Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/b3c0255a-5a1e-368e-b84f-c3c56f0b30f2.roa
File:                     b3c0255a-5a1e-368e-b84f-c3c56f0b30f2.roa (raw, json)
Hash identifier:          XiIk3VkpYfUpsy+MvmGhYomH+2YJHvdtULIIgwUz3tg=
Subject key identifier:   CD:BC:02:FA:81:B9:7B:4B:8A:A9:A0:11:AB:59:96:AC:B8:CF:18:55
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F4328584B7A0C6C69C953D49467764F80
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/b3c0255a-5a1e-368e-b84f-c3c56f0b30f2.roa
Signing time:             Fri 10 Oct 2025 15:41:21 +0000
ROA not before:           Fri 10 Oct 2025 15:41:21 +0000
ROA not after:            Thu 08 Jan 2026 16:41:21 +0000
asID:                     81
IP address blocks:        152.45.6.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7a:0c:6c:69:c9:53:d4:94:67:76:4f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: Oct 10 15:41:21 2025 GMT
            Not After : Jan  8 16:41:21 2026 GMT
        Subject: CN=4cc9fc3c-9cdc-4b1d-8e63-cbe3431d1531
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:36:d5:f9:ac:c0:dc:0a:f0:27:f1:9d:49:ce:
                    7f:75:84:72:d5:b5:95:a5:bb:38:c1:3a:ef:d1:32:
                    ba:dc:6d:d6:c5:f0:c6:54:33:91:99:35:e8:5d:4d:
                    03:33:9a:02:ea:99:80:1b:48:99:b1:db:c2:e1:af:
                    3d:33:0e:36:2f:1a:63:41:0d:3f:9c:f0:d8:5d:7e:
                    40:d1:4a:83:aa:47:f8:c9:9e:5e:4f:10:b1:5f:63:
                    e0:5e:dc:ef:48:d4:56:14:f3:05:8d:da:52:ce:da:
                    d6:71:3b:9c:f7:48:83:be:bd:2c:58:91:e2:52:18:
                    ed:f6:c8:fd:42:ca:e8:74:69:a7:fc:5a:b6:aa:34:
                    bb:c7:43:76:a8:69:99:e2:60:fe:19:cf:aa:af:de:
                    f4:de:17:0f:1c:90:30:b6:ad:1a:6c:e3:2a:da:56:
                    5a:e0:f4:f4:e1:5b:1c:bf:bc:e1:10:d4:b1:5a:88:
                    54:4e:ed:9b:f1:0d:9d:51:b4:7c:15:80:86:d7:af:
                    a3:a1:76:9c:b7:42:04:16:24:3a:ef:c9:3e:ac:08:
                    e2:82:76:49:10:c1:17:c3:00:df:74:1a:8d:46:59:
                    20:f3:56:81:27:2e:e8:dc:d4:e0:44:e5:72:70:86:
                    f4:50:06:32:c7:ff:4d:32:3f:ff:ca:4d:3b:53:b2:
                    c5:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:BC:02:FA:81:B9:7B:4B:8A:A9:A0:11:AB:59:96:AC:B8:CF:18:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/b3c0255a-5a1e-368e-b84f-c3c56f0b30f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.45.6.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:14:05:cb:8b:74:38:d4:a3:ad:9f:81:48:d4:45:35:9e:69:
         f6:f6:d5:38:bc:49:de:62:38:c3:9b:67:b7:41:d1:36:67:3a:
         91:2e:4d:84:ad:5b:2f:04:5b:f4:9c:da:91:6f:f7:f9:f7:16:
         82:27:7a:a0:ab:be:ea:71:f0:98:a2:d0:01:cb:32:27:aa:3d:
         34:7a:c7:76:ed:08:8e:89:10:65:d1:64:d5:b6:09:95:65:71:
         de:19:5e:1b:bc:20:f2:23:c5:16:00:be:e9:bd:c1:80:01:a6:
         0b:19:0f:20:de:46:65:cb:f6:41:67:42:99:40:4c:55:da:e1:
         34:a0:af:e7:48:ac:7d:0b:fc:be:d0:12:e3:2a:93:67:ac:69:
         2e:a2:3e:7c:64:43:3b:78:5f:5c:ec:a6:16:86:a2:29:5c:70:
         62:b6:ee:bb:47:66:d1:6f:ca:24:3f:49:d1:7c:92:50:7c:37:
         b8:64:a9:a8:d8:88:51:af:75:5e:7a:46:d9:08:fe:8b:e8:92:
         3f:03:3a:2d:40:cc:40:ce:bf:13:dc:5a:25:b4:47:14:71:1e:
         df:bc:57:da:fa:0f:04:41:5b:35:a2:4a:3e:58:a7:ff:2f:51:
         16:8c:5d:38:d0:43:d8:eb:c3:44:a0:bc:7e:f7:c3:c0:ea:36:
         f1:ef:4e:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:27:21 2025 by rpki-client