Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/b2de7607-4c76-3d07-86df-31b7f915ff61.roa
File:                     b2de7607-4c76-3d07-86df-31b7f915ff61.roa (raw, json)
Hash identifier:          HmgGVLYiOikwBTbqyF/eVaI/sl0q5H42Bwszzdn3SAQ=
Subject key identifier:   21:9C:CD:92:EA:4B:4A:6A:B4:29:F1:4E:AD:2F:4B:2D:85:8C:0E:01
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F4328584B7A0C6C02CE0B22B21B252600
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/b2de7607-4c76-3d07-86df-31b7f915ff61.roa
Signing time:             Fri 10 Oct 2025 15:41:21 +0000
ROA not before:           Fri 10 Oct 2025 15:41:21 +0000
ROA not after:            Thu 08 Jan 2026 16:41:21 +0000
asID:                     81
IP address blocks:        152.45.11.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7a:0c:6c:02:ce:0b:22:b2:1b:25:26:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: Oct 10 15:41:21 2025 GMT
            Not After : Jan  8 16:41:21 2026 GMT
        Subject: CN=8bca0156-6135-40d7-9410-099d63696fe9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:72:20:5f:77:1a:1d:9a:76:76:44:00:37:8c:
                    52:b7:1e:37:80:e7:cd:76:ab:23:41:c7:a2:18:51:
                    f9:5c:09:7a:be:39:5b:7f:ce:f8:4f:06:cb:bd:8b:
                    91:87:58:84:64:83:78:1e:17:28:42:c2:b1:73:24:
                    e6:f5:62:f5:19:a9:09:c0:97:bf:1b:17:f8:5c:fc:
                    3f:5c:53:c2:14:29:07:62:d6:5a:1f:0d:0b:30:b7:
                    9c:f4:a9:d1:02:0b:69:29:eb:ef:c0:cd:df:cf:9f:
                    b5:07:a8:bd:13:8a:6a:e3:8f:69:64:ae:9c:d1:b5:
                    73:53:08:df:45:bb:7d:54:c9:11:6e:41:62:18:9d:
                    51:7a:c9:c7:bb:07:f5:bf:1c:27:dc:28:c0:f9:df:
                    d1:a5:39:fb:6a:0d:2a:67:4d:cc:3e:10:c2:cf:c0:
                    ef:0b:20:9b:e9:8d:4e:69:59:51:cb:53:99:4b:61:
                    88:3d:68:76:98:5e:e9:26:75:e9:77:b6:ec:65:2c:
                    53:b8:3c:4f:a7:35:d5:89:d3:ee:5b:e3:90:33:22:
                    ee:06:f6:e8:8e:7a:07:6c:2d:b3:ad:df:94:f4:88:
                    33:33:1b:af:1a:f6:c1:84:70:b4:af:6d:3d:b6:73:
                    62:6c:ac:08:a7:91:aa:20:82:44:50:c1:bc:f0:15:
                    16:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:9C:CD:92:EA:4B:4A:6A:B4:29:F1:4E:AD:2F:4B:2D:85:8C:0E:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/b2de7607-4c76-3d07-86df-31b7f915ff61.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.45.11.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:cb:ac:49:2b:dc:06:39:fc:d2:16:7e:fd:3f:67:0e:67:93:
         25:c2:17:56:7a:55:1b:40:75:af:03:36:88:8b:fa:4f:08:13:
         36:a0:78:5f:95:26:b2:4b:40:15:55:a9:4f:f5:c7:99:41:01:
         5b:ff:e6:57:71:e9:9d:02:7a:d8:5e:45:a7:42:7d:a8:17:aa:
         71:8b:ee:f4:76:99:40:7c:1d:0d:8e:cb:b3:d5:ff:1d:1e:c5:
         b6:6f:09:4e:0d:13:7f:8b:98:c9:1d:77:c5:34:3c:f1:d1:c1:
         fb:83:c7:71:15:89:07:31:37:a2:9d:21:2d:ae:0c:c2:71:5d:
         c5:52:08:2f:f4:bb:05:f1:d7:1d:cb:a9:15:ae:03:27:ee:ac:
         d0:89:8b:bb:bc:e4:64:97:e3:e9:07:5d:2c:38:7e:64:81:3a:
         76:0b:20:8d:61:f8:7f:f9:98:2d:09:a5:f9:3e:4a:8b:24:56:
         67:aa:cf:a7:d4:f7:12:88:95:c4:4f:9a:3f:9e:cf:69:23:6c:
         83:43:a2:da:14:c5:df:fd:70:b1:c7:30:e6:b0:09:fe:fb:f7:
         46:6e:fd:4c:01:44:fe:e0:04:03:b3:2e:07:a1:f8:e3:39:36:
         3a:dd:d3:7a:5d:83:ee:1e:61:dc:13:60:93:26:db:35:1a:68:
         55:e9:69:d4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt6DGwCzgsishslJgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh
YTZhMB4XDTI1MTAxMDE1NDEyMVoXDTI2MDEwODE2NDEyMVowLzEtMCsGA1UEAxMk
OGJjYTAxNTYtNjEzNS00MGQ3LTk0MTAtMDk5ZDYzNjk2ZmU5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8nIgX3caHZp2dkQAN4xStx43gOfNdqsjQcei
GFH5XAl6vjlbf874TwbLvYuRh1iEZIN4HhcoQsKxcyTm9WL1GakJwJe/Gxf4XPw/
XFPCFCkHYtZaHw0LMLec9KnRAgtpKevvwM3fz5+1B6i9E4pq449pZK6c0bVzUwjf
Rbt9VMkRbkFiGJ1ResnHuwf1vxwn3CjA+d/RpTn7ag0qZ03MPhDCz8DvCyCb6Y1O
aVlRy1OZS2GIPWh2mF7pJnXpd7bsZSxTuDxPpzXVidPuW+OQMyLuBvbojnoHbC2z
rd+U9IgzMxuvGvbBhHC0r209tnNibKwIp5GqIIJEUMG88BUWLQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCGczZLqS0pqtCnxTq0vSy2FjA4BMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy
YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvYjJkZTc2MDctNGM3Ni0z
ZDA3LTg2ZGYtMzFiN2Y5MTVmZjYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj
OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz
YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi
OWY5M2FhNmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmC0LMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAF7LrEkr3AY5/NIWfv0/Zw5nkyXCF1Z6VRtAda8DNoiL+k8IEzageF+V
JrJLQBVVqU/1x5lBAVv/5ldx6Z0CetheRadCfagXqnGL7vR2mUB8HQ2Oy7PV/x0e
xbZvCU4NE3+LmMkdd8U0PPHRwfuDx3EViQcxN6KdIS2uDMJxXcVSCC/0uwXx1x3L
qRWuAyfurNCJi7u85GSX4+kHXSw4fmSBOnYLII1h+H/5mC0Jpfk+SoskVmeqz6fU
9xKIlcRPmj+ez2kjbINDotoUxd/9cLHHMOawCf7790Zu/UwBRP7gBAOzLgeh+OM5
Njrd03pdg+4eYdwTYJMm2zUaaFXpadQ=
-----END CERTIFICATE-----
Generated at Mon Oct 20 14:27:13 2025 by rpki-client