Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/d9adc3c9-9f0c-3314-b2aa-0f1b44c205e1.roa
File:                     d9adc3c9-9f0c-3314-b2aa-0f1b44c205e1.roa (raw, json)
Hash identifier:          L1UwhaaHxTvL3b9FoJzriTSu/2GkfRqdkUJ94KjH+Gk=
Subject key identifier:   69:50:6C:F0:EB:81:2B:38:94:F5:A3:51:18:E2:9B:CF:99:00:34:64
Certificate issuer:       /CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc
Certificate serial:       010D0C9F4328584A146571912A53FE2C95132D80
Authority key identifier: 22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/d9adc3c9-9f0c-3314-b2aa-0f1b44c205e1.roa
Signing time:             Wed 04 Jun 2025 13:01:04 +0000
ROA not before:           Wed 04 Jun 2025 13:01:04 +0000
ROA not after:            Tue 02 Sep 2025 13:01:04 +0000
asID:                     33392
IP address blocks:        192.149.44.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 08 Jun 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:14:65:71:91:2a:53:fe:2c:95:13:2d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc
        Validity
            Not Before: Jun  4 13:01:04 2025 GMT
            Not After : Sep  2 13:01:04 2025 GMT
        Subject: CN=ed0264ca-c4b6-45a9-a674-a44a25f2ed06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:c3:0b:b9:76:cc:c5:ae:bb:e3:19:0e:36:64:
                    08:90:27:6d:6e:9f:a8:9b:d3:59:6c:f0:41:aa:17:
                    99:61:5c:2d:4d:e6:79:1d:8c:60:89:8f:57:af:48:
                    b1:7a:7e:72:c0:76:df:26:3b:ec:9e:06:74:07:c3:
                    a4:13:1e:9e:0d:95:28:0a:02:37:7b:51:4b:53:80:
                    d7:1c:07:b6:9b:17:a1:04:9f:58:1a:82:18:a2:09:
                    05:51:58:c5:ee:8c:d9:d6:a4:33:98:9b:b3:7a:27:
                    72:43:85:ff:67:29:8e:d2:65:2a:c5:2f:c3:3b:46:
                    cd:09:1e:c2:19:9f:ec:f1:07:a2:58:44:fa:ee:77:
                    74:f4:34:ea:79:3a:3c:0e:18:70:e3:f4:a3:41:c4:
                    ce:21:7f:1c:c0:6c:c9:a7:90:4a:91:09:80:67:1a:
                    53:2c:30:fb:2d:03:83:cf:c3:4a:ba:b8:17:b3:2f:
                    a9:26:c4:3e:3f:ab:61:da:01:e1:18:17:74:ef:93:
                    75:e2:83:05:85:d4:c0:af:31:90:9a:ac:b3:ba:19:
                    49:3f:c1:47:5f:7a:7c:86:14:bc:b5:3c:ca:8f:83:
                    0d:d5:93:7b:d0:99:6e:a3:7c:08:6a:c8:39:3e:43:
                    b9:3b:b4:51:4f:00:5b:be:d7:d3:36:19:6b:7e:12:
                    20:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:50:6C:F0:EB:81:2B:38:94:F5:A3:51:18:E2:9B:CF:99:00:34:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/d9adc3c9-9f0c-3314-b2aa-0f1b44c205e1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl

            X509v3 Authority Key Identifier:
                keyid:22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.149.44.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:82:4a:ec:ec:64:dd:67:2f:e8:e0:2b:b6:44:52:32:9b:a2:
         7b:42:fd:6b:6f:dd:23:a8:ff:2c:d9:b8:a8:cd:28:6e:f9:f2:
         b4:58:6f:70:db:1a:4b:2a:9b:22:a7:aa:5e:d6:82:84:e6:b0:
         f9:a8:9b:a1:c4:84:88:b6:ff:0f:cd:d4:f5:d8:3b:2f:e4:7e:
         25:1e:33:53:e1:bb:56:7a:49:05:09:fb:01:25:2b:c0:8a:7b:
         cc:5e:a3:76:b8:39:3c:3b:89:74:59:ab:dc:98:0f:06:7d:a1:
         32:aa:f9:e3:0b:e7:bf:1b:f7:51:f6:1a:7c:24:b0:29:6c:b8:
         0d:88:47:9b:31:1c:77:8e:f6:50:f3:47:b1:c9:c7:93:f7:f3:
         f2:9b:60:0a:58:34:d5:62:ae:47:e6:d9:d0:d6:3e:12:66:0c:
         ad:44:f6:36:01:d9:57:44:9d:9f:f6:f1:50:79:91:29:5d:53:
         e5:5b:e4:55:89:d1:e9:34:5a:a8:42:ab:f2:bd:b0:3f:87:49:
         64:af:92:23:9a:e1:48:12:64:96:fa:f4:58:ee:89:39:24:3e:
         38:34:81:e4:60:cc:dc:1f:1a:00:6f:84:65:77:c9:13:d9:6d:
         3c:f8:31:de:39:d1:3d:f0:67:31:61:a0:24:81:76:25:84:11:
         69:70:a6:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 10:20:52 2025 by rpki-client