:64:58:f9:0e:1e:51:d2:21:0e:99:a7:df:91:4a:00:b4:
         dc:0d:03:6d:53:6b:65:9e:50:e0:37:5c:cf:2f:9c:1b:d5:63:
         45:d4:fe:57:ab:e2:5c:62:a2:e6:1a:e4:e2:b9:84:37:73:7f:
         e7:02:9f:a7:9d:b1:36:f7:5d:41:1a:7f:38:e4:75:c7:ad:33:
         32:91:13:d9:34:f7:5c:7e:31:37:bb:5c:d1:d1:34:17:db:37:
         68:29:47:5e:63:46:31:ab:96:a6:64:0f:21:55:f5:cd:40:27:
         37:a8:58:e3:12:61:32:8b:d0:b7:4c:09:79:40:b5:73:63:2d:
         88:94:54:c8:58:61:a0:35:c8:94:aa:eb:73:e5:f5:f8:27:99:
         5a:45:e4:7b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt6DG53GVJ+hGsGTUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh
YTZhMB4XDTI1MTAxMDE1NDEyMloXDTI2MDEwODE2NDEyMlowLzEtMCsGA1UEAxMk
ZDhhM2Y1ZDMtY2RjZS00YzEzLTk3NDQtZmE2MjIzY2UyZTdiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnVEZGQHAfDvud0tWAk0PElp/91o3r81Eet4k
2BtH3a4C+yGj8ZfWlSlFqglYcEYRVnH+S2LsgRH0KaeNKPDPx7LAbFrK96mp+R3y
kpvYr8x4WASuF9cJmcIvXx7Ub+ur/5QG5MXVl8lXpoQWlte+s6HgW1CmLiGNv1Jw
d4sVzROemqWvNZbvDBif/fQOqPXih4rJrEfFYEpVryBS5wKo6X2U1FT84jKMk7EP
2H/I+ipLA2/U/s7ylpKT1lX6/Xwm4ncdv8I7Lx0fXTt6DIXRR+5zyBQiprMmXgG2
OpW2BU3qQpCvEkiTn2/UpW8WuQYfL8AjRUh4VtAWxsuzuFJj8QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFNINd9sMh9r7gXROD3S109eOm5UMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy
YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvNWMwZGU0OWItYmRiYy0z
ZjliLTkwODEtZmIzNTgxYjNlOGMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj
OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz
YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi
OWY5M2FhNmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmC4wMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABv2SRYZIqJPSzfg2CdQ1Ju5WPODVCxMU4DgDh/0Ga74KKCtbtMOJaJu
6eYqlNN5jMNdDIs36+9Dv77+LnvvIvB1W81U+m29BUB0MgEA37R7jevgbFZzWNj5
7Nny2v85C/EVlI6VYc5WItsoE0mYZFj5Dh5R0iEOmaffkUoAtNwNA21Ta2WeUOA3
XM8vnBvVY0XU/ler4lxiouYa5OK5hDdzf+cCn6edsTb3XUEafzjkdcetMzKRE9k0
91x+MTe7XNHRNBfbN2gpR15jRjGrlqZkDyFV9c1AJzeoWOMSYTKL0LdMCXlAtXNj
LYiUVMhYYaA1yJSq63Pl9fgnmVpF5Hs=
-----END CERTIFICATE-----
Generated at Mon Oct 20 14:27:09 2025 by rpki-client