Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/6826ee1c-7572-3f64-be24-9736bb879937.roa
File:                     6826ee1c-7572-3f64-be24-9736bb879937.roa (raw, json)
Hash identifier:          YrCzInkXkL870QP9t2DcOQTX3RZ3xmlJc5OJdFdW3lc=
Subject key identifier:   D5:87:F7:B6:5F:D5:19:7A:20:71:11:1C:40:99:54:98:1C:CE:A2:F1
Certificate issuer:       /CN=db4d75ea-96e7-4c66-a4af-45b48eef2e06
Certificate serial:       010D0C9F432858496CE445424BC4ACCBAC668640
Authority key identifier: B4:A8:3C:51:8D:BA:4A:4A:95:D9:7D:B9:E5:74:A9:66:50:58:F7:2B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/6826ee1c-7572-3f64-be24-9736bb879937.roa
Signing time:             Sat 05 Apr 2025 13:01:01 +0000
ROA not before:           Sat 05 Apr 2025 13:01:01 +0000
ROA not after:            Fri 04 Jul 2025 13:01:01 +0000
asID:                     33442
IP address blocks:        149.23.9.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:6c:e4:45:42:4b:c4:ac:cb:ac:66:86:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=db4d75ea-96e7-4c66-a4af-45b48eef2e06
        Validity
            Not Before: Apr  5 13:01:01 2025 GMT
            Not After : Jul  4 13:01:01 2025 GMT
        Subject: CN=9ea43bef-8201-4000-9566-8dd0711130b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ba:14:a5:a9:28:13:bd:92:22:46:d4:fa:04:
                    d2:03:9a:23:d2:07:ce:72:5b:41:5d:09:75:81:97:
                    bf:3f:f9:ca:01:64:87:12:a6:9e:4f:0d:cd:cc:64:
                    17:f7:49:de:83:98:5e:85:74:bd:f5:e7:3b:88:64:
                    ff:3b:41:4f:bc:aa:51:ef:95:6b:14:97:51:47:2b:
                    03:46:95:ea:2b:29:18:3e:b3:f0:51:a8:42:b7:3f:
                    65:a2:b0:a6:86:78:7e:e5:53:29:38:79:20:20:3a:
                    7d:4c:59:fa:e4:6b:5e:34:a0:c1:2a:66:d9:aa:62:
                    89:76:6b:c2:71:93:b1:5e:f9:39:39:36:97:7d:fd:
                    4a:a6:44:a6:80:15:18:e7:07:8c:0f:67:21:bd:bf:
                    42:b5:9f:64:22:c0:bc:c8:4d:af:82:a2:0f:d9:41:
                    f8:0e:52:d4:07:2f:c2:c3:c6:58:70:4e:b2:c4:90:
                    d2:04:f4:e5:bb:24:0a:3d:bc:fd:dc:1f:80:e6:21:
                    aa:7c:b9:40:74:ae:17:7b:a7:f3:90:0b:84:22:00:
                    e5:a4:c4:ac:47:17:82:e8:de:5a:7a:ba:f3:59:3d:
                    4c:70:2b:58:d7:42:7a:60:2b:f2:fb:9b:97:1f:91:
                    60:2f:2a:42:cf:d3:be:13:72:fb:4b:f5:ca:50:4a:
                    09:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:87:F7:B6:5F:D5:19:7A:20:71:11:1C:40:99:54:98:1C:CE:A2:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/6826ee1c-7572-3f64-be24-9736bb879937.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.crl

            X509v3 Authority Key Identifier:
                keyid:B4:A8:3C:51:8D:BA:4A:4A:95:D9:7D:B9:E5:74:A9:66:50:58:F7:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.23.9.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:35:12:1b:79:0c:b0:ba:af:cc:91:65:5a:89:b6:0a:6e:af:
         0c:f3:41:9f:0b:ec:9f:4d:51:19:8a:10:de:3a:a0:16:e7:dc:
         0e:1a:5e:b9:7b:22:b3:67:8b:25:a3:80:b2:d1:15:e1:b2:2a:
         24:9f:dc:e0:bf:e5:f0:0b:d3:35:be:67:e3:59:4f:c8:ac:4d:
         03:9d:b8:0d:fb:46:6b:8d:8a:ec:a1:35:43:78:b0:05:7e:41:
         df:db:be:6f:d8:05:ad:69:45:a9:9e:22:eb:fb:03:94:ed:31:
         e1:2d:d2:2f:de:0d:de:ed:4b:e6:c8:9d:59:9e:a7:83:73:9f:
         7e:cf:e5:a1:e9:d2:35:81:57:ae:0d:ea:16:c3:0d:bd:ca:fe:
         7b:9b:d4:7e:aa:5a:c1:79:c6:1c:14:69:ea:93:42:33:4d:89:
         43:a1:da:ec:f8:1a:1a:1f:86:35:a9:ce:a8:19:8a:fc:9c:7f:
         21:65:5b:6f:3d:52:cc:c0:d7:2f:45:dc:e4:15:be:2d:66:ef:
         4e:c0:20:a7:e8:23:76:10:88:6f:1d:5f:72:c2:73:64:e0:d6:
         85:7e:a4:ba:fa:d0:13:b0:ed:9e:9f:a1:53:30:3e:b9:d2:a9:
         6e:ee:46:b6:2c:bc:66:1f:ea:09:c0:e9:46:b2:23:21:64:35:
         f3:9d:7b:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 01:07:16 2025 by rpki-client