Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/6e2adaeb-8e95-358b-bc34-0a27ae951780.roa
File:                     6e2adaeb-8e95-358b-bc34-0a27ae951780.roa (raw, json)
Hash identifier:          9Snz/b0bDV5kq4Jy812RCc0OzPU2hFm3wDF6p+kzjtc=
Subject key identifier:   1A:89:FE:E0:C8:BD:3B:70:F1:D1:7A:E1:BE:A1:9A:09:D5:47:A3:D4
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F4328584972E2EF2255F02A387423AC80
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/6e2adaeb-8e95-358b-bc34-0a27ae951780.roa
Signing time:             Mon 07 Apr 2025 16:33:13 +0000
ROA not before:           Mon 07 Apr 2025 16:33:13 +0000
ROA not after:            Sun 06 Jul 2025 16:33:13 +0000
asID:                     81
IP address blocks:        152.46.13.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:72:e2:ef:22:55:f0:2a:38:74:23:ac:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: Apr  7 16:33:13 2025 GMT
            Not After : Jul  6 16:33:13 2025 GMT
        Subject: CN=2c42c629-78b6-4308-accf-dc6fcfa94dce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:46:00:ec:67:6c:7c:7b:c3:54:99:a9:26:2a:
                    b6:f4:7d:be:7e:f6:70:bc:99:b7:00:80:be:e2:8f:
                    d1:12:b1:d1:44:5a:cc:fb:5e:0f:b8:b4:01:1a:18:
                    80:5b:23:8c:78:47:d3:06:22:31:2c:d0:c2:e2:00:
                    46:0c:99:fa:14:28:9a:cd:cc:b3:db:63:d2:a9:7d:
                    92:20:ed:0e:ff:05:e4:ae:67:d3:df:c1:b3:92:4a:
                    c6:52:2f:22:ad:ea:6f:1a:47:c4:66:2e:64:af:11:
                    49:08:ec:cd:b4:02:7e:e4:d1:60:1f:8b:06:b0:d9:
                    da:10:dc:75:62:8f:eb:23:db:02:4f:2c:e5:39:1b:
                    09:37:a7:46:40:12:c9:87:ee:b8:ab:b2:12:30:a4:
                    1f:8a:e1:b7:8b:e2:72:6a:bb:05:fb:59:d5:40:a4:
                    fd:6f:7f:da:11:55:09:8a:54:6f:9e:42:63:7c:75:
                    55:9d:7e:37:7e:bd:77:fe:fb:41:f2:4a:bf:c5:c7:
                    31:6b:e6:40:38:a3:4c:8a:e6:ca:2e:ba:6f:d8:fd:
                    93:61:69:d8:52:58:35:33:25:ed:82:46:36:f1:86:
                    2f:7a:39:8c:37:07:ac:48:fc:d5:0f:79:66:4a:03:
                    5b:88:7a:7f:b0:3e:ac:1c:5d:69:88:3c:0e:30:9e:
                    43:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:89:FE:E0:C8:BD:3B:70:F1:D1:7A:E1:BE:A1:9A:09:D5:47:A3:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/6e2adaeb-8e95-358b-bc34-0a27ae951780.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.46.13.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:4c:2c:1d:18:1d:c4:a0:ff:9c:22:18:15:a8:ee:42:57:00:
         8c:a9:f3:21:56:1d:da:b5:fa:ef:45:8a:30:2e:51:44:90:78:
         a8:75:80:13:91:8c:d1:96:a7:9a:d2:4d:d2:53:3c:f1:fc:e0:
         54:66:bf:be:d8:e2:39:c8:3b:7b:df:8f:97:ce:ec:4c:a8:ef:
         8e:23:34:b3:05:84:43:70:f2:03:9b:7c:f2:83:8c:31:ca:a9:
         c4:1c:dd:81:08:2e:b4:e3:d7:25:81:36:d5:88:e2:e7:68:51:
         88:ad:b4:f8:30:df:d5:d1:0d:34:57:64:18:cc:1e:a4:e6:ec:
         0e:25:13:43:d7:ac:97:08:72:ed:96:0e:34:44:15:12:bb:59:
         56:cc:7d:75:16:f8:d2:37:0d:b0:59:d8:ae:68:0b:ab:a1:ae:
         07:5e:6c:b3:ab:4f:c7:3b:03:ce:bd:cf:9a:b1:13:91:f1:91:
         3c:37:c6:0d:2f:83:9f:25:43:36:53:be:87:2c:6a:09:bf:5b:
         b8:fa:9d:d5:0f:db:ef:35:ee:1c:60:3a:8b:4b:14:b5:4d:25:
         14:c4:9c:67:10:8b:81:cb:62:eb:e1:fb:73:97:67:18:af:48:
         fd:e0:a7:ff:1c:1f:4e:9f:a7:64:a2:ee:90:de:2f:f9:8e:49:
         d0:f1:b7:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 10:34:14 2025 by rpki-client