Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/6826ee1c-7572-3f64-be24-9736bb879937.roa
File:                     6826ee1c-7572-3f64-be24-9736bb879937.roa (raw, json)
Hash identifier:          BuMi0+4xqnJXEiqC+oHsHd6L5unzv4CtT5F4fxlfXmY=
Subject key identifier:   BC:58:E5:E2:58:8D:A2:BB:D9:B4:E3:CA:90:F5:54:9E:84:E1:8E:6B
Certificate issuer:       /CN=db4d75ea-96e7-4c66-a4af-45b48eef2e06
Certificate serial:       010D0C9F4328584B2CF6D671915F1A2A719F8A40
Authority key identifier: B4:A8:3C:51:8D:BA:4A:4A:95:D9:7D:B9:E5:74:A9:66:50:58:F7:2B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/6826ee1c-7572-3f64-be24-9736bb879937.roa
Signing time:             Sat 13 Sep 2025 01:00:33 +0000
ROA not before:           Sat 13 Sep 2025 01:00:33 +0000
ROA not after:            Fri 12 Dec 2025 02:00:33 +0000
asID:                     33442
IP address blocks:        149.23.9.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2c:f6:d6:71:91:5f:1a:2a:71:9f:8a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=db4d75ea-96e7-4c66-a4af-45b48eef2e06
        Validity
            Not Before: Sep 13 01:00:33 2025 GMT
            Not After : Dec 12 02:00:33 2025 GMT
        Subject: CN=d514eaa9-07a5-48dc-a544-1e4c487a4a15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:bd:41:95:b5:c0:48:7e:b4:e9:ef:68:dc:a5:
                    4b:ac:80:a4:43:6e:be:e3:c3:26:c4:56:28:8d:0d:
                    da:b7:fe:ea:82:c2:8f:a0:6f:f7:a3:df:da:ae:a2:
                    25:c5:5d:1f:b1:d7:43:e8:0a:e5:20:20:a3:79:a0:
                    3a:78:6e:56:8d:32:72:1f:ab:ef:b6:1b:46:f7:61:
                    0c:fd:5f:8e:c4:c6:af:7b:0f:74:d6:d4:f8:2b:bb:
                    27:d7:32:9c:58:88:41:f1:36:fa:eb:74:1c:15:4d:
                    c0:76:2c:14:df:89:10:18:50:25:60:89:50:61:d1:
                    2d:e7:7b:9f:95:44:87:11:94:d5:b4:af:10:e7:28:
                    07:e6:97:3c:dc:e0:8d:c2:b0:a1:70:4c:11:b8:6f:
                    67:62:db:63:c7:14:31:2e:85:88:2d:02:76:d3:b3:
                    76:40:d2:a6:6f:16:c1:fd:3d:d3:9a:96:36:83:ea:
                    70:b5:8b:62:e2:b3:f7:8c:e0:1f:fc:fc:36:d9:57:
                    42:86:7b:c7:a1:8a:2a:38:b2:93:58:33:63:f9:1c:
                    fc:de:a0:95:87:5f:e2:3c:df:1d:d7:bf:13:40:14:
                    fd:81:f0:1e:fc:56:83:03:1e:43:3b:42:dc:8e:ce:
                    88:35:c7:ad:23:d1:d0:56:f0:99:ac:ed:05:b9:cc:
                    e1:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:58:E5:E2:58:8D:A2:BB:D9:B4:E3:CA:90:F5:54:9E:84:E1:8E:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/6826ee1c-7572-3f64-be24-9736bb879937.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.crl

            X509v3 Authority Key Identifier:
                keyid:B4:A8:3C:51:8D:BA:4A:4A:95:D9:7D:B9:E5:74:A9:66:50:58:F7:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.23.9.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:5a:92:2d:f1:52:94:c4:88:d5:1e:b1:22:30:1c:6f:70:43:
         34:38:88:63:64:66:da:75:48:4a:e5:f2:14:a5:8a:e3:1a:5d:
         0e:e7:5b:a1:78:a9:32:c5:7c:2a:b2:20:64:0d:6f:a6:5d:c1:
         ad:7c:eb:ce:27:8a:d1:8d:80:77:f5:10:9e:5a:ef:35:f7:e4:
         75:a2:88:77:d1:12:b4:3e:c9:b7:60:4d:01:c0:08:4c:09:53:
         73:85:bb:51:5f:67:36:f5:fa:0b:0a:a0:10:d8:73:b9:f7:14:
         2a:9e:b8:0f:ac:e5:c7:74:53:8d:cd:8d:33:8a:c1:a6:07:38:
         d0:da:11:33:22:e2:1d:47:9b:b7:de:e8:bc:74:dc:d7:88:b0:
         55:7a:b8:81:7f:72:90:15:c6:a5:9b:28:74:20:34:80:bc:f4:
         7c:14:05:cf:ef:21:98:24:a2:6e:53:5c:af:ca:01:17:c6:e5:
         26:9d:17:89:cc:04:05:d8:55:11:44:f1:7a:84:e4:d4:22:f2:
         03:be:7e:cb:ac:63:56:0c:ce:9f:fb:03:16:48:cd:39:8c:e4:
         b2:e7:ec:bc:91:fc:b1:ad:86:19:c1:e1:79:ae:1d:4c:cf:c1:
         99:31:1b:fa:93:e9:86:c3:a7:b0:ff:21:b8:99:3c:69:bb:25:
         54:ce:af:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 01:34:22 2025 by rpki-client