Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/ece87911-eb04-3f8b-b543-d4ec140b60d1.roa
File:                     ece87911-eb04-3f8b-b543-d4ec140b60d1.roa (raw, json)
Hash identifier:          64m9SmRikCnhSiHOC2pVAFmsx+rYYdbChFy8iKayUTQ=
Subject key identifier:   FB:B9:EE:9A:D3:26:07:E2:DE:BB:A9:8E:73:FF:87:76:1D:D9:55:C6
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F4328584972E2EBC2C8278F45E9D19B80
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/ece87911-eb04-3f8b-b543-d4ec140b60d1.roa
Signing time:             Mon 07 Apr 2025 16:33:12 +0000
ROA not before:           Mon 07 Apr 2025 16:33:12 +0000
ROA not after:            Sun 06 Jul 2025 16:33:12 +0000
asID:                     81
IP address blocks:        152.26.192.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 May 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:72:e2:eb:c2:c8:27:8f:45:e9:d1:9b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: Apr  7 16:33:12 2025 GMT
            Not After : Jul  6 16:33:12 2025 GMT
        Subject: CN=4e606bd6-fd44-485a-8084-efc23e1f8d4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:30:1a:a7:56:85:bb:9d:d8:db:42:cc:03:d9:
                    7c:79:b3:2c:2b:2b:41:89:d2:9b:3c:0e:e2:9f:63:
                    91:0e:19:53:8d:57:1f:88:30:29:f8:dc:41:35:da:
                    c6:2f:50:06:c9:57:cf:36:aa:28:6c:7f:79:e1:9c:
                    3f:c9:dc:f8:72:b1:31:db:03:28:7a:6f:fc:11:43:
                    ae:f9:af:ef:75:59:90:1f:74:50:fd:08:96:ed:ed:
                    2d:1e:8c:f5:8c:46:6a:af:76:db:53:c1:0a:ed:e2:
                    7b:62:af:89:6c:e4:52:40:d8:48:16:0d:86:19:13:
                    3d:40:3d:98:e6:e2:04:6a:fd:14:ab:c0:16:f2:11:
                    20:ca:0f:22:03:6e:75:67:d4:76:6b:3f:37:e3:8f:
                    ca:17:3c:ca:10:cf:c7:28:f2:5d:e4:99:19:6c:31:
                    8e:f2:9d:22:f8:dd:ce:49:1d:2d:e5:70:58:34:0c:
                    e6:fc:71:b5:d4:85:14:f9:ca:c9:c0:7e:17:0e:81:
                    97:1c:f3:69:89:41:85:0a:62:78:c6:5f:ed:9a:9c:
                    8a:ce:8d:db:d8:cc:e6:c3:60:a1:df:9c:08:2a:06:
                    46:d7:df:fb:dc:d4:c6:e9:65:a8:81:47:ea:46:ac:
                    9e:e5:d7:ab:4a:48:8a:0f:3c:3c:80:40:a9:6e:19:
                    31:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:B9:EE:9A:D3:26:07:E2:DE:BB:A9:8E:73:FF:87:76:1D:D9:55:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/ece87911-eb04-3f8b-b543-d4ec140b60d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.26.192.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:0b:41:97:25:5d:74:1a:49:4f:f0:b7:7e:fc:1a:3f:03:39:
         ad:af:fb:f9:0f:9b:2c:a6:75:fe:86:80:2d:3b:ae:78:c8:df:
         ae:1f:ea:11:75:ba:88:dc:61:34:c1:2b:96:80:46:ba:27:97:
         3f:89:f2:02:f2:c0:de:af:6c:45:fb:9b:72:1c:a2:16:11:c5:
         fd:6a:a9:ee:f9:bd:2b:04:af:20:e1:8e:c1:50:3d:f4:b8:61:
         90:5a:c7:38:7d:83:fe:81:53:40:48:f2:24:e1:90:4d:b5:3b:
         42:84:58:32:00:28:ba:1b:55:e5:22:af:d9:3b:15:74:0f:e3:
         13:65:63:ca:81:0a:e3:bf:65:09:44:15:a4:2e:02:dd:6f:f1:
         6f:f9:e3:de:93:7f:eb:98:f7:91:5a:d3:c3:cd:99:7c:38:bd:
         c0:ea:91:f2:38:52:fb:76:44:9b:5f:2a:cf:f4:92:a5:03:47:
         3e:de:90:92:43:14:36:60:80:0a:61:62:f7:1d:3f:ed:7f:6a:
         62:0e:68:ba:93:b5:10:ef:c2:70:38:fc:bf:bc:7e:20:33:4c:
         81:97:cd:44:cc:de:56:29:df:4e:39:4e:3d:4b:6d:82:47:54:
         69:1b:67:d5:76:8b:1b:f0:de:ee:21:44:cd:c4:ec:b4:d3:4d:
         46:67:0f:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 06:24:26 2025 by rpki-client