Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/e6c0a853-19f6-3e15-ad8c-cd1cc126d085.roa
File:                     e6c0a853-19f6-3e15-ad8c-cd1cc126d085.roa (raw, json)
Hash identifier:          A8+tl14D5boY+YyyNrzRnK4DtyRpRScrBCsLwwPBsjg=
Subject key identifier:   00:6A:63:F1:5A:03:8B:C8:E3:BF:B9:C7:A1:AB:E2:A7:D0:11:63:8C
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F4328584A363FF68AD237C067B8ED4E00
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/e6c0a853-19f6-3e15-ad8c-cd1cc126d085.roa
Signing time:             Mon 16 Jun 2025 16:03:17 +0000
ROA not before:           Mon 16 Jun 2025 16:03:17 +0000
ROA not after:            Sun 14 Sep 2025 16:03:17 +0000
asID:                     81
IP address blocks:        152.46.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:36:3f:f6:8a:d2:37:c0:67:b8:ed:4e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: Jun 16 16:03:17 2025 GMT
            Not After : Sep 14 16:03:17 2025 GMT
        Subject: CN=a14c7a41-1f89-4b00-89d3-02d30836c622
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:ab:f0:21:2e:ff:a7:97:67:31:91:b9:cd:30:
                    84:d5:68:17:2f:9e:4f:55:2b:b7:18:79:c5:d0:16:
                    b4:ab:72:5d:3c:c3:32:2b:dd:19:14:d6:1d:d7:5f:
                    18:40:f7:bf:d3:4c:8f:d0:60:8d:b4:0c:e7:02:e2:
                    d6:d7:e3:b5:36:d9:68:cf:36:3e:e2:74:fc:4d:ce:
                    f3:cd:97:28:13:21:7a:88:e5:61:f6:47:54:23:4a:
                    5f:5c:94:50:2d:61:e6:b5:79:3b:85:f8:a1:bb:a7:
                    70:06:bc:96:7e:70:74:b3:4a:e7:3b:b4:2f:5b:59:
                    ef:00:06:17:f9:6a:8b:ec:31:f4:4b:ec:7f:1f:14:
                    12:d5:85:5e:57:ba:64:c3:70:f8:83:dd:97:3c:53:
                    e9:0c:6d:2e:84:e6:e4:5c:aa:b0:bb:42:92:56:f8:
                    68:9b:31:39:1e:d9:8a:bf:d8:11:99:89:e5:b5:19:
                    65:2a:0a:f7:df:66:93:8a:85:b4:03:17:83:c7:fc:
                    02:0e:19:e1:4d:e2:b5:2c:7c:90:f2:99:67:46:3c:
                    18:85:e8:fc:af:d7:58:83:0e:c8:61:54:c9:83:09:
                    f2:d9:94:8b:7e:10:e4:8e:de:71:36:7a:6b:db:55:
                    db:92:67:16:0f:a7:e6:d3:23:15:57:5a:d5:10:e0:
                    45:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:6A:63:F1:5A:03:8B:C8:E3:BF:B9:C7:A1:AB:E2:A7:D0:11:63:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/e6c0a853-19f6-3e15-ad8c-cd1cc126d085.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.46.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:95:b2:a9:d7:7e:cd:8c:32:15:9d:61:ed:3c:91:98:e5:76:
         3e:86:3b:09:86:32:be:bc:e9:a5:1d:47:e9:43:ce:03:10:bd:
         81:05:78:a0:57:a0:1b:88:ae:5a:f6:41:23:7b:7d:4a:78:c5:
         4e:8c:0e:62:c9:02:ac:96:76:62:08:dc:54:a0:a1:05:d2:d4:
         47:2a:01:71:07:71:b0:e0:ab:f5:f8:bf:6b:0d:59:b5:93:c2:
         2e:b3:f6:0c:b3:3f:ae:94:8c:29:a5:61:e4:dc:95:1b:ba:3f:
         48:72:56:d1:d4:0f:95:0b:67:49:44:df:34:c5:f6:48:d3:8b:
         75:c4:d3:9d:fc:08:5f:8b:86:b9:d0:47:c1:6f:07:f3:82:9c:
         f0:88:d6:14:37:eb:4f:2a:53:15:aa:1e:bd:92:b6:49:d2:92:
         fb:75:fd:e3:7b:b4:db:7c:af:b8:af:10:34:6a:9e:7e:ac:b1:
         d3:cd:01:df:66:f3:ba:15:8c:0d:4f:d3:7e:f0:77:4a:e9:93:
         44:09:b5:9f:1b:fe:e2:a7:73:fd:2e:e6:10:bb:35:9b:47:03:
         33:86:30:e7:1f:09:90:a9:f2:4f:c0:bd:ad:10:8d:14:f7:29:
         4b:c3:73:ef:a2:ae:ae:47:44:b2:3d:9c:68:6d:d7:99:98:5e:
         88:d5:0d:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 07:56:59 2025 by rpki-client